Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3231302e302f32332d3233203d3e203532363835.roa
File:                     3137372e3133362e3231302e302f32332d3233203d3e203532363835.roa (raw, json)
Hash identifier:          obfr32nuvSEH9E59DtSuz/P66Sc2nbxmJUsbTOu39ds=
Subject key identifier:   8B:BC:6A:FB:D8:E7:D2:BB:F8:27:38:5B:DD:EB:F3:60:76:77:BF:CB
Certificate issuer:       /CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
Certificate serial:       113CB7C348CC341E7A6E26E0C71E57B9084386D4
Authority key identifier: 38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3231302e302f32332d3233203d3e203532363835.roa
Signing time:             Wed 04 Feb 2026 21:28:47 +0000
ROA not before:           Wed 04 Feb 2026 21:23:47 +0000
ROA not after:            Wed 03 Feb 2027 21:28:47 +0000
asID:                     52685
IP address blocks:        177.136.210.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl
                          rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 16:20:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:3c:b7:c3:48:cc:34:1e:7a:6e:26:e0:c7:1e:57:b9:08:43:86:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
        Validity
            Not Before: Feb  4 21:23:47 2026 GMT
            Not After : Feb  3 21:28:47 2027 GMT
        Subject: CN=8BBC6AFBD8E7D2BBF827385BDDEBF3607677BFCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:03:e1:f7:c1:4b:b0:cc:84:e0:f8:18:78:f7:
                    3a:23:00:df:9a:5c:db:6e:38:32:10:4d:60:b5:4b:
                    a1:28:a0:28:24:57:60:fa:ed:49:bb:fd:4a:53:b7:
                    81:35:dc:7c:75:43:1b:7b:1e:75:df:30:ca:8b:3f:
                    e2:86:b1:0a:d7:0d:f6:b0:c1:c6:fc:65:b0:55:59:
                    66:96:4f:99:8b:34:d2:84:c2:d0:28:a1:a7:e4:c5:
                    7a:08:dc:45:14:fa:6f:06:b0:d4:c6:54:4a:3e:06:
                    2b:4f:e0:d5:7d:48:61:69:82:c4:5c:85:10:8e:82:
                    8f:11:af:af:af:48:af:e3:8a:53:c9:1c:94:23:d4:
                    05:12:49:bb:82:89:31:5e:9b:30:e5:ae:de:7c:04:
                    bc:4e:a2:45:28:de:55:87:6a:d7:d1:27:0b:77:25:
                    8f:6d:58:8b:76:61:95:a4:09:db:38:1c:26:37:27:
                    b4:c1:3f:65:b4:c8:a5:8a:d9:47:9f:2c:ba:0c:48:
                    a1:77:bb:68:af:26:a1:e6:d6:3a:10:2e:6c:d7:50:
                    b9:12:7f:b1:40:34:fe:b0:d3:c6:c2:19:26:91:00:
                    33:99:35:8e:a3:f2:16:8c:f4:d5:2d:c5:c5:6c:9d:
                    94:d0:77:ba:bf:e9:e2:b7:a5:39:35:20:f6:e2:fa:
                    2d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:BC:6A:FB:D8:E7:D2:BB:F8:27:38:5B:DD:EB:F3:60:76:77:BF:CB
            X509v3 Authority Key Identifier:
                keyid:38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3231302e302f32332d3233203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:69:cc:ff:f8:29:9a:0a:c4:93:9f:28:ba:29:00:1e:39:93:
         c5:f9:8c:a5:f1:24:c1:91:65:8a:91:c6:fd:4b:cd:38:15:16:
         66:5b:36:ad:0f:6f:23:e9:9a:80:44:5b:0d:ef:11:ed:76:a8:
         9e:b7:8e:fa:84:9c:5c:5c:ed:70:2a:4f:68:ff:94:e1:ad:e0:
         e0:c5:61:94:9a:a9:78:96:49:41:03:44:99:48:98:2d:87:5b:
         fc:22:b9:8d:e8:a7:96:75:e4:98:4a:b2:b4:39:f1:da:1b:93:
         8b:c9:d5:c0:e0:b7:57:b8:2d:b4:11:4b:25:ca:1b:04:9d:16:
         a2:be:ee:df:93:0d:cc:25:07:ce:7e:f5:02:16:4c:e7:a5:c8:
         e8:a6:d7:36:6c:c2:61:73:bc:6f:ab:6a:5b:39:3a:89:20:6b:
         7c:29:45:8a:ab:12:c5:fd:ab:2f:7c:95:97:7b:4d:70:e6:31:
         d5:76:66:c2:31:ad:83:18:3a:6f:ca:21:dc:86:28:db:af:c8:
         15:72:b8:07:5c:2a:54:a8:60:a2:e9:4e:65:4a:ad:f2:97:8c:
         c7:41:2f:83:92:5d:9e:65:cc:1b:aa:e6:4a:75:5f:22:4c:55:
         ad:d3:ac:c0:c5:90:55:63:df:aa:63:ba:cf:b5:32:32:e4:da:
         c7:84:ad:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:28:31 2026 by rpki-client