Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3231322e302f32322d3232203d3e203532363835.roa
File:                     3137372e3133362e3231322e302f32322d3232203d3e203532363835.roa (raw, json)
Hash identifier:          ZxXy38vr04XejI3l2lpR/YvbHlvQoMHk7bupZk5EiJA=
Subject key identifier:   65:2C:5B:F2:9E:A7:D1:CC:94:EF:DE:4F:E4:9A:6E:A6:FA:2F:AF:E5
Certificate issuer:       /CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
Certificate serial:       236CD7071858F755DCDAF44BBD742A80B0FABEF8
Authority key identifier: 38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3231322e302f32322d3232203d3e203532363835.roa
Signing time:             Wed 04 Feb 2026 21:28:49 +0000
ROA not before:           Wed 04 Feb 2026 21:23:49 +0000
ROA not after:            Wed 03 Feb 2027 21:28:49 +0000
asID:                     52685
IP address blocks:        177.136.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl
                          rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 16:20:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:6c:d7:07:18:58:f7:55:dc:da:f4:4b:bd:74:2a:80:b0:fa:be:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
        Validity
            Not Before: Feb  4 21:23:49 2026 GMT
            Not After : Feb  3 21:28:49 2027 GMT
        Subject: CN=652C5BF29EA7D1CC94EFDE4FE49A6EA6FA2FAFE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a0:43:7c:6b:d0:7b:0d:95:d6:2d:d6:76:10:
                    58:44:9c:9a:fb:b7:b0:e1:e1:6a:56:93:02:3b:18:
                    21:f4:45:03:e2:3c:de:b9:db:19:ad:a7:d8:b3:0c:
                    c0:ae:eb:58:d2:a5:e4:67:46:2a:1c:f1:f5:b3:38:
                    82:03:80:83:eb:c0:f9:e9:dd:95:8f:67:6d:0e:31:
                    36:e0:0f:e5:e4:98:6a:65:d0:76:fc:b5:0a:09:e6:
                    bb:fc:81:c9:a7:81:dd:94:73:b7:57:2a:80:51:72:
                    cf:3d:c6:d4:bc:32:57:08:0c:25:a2:40:6a:a3:5c:
                    6e:06:2e:48:b5:9d:55:67:a7:5c:8c:d1:a5:ec:44:
                    9e:0a:ae:ab:58:1b:50:7f:28:ba:7d:e2:18:eb:38:
                    d7:53:f5:4d:12:c8:9d:1e:c9:30:bc:4a:38:4d:91:
                    3e:26:c7:5f:29:99:91:e0:80:c1:ec:14:fd:5a:2c:
                    56:dd:07:94:a7:23:d9:cf:6b:55:57:53:1b:4f:f0:
                    87:ef:10:f9:fa:5f:21:68:23:e2:62:84:02:9f:65:
                    44:c7:c3:17:9e:ba:c7:91:6e:39:a1:ef:77:39:59:
                    1d:18:97:5a:95:d2:ab:93:b8:45:25:8d:20:5a:97:
                    4d:a2:51:e5:cc:37:df:2a:95:34:94:bd:0a:3e:67:
                    34:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:2C:5B:F2:9E:A7:D1:CC:94:EF:DE:4F:E4:9A:6E:A6:FA:2F:AF:E5
            X509v3 Authority Key Identifier:
                keyid:38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3231322e302f32322d3232203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:24:0d:e2:e1:a3:5f:e5:04:d8:3d:57:96:0f:c7:bb:66:db:
         63:eb:8c:77:04:f3:43:93:84:5a:68:5c:0c:d7:ce:aa:88:f7:
         93:da:8d:64:e5:45:d7:f3:de:e9:25:45:a9:e9:9f:40:51:5a:
         b5:f1:6c:54:65:cc:37:7c:6d:7f:3e:ae:a2:6b:da:b4:63:52:
         bf:80:3a:9b:52:7d:51:5a:57:5f:f9:7b:5f:92:24:13:06:ae:
         70:c5:81:0a:e8:13:f8:2c:35:fb:81:9d:12:4a:a6:87:b4:c6:
         81:a9:4c:a6:0f:59:40:5e:21:8b:f9:0d:c2:f6:2c:78:ea:cd:
         c4:ff:b6:9d:8d:fc:54:1b:76:e2:91:03:b8:45:00:37:38:ed:
         8e:28:72:95:3d:ee:d4:58:53:c3:a2:0a:9b:7d:b8:e8:83:73:
         03:52:59:c2:88:5f:90:01:35:a8:63:7b:14:e8:6a:01:ee:c3:
         0d:48:3b:39:de:9d:ca:5e:97:f3:b8:fb:ca:ca:a2:c2:e5:0d:
         92:f0:46:e2:44:e0:0f:49:b6:1c:c3:05:61:55:c9:3b:37:f6:
         ef:d0:f5:ff:20:6b:e0:80:a3:1f:0d:2a:03:58:72:7b:dd:98:
         24:29:73:ca:41:3b:92:50:69:e9:4b:84:1e:6f:32:61:2d:a2:
         4c:b5:e4:5c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUI2zXBxhY91Xc2vRLvXQqgLD6vvgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhDRjY3NzRCNTJEOEE2MDg3NTIzMDNDMDhEODEzOUFC
QjY5RTNGMDAeFw0yNjAyMDQyMTIzNDlaFw0yNzAyMDMyMTI4NDlaMDMxMTAvBgNV
BAMTKDY1MkM1QkYyOUVBN0QxQ0M5NEVGREU0RkU0OUE2RUE2RkEyRkFGRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOoEN8a9B7DZXWLdZ2EFhEnJr7
t7Dh4WpWkwI7GCH0RQPiPN652xmtp9izDMCu61jSpeRnRioc8fWzOIIDgIPrwPnp
3ZWPZ20OMTbgD+XkmGpl0Hb8tQoJ5rv8gcmngd2Uc7dXKoBRcs89xtS8MlcIDCWi
QGqjXG4GLki1nVVnp1yM0aXsRJ4KrqtYG1B/KLp94hjrONdT9U0SyJ0eyTC8SjhN
kT4mx18pmZHggMHsFP1aLFbdB5SnI9nPa1VXUxtP8IfvEPn6XyFoI+JihAKfZUTH
wxeeuseRbjmh73c5WR0Yl1qV0quTuEUljSBal02iUeXMN98qlTSUvQo+ZzR5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUZSxb8p6n0cyU795P5Jpupvovr+UwHwYDVR0j
BBgwFoAUOM9ndLUtimCHUjA8CNgTmrtp4/AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjgxREpGcTZ4WFd5QTduV041RkdnOE53RXNmWG5tWEtqS2d6bVNBVFBz
THQvMS8zOENGNjc3NEI1MkQ4QTYwODc1MjMwM0MwOEQ4MTM5QUJCNjlFM0YwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM4Q0Y2Nzc0QjUyRDhBNjA4
NzUyMzAzQzA4RDgxMzlBQkI2OUUzRjAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY4MURKRnE2eFhXeUE3bldONUZHZzhOd0VzZlhubVhLaktnem1TQVRQc0x0LzEv
MzEzNzM3MmUzMTMzMzYyZTMyMzEzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM1
MzIzNjM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxiNQwDQYJKoZIhvcNAQELBQADggEBAIMkDeLh
o1/lBNg9V5YPx7tm22PrjHcE80OThFpoXAzXzqqI95PajWTlRdfz3uklRanpn0BR
WrXxbFRlzDd8bX8+rqJr2rRjUr+AOptSfVFaV1/5e1+SJBMGrnDFgQroE/gsNfuB
nRJKpoe0xoGpTKYPWUBeIYv5DcL2LHjqzcT/tp2N/FQbduKRA7hFADc47Y4ocpU9
7tRYU8OiCpt9uOiDcwNSWcKIX5ABNahjexToagHuww1IOznencpel/O4+8rKosLl
DZLwRuJE4A9JthzDBWFVyTs39u/Q9f8ga+CAox8NKgNYcnvdmCQpc8pBO5JQaelL
hB5vMmEtoky15Fw=
-----END CERTIFICATE-----
Generated at Thu Feb 19 04:28:57 2026 by rpki-client