Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3137372e32302e3231362e302f32312d3231203d3e20323632383638.roa
File:                     3137372e32302e3231362e302f32312d3231203d3e20323632383638.roa (raw, json)
Hash identifier:          ftD2JXZpYApyTrkzkpz/vZgLx7xdoLt3tYfSO8wX1YE=
Subject key identifier:   2D:CB:F1:85:0E:45:A1:1D:4B:DA:6A:54:BD:26:45:7E:1B:2F:66:7E
Certificate issuer:       /CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
Certificate serial:       345864D08113AC80706AFBE4D3DAD800EF1829FF
Authority key identifier: BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3137372e32302e3231362e302f32312d3231203d3e20323632383638.roa
Signing time:             Thu 05 Feb 2026 11:40:41 +0000
ROA not before:           Thu 05 Feb 2026 11:35:41 +0000
ROA not after:            Thu 04 Feb 2027 11:40:41 +0000
asID:                     262868
IP address blocks:        177.20.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl
                          rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:34:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:58:64:d0:81:13:ac:80:70:6a:fb:e4:d3:da:d8:00:ef:18:29:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
        Validity
            Not Before: Feb  5 11:35:41 2026 GMT
            Not After : Feb  4 11:40:41 2027 GMT
        Subject: CN=2DCBF1850E45A11D4BDA6A54BD26457E1B2F667E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:39:c1:39:ce:ac:49:c9:d5:e1:ae:12:42:7b:
                    b1:ba:d0:8a:cd:53:4e:ad:44:d2:5f:3e:eb:6b:fd:
                    67:c1:43:6a:c8:08:21:f2:d7:41:d9:d3:63:f7:64:
                    aa:6c:d4:af:f8:cb:ac:98:38:13:1f:c4:d0:d7:51:
                    43:11:ce:d8:65:cc:12:44:6c:6c:b0:dd:7b:c6:8f:
                    45:39:3b:6c:34:9f:75:5f:a1:19:32:20:30:d3:11:
                    9d:eb:98:88:b4:8e:b5:1f:fd:a0:29:64:87:87:e8:
                    c5:84:08:1e:cc:b9:33:1a:ce:9d:f8:06:1f:b7:24:
                    2a:5c:97:77:0c:85:cb:7c:1a:67:f0:40:d2:d9:67:
                    b3:c4:07:e2:23:06:3f:49:f2:d9:e9:fa:6e:ea:15:
                    c0:bd:8f:e7:81:7d:66:d0:3c:4c:95:02:30:6e:b3:
                    2e:b3:f2:66:80:ed:20:7b:ff:2c:e6:7e:c5:0b:24:
                    4f:fc:95:46:50:ad:4f:50:78:96:38:9b:18:69:67:
                    e5:3f:68:b4:c5:49:50:7a:dd:84:3e:9f:30:05:57:
                    c9:a1:e3:db:ab:5c:81:18:49:c1:84:3d:fd:73:8b:
                    f9:f7:6f:36:16:86:19:bd:30:5e:59:34:55:83:c2:
                    42:73:0d:7b:d3:65:91:16:14:fe:3d:ba:f3:56:46:
                    12:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:CB:F1:85:0E:45:A1:1D:4B:DA:6A:54:BD:26:45:7E:1B:2F:66:7E
            X509v3 Authority Key Identifier:
                keyid:BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3137372e32302e3231362e302f32312d3231203d3e20323632383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.20.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         64:8a:64:0b:c5:46:65:c8:e5:db:f6:b3:b9:f0:f3:e3:8e:78:
         d4:56:49:89:03:de:4f:c4:6e:81:72:90:d3:8d:70:0f:35:8e:
         76:dc:b6:5e:fe:9f:97:f9:b3:35:ce:7b:7b:79:65:31:0b:c1:
         ab:32:fc:59:c9:f0:12:fb:73:5f:78:06:9c:ab:1d:66:f2:90:
         36:05:d9:9b:b4:00:34:2b:b8:0c:d5:61:51:58:f0:43:76:8a:
         85:6b:5d:3c:61:ab:2c:77:76:b8:e8:f9:00:57:e2:2e:e8:91:
         13:f8:b0:64:fa:35:20:a9:97:e1:18:e9:26:bb:09:66:12:cb:
         0d:02:8d:71:5a:8b:ea:64:0b:f1:35:66:ce:2a:af:ad:c8:50:
         f8:20:54:ac:2e:65:29:90:48:d1:85:28:c2:26:94:c2:2f:41:
         9b:83:c3:3f:91:2d:7e:e8:02:c6:9b:80:db:43:ed:e3:f0:d2:
         d4:63:6e:ef:e0:79:f7:26:88:72:34:6b:1b:48:eb:f1:e8:8d:
         a1:96:bc:9e:e7:4f:76:4b:01:3a:bf:75:db:5a:ce:f8:a6:b3:
         5b:a8:be:07:0c:63:5c:07:f5:49:11:b6:5d:c3:99:98:12:4d:
         5b:e0:52:11:70:fb:a9:68:96:2c:ca:36:f5:dd:42:07:4d:1a:
         ac:44:dd:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:06:04 2026 by rpki-client