Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/3137372e38372e3132382e302f32322d3332203d3e20323632333032.roa
File:                     3137372e38372e3132382e302f32322d3332203d3e20323632333032.roa (raw, json)
Hash identifier:          9XfKDmkOnuDsEbvRxWedFyaDSXL1agqEas2GbnbX63U=
Subject key identifier:   00:0F:41:15:D4:95:94:C6:92:5A:AC:6D:49:00:CC:DA:87:2C:F4:D7
Certificate issuer:       /CN=901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F
Certificate serial:       68073B488BD2B7DFBEC2BDF4A1ECD35410469FD9
Authority key identifier: 90:1A:65:E3:E0:FE:6E:92:2A:42:C5:C9:7F:BA:18:CA:D6:A0:AF:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/3137372e38372e3132382e302f32322d3332203d3e20323632333032.roa
Signing time:             Thu 05 Feb 2026 00:00:31 +0000
ROA not before:           Wed 04 Feb 2026 23:55:31 +0000
ROA not after:            Thu 04 Feb 2027 00:00:31 +0000
asID:                     262302
IP address blocks:        177.87.128.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.crl
                          rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 03:36:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:07:3b:48:8b:d2:b7:df:be:c2:bd:f4:a1:ec:d3:54:10:46:9f:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F
        Validity
            Not Before: Feb  4 23:55:31 2026 GMT
            Not After : Feb  4 00:00:31 2027 GMT
        Subject: CN=000F4115D49594C6925AAC6D4900CCDA872CF4D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c0:6e:d7:fc:b7:69:91:cd:f5:08:28:dd:d9:
                    c7:76:39:96:dd:5c:18:0d:fd:fd:5f:77:35:c4:28:
                    9d:8a:69:85:9a:c2:25:5d:1a:c3:07:c0:10:ae:88:
                    ab:02:79:83:16:5e:97:56:80:7c:34:e3:dc:d2:6f:
                    bd:c5:be:04:50:7b:6c:cb:01:47:13:45:c3:cc:91:
                    b9:2b:65:01:6b:bb:fc:fb:5c:f5:8d:93:18:b8:a8:
                    46:c0:a5:2b:89:8a:41:fb:0c:6b:fa:c7:bf:16:c2:
                    96:aa:3c:15:1b:fc:94:90:b0:80:df:5e:99:15:ed:
                    85:b9:cd:57:37:f7:d4:b4:fa:cd:bc:87:26:27:2e:
                    4c:c1:8b:14:fe:7f:d8:82:38:cd:f0:d4:99:43:21:
                    2a:d5:22:35:12:78:f9:9a:91:ee:0f:e0:dd:fc:41:
                    67:ba:35:48:14:05:93:bd:5e:27:ac:75:ee:cd:c2:
                    ef:9d:70:45:77:f8:5f:0f:5f:ef:63:5d:fb:80:01:
                    c3:07:2d:ea:1a:8c:e3:23:01:ba:26:d9:71:22:22:
                    cf:aa:9f:84:a5:17:8f:f8:71:c7:52:77:4d:21:85:
                    46:dc:88:65:9a:98:b5:ba:68:f7:57:6f:f0:7f:cb:
                    3a:4a:98:ea:30:d5:86:96:f8:d9:f2:9c:fc:7a:5b:
                    83:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:0F:41:15:D4:95:94:C6:92:5A:AC:6D:49:00:CC:DA:87:2C:F4:D7
            X509v3 Authority Key Identifier:
                keyid:90:1A:65:E3:E0:FE:6E:92:2A:42:C5:C9:7F:BA:18:CA:D6:A0:AF:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/3137372e38372e3132382e302f32322d3332203d3e20323632333032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:cf:96:08:88:c8:a6:76:a5:09:c7:85:4b:16:35:45:40:4b:
         a3:b6:73:b5:8e:7c:71:06:20:57:bd:3e:c3:0c:fb:18:4c:06:
         fe:9e:3f:6e:05:89:27:73:1c:96:85:bd:a8:f9:a2:d4:42:ff:
         4f:b9:b0:b6:32:9e:03:de:8a:69:d0:1e:3a:e8:37:b4:52:87:
         c5:84:ce:2f:cd:e6:e2:7f:ae:3f:f6:f2:7f:32:38:08:41:9a:
         cd:71:4a:d0:be:40:cd:8e:b2:0e:f0:a1:25:7c:8e:2f:74:7b:
         cf:f2:22:12:d8:25:20:29:42:c8:d4:97:86:41:ac:1c:14:42:
         82:1c:c5:8e:81:1a:94:86:ad:71:6e:b0:2f:ce:1d:69:a2:6c:
         c5:72:23:98:43:de:66:79:43:0e:8f:61:c2:82:ba:80:78:4b:
         eb:ff:96:d6:2e:85:51:fa:9c:10:08:1e:07:12:95:07:64:8d:
         4f:66:a7:8c:f0:23:a0:fe:ef:e0:a6:18:15:8f:dc:81:51:39:
         60:b0:8d:59:56:67:0a:29:30:e4:5c:82:e4:15:b0:d7:78:3d:
         8e:1e:ec:dc:d2:81:60:fb:6b:78:c5:7d:fb:13:26:12:af:d5:
         0e:90:c2:1a:27:b3:4c:7c:29:3e:7e:1c:49:d5:70:cd:d2:ff:
         11:c9:a1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:06:50 2026 by rpki-client