Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e32352e302f32342d3234203d3e203532363835.roa
File:                     3137372e37332e32352e302f32342d3234203d3e203532363835.roa (raw, json)
Hash identifier:          w7pOWxYEH1oLIwmJ3R89XmcXwd2LhQNlOGCnfQWU4rM=
Subject key identifier:   00:F8:BF:E4:94:87:15:D1:05:14:8B:14:24:D5:A2:2A:76:BF:F1:80
Certificate issuer:       /CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
Certificate serial:       475A9F964252D030ADCE2C095C18304283B702D7
Authority key identifier: 38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e32352e302f32342d3234203d3e203532363835.roa
Signing time:             Wed 04 Feb 2026 21:28:48 +0000
ROA not before:           Wed 04 Feb 2026 21:23:48 +0000
ROA not after:            Wed 03 Feb 2027 21:28:48 +0000
asID:                     52685
IP address blocks:        177.73.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl
                          rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 16:20:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:5a:9f:96:42:52:d0:30:ad:ce:2c:09:5c:18:30:42:83:b7:02:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
        Validity
            Not Before: Feb  4 21:23:48 2026 GMT
            Not After : Feb  3 21:28:48 2027 GMT
        Subject: CN=00F8BFE4948715D105148B1424D5A22A76BFF180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:78:84:4f:96:14:4a:50:e2:41:05:8d:07:6e:
                    63:a7:5a:e3:43:fa:e0:2c:dc:f1:c1:f4:2f:87:b2:
                    dd:5e:0e:5b:07:3e:14:a5:23:17:60:d9:1d:8f:f6:
                    ef:65:61:b6:21:52:78:d2:dc:74:37:d7:96:ac:06:
                    e2:f2:01:6d:37:cf:d8:2c:b6:6f:5c:45:d9:19:07:
                    ff:ae:87:ea:61:93:f6:f6:fc:8e:b7:16:26:c4:09:
                    6f:bf:9d:43:44:90:18:ff:5a:fd:b0:9c:4d:11:0f:
                    e4:1b:59:da:55:69:39:0e:e8:ba:3d:e3:f3:01:55:
                    69:27:c2:97:73:7c:eb:ef:16:0e:1f:9c:c5:07:29:
                    f7:3b:e0:1c:fe:7c:3f:d6:1a:05:83:c1:80:f7:29:
                    ed:25:21:9a:94:67:89:ec:5f:80:18:07:50:00:30:
                    53:06:86:1e:eb:ac:be:15:84:9a:51:ce:b2:a8:a7:
                    68:a8:47:92:13:b3:8f:28:1a:5c:64:f6:b4:64:3a:
                    96:6d:e3:68:af:6d:d1:4f:d7:55:b3:19:07:d3:f3:
                    0f:c0:a3:20:15:72:2b:d6:fa:fb:70:9c:f4:18:75:
                    61:d1:2b:8b:97:6d:00:71:55:ef:34:12:fc:64:d5:
                    36:1d:8c:4b:52:02:25:2c:95:68:43:6d:4f:06:47:
                    bb:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F8:BF:E4:94:87:15:D1:05:14:8B:14:24:D5:A2:2A:76:BF:F1:80
            X509v3 Authority Key Identifier:
                keyid:38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e32352e302f32342d3234203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:b8:f4:15:0c:ee:0c:58:ba:6e:9e:2e:a8:89:91:0c:2e:a3:
         29:65:8d:43:ed:c3:4b:a9:e1:ff:9a:5d:b6:82:b9:25:e1:56:
         eb:d2:7d:73:e1:52:b6:24:48:04:6c:e6:c1:db:f0:d7:de:75:
         ca:81:21:fc:19:7c:04:9a:10:47:87:9c:2c:91:33:61:9d:5a:
         4b:c9:e8:09:c7:f1:1f:4f:06:60:66:1a:b2:56:e8:4d:21:e4:
         07:c2:b4:56:0d:b3:80:bd:b0:2c:72:16:b2:27:28:b5:9c:46:
         c4:7f:27:72:5c:ae:f7:50:b4:f8:12:fe:a7:3f:79:a6:7d:61:
         64:4f:ab:0d:bc:77:01:53:df:22:a4:66:d4:55:24:e6:6f:1f:
         1a:b3:9e:a1:eb:85:25:ca:68:02:07:85:ed:71:65:54:03:07:
         d9:6e:39:5e:23:07:f8:35:6c:5e:9f:d1:17:37:01:15:bd:c1:
         70:b6:c1:50:81:c5:cb:3d:5d:3b:85:81:7b:6f:58:69:00:43:
         fb:47:c2:33:01:75:2e:87:b6:4d:6a:6f:32:9e:4c:e8:c8:59:
         d7:4c:bf:8c:a8:36:d1:64:24:25:d6:9d:ea:14:73:8d:0e:99:
         08:8d:7d:12:c3:aa:eb:5a:d8:3b:62:7f:5c:f2:34:3d:3a:fb:
         27:78:2a:a7
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUR1qflkJS0DCtziwJXBgwQoO3AtcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhDRjY3NzRCNTJEOEE2MDg3NTIzMDNDMDhEODEzOUFC
QjY5RTNGMDAeFw0yNjAyMDQyMTIzNDhaFw0yNzAyMDMyMTI4NDhaMDMxMTAvBgNV
BAMTKDAwRjhCRkU0OTQ4NzE1RDEwNTE0OEIxNDI0RDVBMjJBNzZCRkYxODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmeIRPlhRKUOJBBY0HbmOnWuND
+uAs3PHB9C+Hst1eDlsHPhSlIxdg2R2P9u9lYbYhUnjS3HQ315asBuLyAW03z9gs
tm9cRdkZB/+uh+phk/b2/I63FibECW+/nUNEkBj/Wv2wnE0RD+QbWdpVaTkO6Lo9
4/MBVWknwpdzfOvvFg4fnMUHKfc74Bz+fD/WGgWDwYD3Ke0lIZqUZ4nsX4AYB1AA
MFMGhh7rrL4VhJpRzrKop2ioR5ITs48oGlxk9rRkOpZt42ivbdFP11WzGQfT8w/A
oyAVcivW+vtwnPQYdWHRK4uXbQBxVe80Evxk1TYdjEtSAiUslWhDbU8GR7tTAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUAPi/5JSHFdEFFIsUJNWiKna/8YAwHwYDVR0j
BBgwFoAUOM9ndLUtimCHUjA8CNgTmrtp4/AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjgxREpGcTZ4WFd5QTduV041RkdnOE53RXNmWG5tWEtqS2d6bVNBVFBz
THQvMS8zOENGNjc3NEI1MkQ4QTYwODc1MjMwM0MwOEQ4MTM5QUJCNjlFM0YwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM4Q0Y2Nzc0QjUyRDhBNjA4
NzUyMzAzQzA4RDgxMzlBQkI2OUUzRjAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY4MURKRnE2eFhXeUE3bldONUZHZzhOd0VzZlhubVhLaktnem1TQVRQc0x0LzEv
MzEzNzM3MmUzNzMzMmUzMjM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM2
MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALFJGTANBgkqhkiG9w0BAQsFAAOCAQEAr7j0FQzuDFi6
bp4uqImRDC6jKWWNQ+3DS6nh/5pdtoK5JeFW69J9c+FStiRIBGzmwdvw1951yoEh
/Bl8BJoQR4ecLJEzYZ1aS8noCcfxH08GYGYaslboTSHkB8K0Vg2zgL2wLHIWsico
tZxGxH8nclyu91C0+BL+pz95pn1hZE+rDbx3AVPfIqRm1FUk5m8fGrOeoeuFJcpo
AgeF7XFlVAMH2W45XiMH+DVsXp/RFzcBFb3BcLbBUIHFyz1dO4WBe29YaQBD+0fC
MwF1Loe2TWpvMp5M6MhZ10y/jKg20WQkJdad6hRzjQ6ZCI19EsOq61rYO2J/XPI0
PTr7J3gqpw==
-----END CERTIFICATE-----
Generated at Thu Feb 19 04:28:16 2026 by rpki-client