Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e32362e302f32342d3234203d3e203532363835.roa
File:                     3137372e37332e32362e302f32342d3234203d3e203532363835.roa (raw, json)
Hash identifier:          dIVMpNIxFT1bYvjEpLD+v9hw8Aps6EfilMLotQTkmS4=
Subject key identifier:   5E:FF:2D:3C:D6:3C:04:6F:32:E9:88:BE:9F:BD:6C:D1:AD:46:A8:6E
Certificate issuer:       /CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
Certificate serial:       39DAEF225F5F2A638375D2E0D2FD5AC84773001A
Authority key identifier: 38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e32362e302f32342d3234203d3e203532363835.roa
Signing time:             Wed 04 Feb 2026 21:28:49 +0000
ROA not before:           Wed 04 Feb 2026 21:23:49 +0000
ROA not after:            Wed 03 Feb 2027 21:28:49 +0000
asID:                     52685
IP address blocks:        177.73.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl
                          rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 16:20:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:da:ef:22:5f:5f:2a:63:83:75:d2:e0:d2:fd:5a:c8:47:73:00:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
        Validity
            Not Before: Feb  4 21:23:49 2026 GMT
            Not After : Feb  3 21:28:49 2027 GMT
        Subject: CN=5EFF2D3CD63C046F32E988BE9FBD6CD1AD46A86E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:30:3a:a0:47:ba:8a:24:a3:eb:07:ae:18:ae:
                    d1:69:81:f0:29:cd:b9:76:99:2c:a2:93:e6:ea:40:
                    69:b7:56:cb:7a:13:05:24:c3:2e:3b:85:9f:0f:63:
                    44:35:87:51:35:7d:58:aa:6f:cb:a3:27:b9:61:74:
                    37:6d:89:25:75:45:71:dc:fc:95:10:03:dd:32:53:
                    69:4b:c8:7b:aa:bb:b2:03:c3:8e:e9:f0:f8:5a:dd:
                    f1:4c:27:27:c7:62:a8:62:08:d6:1d:fb:5e:3c:d4:
                    41:ed:f5:b4:8c:1b:08:cb:89:b1:12:f8:3f:87:a4:
                    a2:52:12:bf:43:08:29:6a:20:f4:0a:75:67:94:bc:
                    41:7b:d7:f9:92:2f:64:47:ef:f7:d1:2c:9d:5a:5a:
                    7b:35:0c:69:9c:46:45:53:0d:81:c6:14:c9:b5:63:
                    dd:6a:5a:73:39:fc:97:7f:b2:37:dc:f3:20:63:f5:
                    23:57:21:c2:53:74:e5:0a:5e:4d:57:d9:dc:a8:05:
                    59:89:ed:5a:11:f8:71:1a:ad:c4:a5:ff:42:5d:1d:
                    63:1d:80:f2:96:6a:7b:42:11:bb:11:f1:bc:73:84:
                    cf:1f:13:d5:d4:2d:dd:21:13:9d:c3:a4:58:45:aa:
                    80:87:a2:53:9c:7d:15:9a:17:e0:8e:4b:ab:82:36:
                    1f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:FF:2D:3C:D6:3C:04:6F:32:E9:88:BE:9F:BD:6C:D1:AD:46:A8:6E
            X509v3 Authority Key Identifier:
                keyid:38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e32362e302f32342d3234203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:02:74:a8:1a:6e:f3:a5:fe:a8:67:61:5f:ca:5f:f2:d3:b3:
         99:e5:b0:a1:7c:ae:ef:6e:5b:22:71:e4:e9:07:3d:15:30:2a:
         4f:1a:e9:d1:93:e5:74:e9:e4:1e:9f:1c:61:5f:3b:8a:24:5f:
         42:fb:d8:60:b2:9e:9d:a0:fc:14:ba:af:8f:a7:3a:83:6c:6f:
         52:4a:70:28:27:e8:ff:a6:86:02:de:65:49:03:98:c9:3c:8b:
         ee:f1:95:5d:7a:36:d2:34:52:be:bf:95:85:5e:ff:3e:0d:dd:
         8f:69:44:01:a0:f5:81:b7:9a:0e:8e:8d:1b:a4:06:5f:cb:12:
         57:97:91:c2:7b:6a:58:09:2a:c9:3d:91:e9:7f:60:7f:1e:2b:
         c2:40:c0:f8:92:65:b1:7a:b1:99:a9:9c:3c:86:ae:57:a2:0c:
         db:a8:de:4f:78:70:9d:9f:99:ee:c5:54:0b:93:19:d3:fe:77:
         ce:c1:36:48:4a:6f:e8:ee:b7:1d:92:e1:8a:f8:1d:d8:ce:19:
         b6:9a:c5:d4:bc:2e:49:7e:8f:05:f4:df:8b:5f:4b:0c:ff:ab:
         84:39:46:6d:c2:a5:2c:20:6b:8d:4e:35:60:fa:22:ff:4a:49:
         50:6a:f2:49:e5:55:7b:87:d1:39:3c:d4:17:0e:72:28:91:e5:
         c1:ea:4f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:28:22 2026 by rpki-client