Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3231342e302f32342d3234203d3e203532363835.roa
File:                     3137372e3133362e3231342e302f32342d3234203d3e203532363835.roa (raw, json)
Hash identifier:          JjVIpI8bdIYYyLINalz/ncJIevXzUs6sM/VwBTdjPDo=
Subject key identifier:   DC:4A:FF:77:B4:E4:76:93:BE:2C:EE:D2:F3:BC:0F:F1:B0:15:EB:3B
Certificate issuer:       /CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
Certificate serial:       4A5D48AB5C1099D5D1348895048C9AE4BAFE93D4
Authority key identifier: 38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3231342e302f32342d3234203d3e203532363835.roa
Signing time:             Wed 04 Feb 2026 21:28:50 +0000
ROA not before:           Wed 04 Feb 2026 21:23:50 +0000
ROA not after:            Wed 03 Feb 2027 21:28:50 +0000
asID:                     52685
IP address blocks:        177.136.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl
                          rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 16:20:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:5d:48:ab:5c:10:99:d5:d1:34:88:95:04:8c:9a:e4:ba:fe:93:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
        Validity
            Not Before: Feb  4 21:23:50 2026 GMT
            Not After : Feb  3 21:28:50 2027 GMT
        Subject: CN=DC4AFF77B4E47693BE2CEED2F3BC0FF1B015EB3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e8:5e:cf:ed:f5:1d:29:d1:06:b8:72:e1:d8:
                    55:f4:00:bd:d2:a3:79:72:e9:25:af:6e:20:23:aa:
                    33:30:a3:36:b3:a4:91:2e:be:a4:3e:d9:32:4b:21:
                    8e:dd:13:88:77:1c:d6:4e:3b:d9:b0:fd:a1:1e:bf:
                    0f:21:5e:69:40:e4:54:62:c9:c4:79:54:8e:7c:c4:
                    78:52:9a:9e:5f:e5:e0:71:81:5b:5d:1d:0d:22:09:
                    a6:c0:1e:55:16:b7:39:10:6a:ef:13:0e:2c:f3:bf:
                    1b:e1:d3:f6:5e:42:03:ed:45:fe:a0:be:3f:93:f7:
                    49:58:33:31:4b:55:7c:0c:42:3d:bc:bb:d8:74:53:
                    3e:b8:be:39:14:93:c2:17:2d:58:dd:58:db:1a:03:
                    1c:b8:57:58:61:6d:a6:30:b5:d6:ca:27:00:d4:5d:
                    b1:c4:75:16:27:fb:b0:a3:9e:72:04:33:21:ea:75:
                    f9:e6:8a:d0:88:f8:94:ad:be:1b:bb:32:70:ce:e8:
                    7e:44:5f:fe:52:35:bc:fe:b1:89:99:c6:72:07:28:
                    b8:0b:60:6f:a5:84:f1:34:5b:2f:a9:71:0e:8a:b2:
                    34:d5:f4:1b:87:2f:ed:d8:bc:2f:ee:3a:b2:59:93:
                    b6:34:4f:36:40:a5:10:3c:51:7f:4c:be:eb:23:75:
                    c1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:4A:FF:77:B4:E4:76:93:BE:2C:EE:D2:F3:BC:0F:F1:B0:15:EB:3B
            X509v3 Authority Key Identifier:
                keyid:38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3231342e302f32342d3234203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:e3:11:29:2e:9b:0f:29:b7:0f:ca:ee:48:bf:8f:b4:2a:54:
         83:ea:fd:73:f2:d2:9c:fd:1b:82:82:cb:9f:d6:0b:16:1b:b3:
         55:4e:39:e0:a2:7b:d6:fc:3d:95:f0:d5:a7:0b:00:4e:79:91:
         a3:54:41:22:e4:08:40:21:c8:b0:a1:da:1a:80:94:ec:ec:eb:
         12:15:47:35:b3:de:99:91:72:62:36:81:47:ae:aa:7a:c7:54:
         a9:16:06:8b:5e:c4:9f:ae:cd:d4:73:97:24:09:aa:32:b6:12:
         5d:3f:b9:89:f9:bc:aa:c4:8e:57:39:0b:6b:25:6a:1c:13:5f:
         73:0a:ed:d8:2f:3e:9f:b9:01:07:0e:47:b3:a5:c2:e8:fb:7c:
         48:2b:55:8b:e8:e4:1e:80:ab:a9:c6:e7:bb:03:40:1c:49:23:
         36:62:91:09:92:6d:97:cd:19:74:cf:6d:6a:1e:8b:2d:c7:2c:
         2a:d6:4c:36:94:8d:ff:27:e4:38:31:42:3e:03:4c:3d:bc:1a:
         68:c6:d2:0c:59:4a:3f:06:30:83:7d:d6:9e:8d:49:96:e4:74:
         5d:e5:c9:78:50:ee:f5:79:85:e7:2e:c0:82:b4:b9:bb:76:08:
         da:64:1c:cb:2e:c8:4a:cd:d7:a3:70:b2:c4:cd:7e:d2:16:34:
         a0:d7:80:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:28:06 2026 by rpki-client