Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3231322e302f32342d3234203d3e203532363835.roa
File:                     3137372e3133362e3231322e302f32342d3234203d3e203532363835.roa (raw, json)
Hash identifier:          3jpRJw8hmVqUM8gWiiBKDlcusZVV/f6isUDLCsT4VZs=
Subject key identifier:   7F:6E:F1:69:0C:68:05:2D:BC:8F:6F:D0:48:D3:91:7E:37:CD:2F:22
Certificate issuer:       /CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
Certificate serial:       04C0694E6AC4409DB563ABFFD14140B9CB8B06C3
Authority key identifier: 38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3231322e302f32342d3234203d3e203532363835.roa
Signing time:             Wed 04 Feb 2026 21:28:50 +0000
ROA not before:           Wed 04 Feb 2026 21:23:50 +0000
ROA not after:            Wed 03 Feb 2027 21:28:50 +0000
asID:                     52685
IP address blocks:        177.136.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl
                          rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 16:20:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:c0:69:4e:6a:c4:40:9d:b5:63:ab:ff:d1:41:40:b9:cb:8b:06:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
        Validity
            Not Before: Feb  4 21:23:50 2026 GMT
            Not After : Feb  3 21:28:50 2027 GMT
        Subject: CN=7F6EF1690C68052DBC8F6FD048D3917E37CD2F22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2d:c1:89:2c:e2:b0:b9:cd:d4:d5:61:ac:b0:
                    43:88:71:4b:ff:c5:da:22:cd:fc:0d:39:73:4c:a7:
                    36:d2:69:97:f3:ae:f4:07:64:63:8b:ce:af:64:10:
                    cc:91:f6:d5:0c:da:d6:31:b5:79:46:eb:68:2e:f6:
                    55:b6:63:ae:8e:7f:2d:1f:55:cb:6d:e2:fe:7f:a0:
                    7b:a7:6b:28:ea:10:bc:0a:3e:7d:fa:77:a2:78:3d:
                    e5:00:6c:36:92:36:96:48:28:5a:9e:e1:75:3a:9d:
                    4b:03:1c:01:1b:55:51:8a:89:a4:fd:e9:49:59:54:
                    2c:1d:30:7a:86:06:92:14:0e:8f:79:d9:9e:21:b5:
                    5e:0a:3c:ce:0a:c6:51:5a:7d:4b:ae:13:04:fa:85:
                    3f:fb:78:5e:32:9f:f0:ed:7c:99:36:84:a2:7e:62:
                    8f:92:97:11:27:0d:f5:73:bb:f1:c7:ec:f6:27:fb:
                    55:57:c3:5e:43:22:52:f0:86:99:cc:50:8e:2a:a2:
                    87:2b:97:fc:28:54:e7:56:a8:fc:96:55:3b:e5:04:
                    20:72:5f:bf:34:37:c1:35:5b:d6:3d:a3:ac:55:26:
                    10:8e:1c:7a:45:56:b9:34:2f:42:83:e8:d6:90:36:
                    b0:86:64:91:dc:68:3e:81:57:a3:b2:45:0e:49:cd:
                    6b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:6E:F1:69:0C:68:05:2D:BC:8F:6F:D0:48:D3:91:7E:37:CD:2F:22
            X509v3 Authority Key Identifier:
                keyid:38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3231322e302f32342d3234203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:8f:24:51:d9:eb:c0:c2:97:b5:18:f5:8c:82:5d:0e:ca:af:
         54:d8:3d:bb:9d:4f:e8:ae:70:4f:fb:29:4e:66:c0:1f:02:22:
         f6:c4:ef:d8:1f:69:b1:21:51:db:23:23:ea:33:4f:40:58:ff:
         fd:80:db:9f:80:6c:7d:8f:64:64:09:2b:7d:af:67:70:24:09:
         67:de:4b:ac:8e:db:06:aa:c8:8d:84:36:a2:bc:ad:5a:25:b9:
         a9:a9:ae:3f:a6:ab:28:92:74:b5:b2:28:d1:75:4c:85:a1:ed:
         27:f9:34:d9:53:bb:29:55:be:5c:46:35:cc:c7:9b:aa:6f:8d:
         b9:47:70:51:e3:7d:b5:4e:ae:71:e0:9d:7d:bc:26:11:47:b8:
         00:dc:f3:6a:af:c2:b1:7a:5f:71:57:88:72:c1:81:cc:a6:49:
         07:af:1e:c0:16:5d:fa:35:a7:11:a9:7f:6b:a4:18:0b:0f:aa:
         8e:83:ec:27:58:89:89:48:a6:71:d2:e2:1f:79:eb:10:33:b2:
         06:7d:e0:2f:26:0c:fd:24:e3:58:10:c1:21:83:60:cf:fa:56:
         a8:e4:91:2a:0e:47:70:2a:de:28:cc:d8:25:60:9c:0d:6d:66:
         fc:cf:e7:0a:e6:36:67:ac:6c:35:90:67:dd:2b:d7:72:d4:77:
         e3:37:28:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:28:52 2026 by rpki-client