Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e32362e302f32332d3233203d3e203532363835.roa
File:                     3137372e37332e32362e302f32332d3233203d3e203532363835.roa (raw, json)
Hash identifier:          XGAFa4jFVxUS45/SBOYvnQaXogVqbLirAtYfD3wzLwU=
Subject key identifier:   38:37:5C:B0:99:52:0E:A9:91:9D:47:29:46:67:9A:DC:DB:45:49:B9
Certificate issuer:       /CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
Certificate serial:       5845730DB5B859D3442125890B838BFDF38DC7F8
Authority key identifier: 38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e32362e302f32332d3233203d3e203532363835.roa
Signing time:             Wed 04 Feb 2026 21:28:51 +0000
ROA not before:           Wed 04 Feb 2026 21:23:51 +0000
ROA not after:            Wed 03 Feb 2027 21:28:51 +0000
asID:                     52685
IP address blocks:        177.73.26.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl
                          rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 16:20:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:45:73:0d:b5:b8:59:d3:44:21:25:89:0b:83:8b:fd:f3:8d:c7:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
        Validity
            Not Before: Feb  4 21:23:51 2026 GMT
            Not After : Feb  3 21:28:51 2027 GMT
        Subject: CN=38375CB099520EA9919D472946679ADCDB4549B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:50:33:7e:be:09:d0:f6:71:85:a2:45:66:58:
                    af:02:a5:9f:02:bb:df:ed:7c:52:9f:61:de:19:89:
                    2f:9c:cf:74:62:9a:1a:ac:71:14:0d:0d:20:82:dc:
                    18:83:88:b8:5a:b0:da:5f:20:d4:c1:fa:3e:c0:66:
                    21:ff:4d:6a:9c:da:2c:98:26:9d:a8:da:6b:e2:77:
                    fc:b7:e6:8c:33:47:32:13:06:a5:81:c7:3e:ff:26:
                    ca:63:50:eb:ae:8e:00:2f:be:bd:62:fb:f5:aa:63:
                    2f:c1:88:67:6a:d0:e6:40:74:ca:09:83:85:ba:31:
                    3b:55:b4:07:28:f1:b3:08:9f:2b:b1:0f:5f:db:89:
                    a8:bd:61:a8:3d:92:88:6a:09:33:80:d1:28:16:61:
                    65:3c:44:1c:8e:44:4b:9c:b1:62:f5:26:9c:18:40:
                    c9:2c:80:ea:f8:30:7f:fd:8b:67:c7:37:88:11:b3:
                    12:5b:2f:09:68:7b:f5:0c:5b:8e:f8:55:68:5f:a6:
                    b7:13:94:03:ae:79:9b:9c:9a:e8:ea:18:ac:08:e5:
                    84:6a:47:63:81:43:2e:48:c0:2e:07:36:d8:b1:8f:
                    9b:5f:12:37:d0:fb:53:80:af:b5:43:d2:67:c9:e6:
                    b6:48:d6:ac:c9:64:7c:c4:6b:5a:e9:22:c5:f3:13:
                    e3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:37:5C:B0:99:52:0E:A9:91:9D:47:29:46:67:9A:DC:DB:45:49:B9
            X509v3 Authority Key Identifier:
                keyid:38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e32362e302f32332d3233203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:2f:11:7d:fa:7e:24:1c:ad:91:cc:ef:51:c2:03:a0:45:f6:
         5d:0c:be:20:bc:01:37:3b:cd:03:10:13:4a:54:b1:ac:b9:21:
         1f:fa:21:5e:47:00:d9:e5:33:c2:7b:38:0a:3d:81:2d:34:54:
         2e:5d:31:b4:af:9c:06:e1:ad:e8:85:14:41:b9:2d:40:a0:f2:
         3d:9d:2b:03:eb:33:5d:a4:5e:c6:37:48:5a:03:de:ff:14:e9:
         e4:07:a9:f4:3b:08:d2:6d:c2:9c:39:9b:3c:67:92:8f:0e:96:
         4f:00:91:70:03:f6:22:ef:2a:62:9b:60:fe:46:7a:6d:bb:2f:
         92:c7:8b:f3:4e:82:61:10:b8:5b:a0:df:af:59:ce:87:e3:98:
         e7:43:2f:cf:08:4e:6f:79:1f:4b:1a:67:64:01:4c:f7:e8:01:
         04:b2:78:52:c8:eb:12:78:6a:ed:57:82:39:10:d5:39:21:12:
         9c:80:d3:d2:a5:0e:65:d8:c4:40:46:bf:f4:4f:59:3c:21:42:
         17:5d:92:1a:3a:d2:f8:67:21:dc:1b:a9:44:5a:4d:66:fc:8d:
         c4:85:61:7d:a5:24:e3:c9:f0:3f:b4:c0:17:9e:13:36:19:cd:
         d9:10:f7:3b:be:8f:b2:32:c4:3e:96:29:c3:81:a3:27:cd:80:
         6a:db:2c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:28:04 2026 by rpki-client