Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3231312e302f32342d3234203d3e203532363835.roa
File:                     3137372e3133362e3231312e302f32342d3234203d3e203532363835.roa (raw, json)
Hash identifier:          /te5xNSh6qYe9vF0HxYcgDvoII2BZu7iA3Q+J0+NEc4=
Subject key identifier:   A5:1A:7B:56:F2:20:09:53:B0:9A:18:60:B5:A3:3B:21:27:B6:10:56
Certificate issuer:       /CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
Certificate serial:       2D1171F3201C611E4806E175563681B946A5A4EC
Authority key identifier: 38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3231312e302f32342d3234203d3e203532363835.roa
Signing time:             Wed 04 Feb 2026 21:28:47 +0000
ROA not before:           Wed 04 Feb 2026 21:23:47 +0000
ROA not after:            Wed 03 Feb 2027 21:28:47 +0000
asID:                     52685
IP address blocks:        177.136.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl
                          rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 16:20:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:11:71:f3:20:1c:61:1e:48:06:e1:75:56:36:81:b9:46:a5:a4:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
        Validity
            Not Before: Feb  4 21:23:47 2026 GMT
            Not After : Feb  3 21:28:47 2027 GMT
        Subject: CN=A51A7B56F2200953B09A1860B5A33B2127B61056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f7:eb:23:9e:46:d6:de:ee:de:83:88:1b:4c:
                    15:2b:48:ee:88:c6:84:6a:91:77:b6:48:b9:54:df:
                    0b:c1:5a:9d:10:35:8d:b4:d5:a5:0c:38:3e:26:24:
                    90:5a:e6:3b:ab:e4:19:d1:f2:fe:4e:0a:6a:83:d5:
                    aa:e1:a4:98:2b:8a:75:fb:b4:c9:0e:a5:e7:c6:6c:
                    f8:90:c9:3c:84:3c:07:0c:e5:3e:3c:df:e5:b9:2e:
                    81:08:34:4c:7a:74:c1:04:f1:55:a9:78:80:5a:92:
                    b2:8e:ee:c7:db:29:b8:d4:95:4c:9a:a0:98:47:df:
                    c2:a7:37:c3:54:a5:b7:fa:57:9a:38:39:46:a2:c6:
                    4b:31:5f:8b:3f:d7:af:94:e3:47:ae:04:61:16:21:
                    fb:ac:3c:a5:9c:c6:6d:04:ec:f7:bb:38:54:00:25:
                    dc:bf:47:c1:64:b9:6e:54:a4:a0:66:57:4b:18:ea:
                    f4:e2:e8:35:2d:e4:36:ad:a4:ac:71:3e:4f:63:80:
                    a8:dd:bb:26:44:a7:16:12:a9:3b:3f:8d:a5:b0:74:
                    cb:31:ae:4e:c4:a7:88:70:7b:ab:87:b7:19:04:e9:
                    fc:da:2d:5d:93:60:7f:69:81:d6:be:09:2a:47:80:
                    10:15:58:76:c6:87:60:fe:c8:20:1e:35:89:fc:f6:
                    8c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:1A:7B:56:F2:20:09:53:B0:9A:18:60:B5:A3:3B:21:27:B6:10:56
            X509v3 Authority Key Identifier:
                keyid:38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3231312e302f32342d3234203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:4b:a7:95:c6:72:ef:89:5b:34:99:5e:bd:f4:1a:d5:cb:bd:
         6d:cd:b1:ac:6f:59:2d:14:a5:b6:07:2d:ed:19:61:bb:d1:6f:
         c6:51:35:00:23:d6:4b:8b:11:f4:03:77:1f:93:dc:c0:71:77:
         ac:e9:5e:19:b0:57:9c:2c:5d:8d:83:a9:f4:38:53:81:6c:3e:
         f4:73:c4:00:f8:a5:35:27:8b:16:4d:db:50:d5:56:f2:5d:9c:
         a3:55:5b:2d:ab:ef:58:04:51:d1:fe:45:48:d5:f5:c4:16:99:
         78:b4:3c:67:71:cf:6b:69:8a:5c:6b:41:1d:e5:79:bd:7a:31:
         06:4e:d2:4e:0a:a5:1e:6f:b9:34:0a:fa:72:68:24:47:41:84:
         5c:ed:a0:b3:96:4a:ba:e0:ea:60:5f:6a:be:08:a2:61:a8:15:
         ef:8d:be:bc:96:79:b6:71:c1:b8:b4:fa:ff:dc:75:e0:b0:09:
         3c:18:a9:a7:4a:6a:1a:6e:ea:64:6a:85:fb:41:dc:43:a5:04:
         c7:c9:cd:a8:8d:55:4a:2c:f7:fc:e6:fd:72:52:a8:30:5a:50:
         11:bf:af:e4:d7:92:98:bc:f7:58:af:fb:81:34:48:96:52:84:
         15:86:0c:df:7c:37:51:f2:ff:fb:0b:31:28:f6:69:a2:59:c1:
         25:29:3c:4a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULRFx8yAcYR5IBuF1VjaBuUalpOwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhDRjY3NzRCNTJEOEE2MDg3NTIzMDNDMDhEODEzOUFC
QjY5RTNGMDAeFw0yNjAyMDQyMTIzNDdaFw0yNzAyMDMyMTI4NDdaMDMxMTAvBgNV
BAMTKEE1MUE3QjU2RjIyMDA5NTNCMDlBMTg2MEI1QTMzQjIxMjdCNjEwNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC79+sjnkbW3u7eg4gbTBUrSO6I
xoRqkXe2SLlU3wvBWp0QNY201aUMOD4mJJBa5jur5BnR8v5OCmqD1arhpJgrinX7
tMkOpefGbPiQyTyEPAcM5T483+W5LoEINEx6dMEE8VWpeIBakrKO7sfbKbjUlUya
oJhH38KnN8NUpbf6V5o4OUaixksxX4s/16+U40euBGEWIfusPKWcxm0E7Pe7OFQA
Jdy/R8FkuW5UpKBmV0sY6vTi6DUt5DatpKxxPk9jgKjduyZEpxYSqTs/jaWwdMsx
rk7Ep4hwe6uHtxkE6fzaLV2TYH9pgda+CSpHgBAVWHbGh2D+yCAeNYn89oynAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUpRp7VvIgCVOwmhhgtaM7ISe2EFYwHwYDVR0j
BBgwFoAUOM9ndLUtimCHUjA8CNgTmrtp4/AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjgxREpGcTZ4WFd5QTduV041RkdnOE53RXNmWG5tWEtqS2d6bVNBVFBz
THQvMS8zOENGNjc3NEI1MkQ4QTYwODc1MjMwM0MwOEQ4MTM5QUJCNjlFM0YwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM4Q0Y2Nzc0QjUyRDhBNjA4
NzUyMzAzQzA4RDgxMzlBQkI2OUUzRjAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY4MURKRnE2eFhXeUE3bldONUZHZzhOd0VzZlhubVhLaktnem1TQVRQc0x0LzEv
MzEzNzM3MmUzMTMzMzYyZTMyMzEzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1
MzIzNjM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxiNMwDQYJKoZIhvcNAQELBQADggEBAHBLp5XG
cu+JWzSZXr30GtXLvW3NsaxvWS0UpbYHLe0ZYbvRb8ZRNQAj1kuLEfQDdx+T3MBx
d6zpXhmwV5wsXY2DqfQ4U4FsPvRzxAD4pTUnixZN21DVVvJdnKNVWy2r71gEUdH+
RUjV9cQWmXi0PGdxz2tpilxrQR3leb16MQZO0k4KpR5vuTQK+nJoJEdBhFztoLOW
Srrg6mBfar4IomGoFe+NvryWebZxwbi0+v/cdeCwCTwYqadKahpu6mRqhftB3EOl
BMfJzaiNVUos9/zm/XJSqDBaUBG/r+TXkpi891iv+4E0SJZShBWGDN98N1Hy//sL
MSj2aaJZwSUpPEo=
-----END CERTIFICATE-----
Generated at Thu Feb 19 04:29:18 2026 by rpki-client