Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e32382e302f32322d3232203d3e203532363835.roa
File:                     3137372e37332e32382e302f32322d3232203d3e203532363835.roa (raw, json)
Hash identifier:          hqfhPO5CaBhlFJ1O7El9Rrl1rHNHN2NY002h8yRSq3M=
Subject key identifier:   24:38:5B:82:2E:1D:84:3B:68:DF:F7:E6:82:1F:7D:84:80:6C:F9:73
Certificate issuer:       /CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
Certificate serial:       44287676B1473DA043EE0B18DFC60B3CF7F548DA
Authority key identifier: 38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e32382e302f32322d3232203d3e203532363835.roa
Signing time:             Wed 04 Feb 2026 21:28:49 +0000
ROA not before:           Wed 04 Feb 2026 21:23:49 +0000
ROA not after:            Wed 03 Feb 2027 21:28:49 +0000
asID:                     52685
IP address blocks:        177.73.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl
                          rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 16:20:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:28:76:76:b1:47:3d:a0:43:ee:0b:18:df:c6:0b:3c:f7:f5:48:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
        Validity
            Not Before: Feb  4 21:23:49 2026 GMT
            Not After : Feb  3 21:28:49 2027 GMT
        Subject: CN=24385B822E1D843B68DFF7E6821F7D84806CF973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ff:01:99:d5:c2:d6:ba:6e:2e:9c:be:ed:42:
                    f0:99:d7:cf:39:23:2a:99:c5:fb:2c:bc:62:34:9e:
                    60:20:8f:22:63:63:0a:89:2d:18:94:eb:46:be:c4:
                    4c:1e:46:60:ad:cc:a9:d5:49:66:6e:80:2f:69:c8:
                    be:99:df:cc:d5:6f:b2:1b:ac:69:5e:96:9d:08:fc:
                    e6:41:2f:7e:28:93:7b:5f:94:fd:f6:ad:ca:a9:76:
                    4d:7c:fe:8f:d6:35:85:a3:9d:0c:46:c4:02:e3:2a:
                    02:b4:5a:cd:83:7a:1f:c1:12:42:1a:73:0b:13:d7:
                    1b:70:e0:ce:fd:bc:d8:ac:37:aa:90:f4:3f:42:d1:
                    c6:73:84:49:42:e5:1d:ce:ab:2c:a7:84:be:b3:de:
                    6c:e3:f3:dd:4a:56:9e:c3:89:fb:f9:92:2e:4d:ce:
                    f3:f6:76:4b:37:ca:b6:c2:6b:ff:ae:fe:fb:1c:96:
                    36:1d:a1:d2:49:4b:07:da:81:05:cb:1b:ca:22:8a:
                    93:74:c6:62:b3:98:a9:d3:f8:4f:9d:e6:59:d9:52:
                    18:54:ad:72:1d:3f:b6:77:51:57:1a:6b:73:cf:ad:
                    e9:0a:34:7b:60:c5:0f:dd:5c:20:5a:75:28:08:bb:
                    05:a0:c5:ad:ef:61:9e:58:22:0d:23:1b:88:c6:70:
                    6f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:38:5B:82:2E:1D:84:3B:68:DF:F7:E6:82:1F:7D:84:80:6C:F9:73
            X509v3 Authority Key Identifier:
                keyid:38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e32382e302f32322d3232203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:b6:0e:6c:18:b5:93:61:0f:18:1d:6c:81:73:40:ba:ee:b3:
         4f:81:1e:99:20:c5:6c:c0:6d:d2:36:8c:97:1c:92:10:8c:95:
         1d:3d:c3:83:49:24:64:ab:3b:bc:7c:e8:a6:3a:eb:86:34:e5:
         75:8a:f8:bf:e4:da:c2:28:dc:cf:5f:c7:02:04:57:ff:b7:62:
         43:c5:10:4c:5a:30:b9:14:72:d7:67:c8:e3:ea:a6:07:8e:d8:
         83:96:0c:5d:bb:6e:d7:ec:b9:33:d0:fe:7f:d3:e8:4e:4a:46:
         d4:bd:c1:14:9b:9e:92:9f:0a:06:bc:57:c9:61:5d:f7:e0:c8:
         93:a0:94:8c:fd:a8:4d:a9:31:e4:8b:47:f9:b8:8b:dd:7b:18:
         95:6f:02:08:60:61:ef:6a:8d:a7:58:32:06:3f:52:2d:4a:e4:
         aa:c4:25:0a:64:70:ec:85:8f:bb:83:8f:35:49:3d:8a:af:9e:
         03:ca:46:0d:4c:2a:17:60:65:5f:47:3e:41:a6:2f:60:87:80:
         18:2a:92:27:3f:bf:95:79:a7:3b:f0:25:8d:d3:40:07:59:f2:
         b6:c4:11:f1:4a:fc:3b:d7:9d:ef:b3:23:60:84:cd:73:95:34:
         f1:54:af:3b:f8:93:20:71:59:f9:5a:02:6c:26:cc:e7:64:e2:
         4f:3c:94:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:28:29 2026 by rpki-client