Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e33302e302f32332d3233203d3e203532363835.roa
File:                     3137372e37332e33302e302f32332d3233203d3e203532363835.roa (raw, json)
Hash identifier:          n6+MUbo+uXE4cay7/sUbkjg8p12smOJJOJMVVXxn5Kg=
Subject key identifier:   95:DC:0A:B6:A5:87:F2:28:E7:10:73:9B:79:34:E5:3F:91:67:49:7B
Certificate issuer:       /CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
Certificate serial:       324B43DC78168BF2BC4304D63AA7C1FCAF6085F1
Authority key identifier: 38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e33302e302f32332d3233203d3e203532363835.roa
Signing time:             Wed 04 Feb 2026 21:28:50 +0000
ROA not before:           Wed 04 Feb 2026 21:23:50 +0000
ROA not after:            Wed 03 Feb 2027 21:28:50 +0000
asID:                     52685
IP address blocks:        177.73.30.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl
                          rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 10:18:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:4b:43:dc:78:16:8b:f2:bc:43:04:d6:3a:a7:c1:fc:af:60:85:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
        Validity
            Not Before: Feb  4 21:23:50 2026 GMT
            Not After : Feb  3 21:28:50 2027 GMT
        Subject: CN=95DC0AB6A587F228E710739B7934E53F9167497B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:73:94:df:95:be:e4:c7:10:a1:14:e4:cc:f1:
                    ec:69:ff:d4:a5:3e:b0:e5:d5:6e:65:f0:d3:87:f1:
                    3c:20:fc:c7:36:81:ee:fe:63:ac:ef:41:2e:ec:65:
                    b0:7c:46:a3:d4:fd:58:08:e0:c7:24:01:38:ae:9c:
                    9e:96:56:b4:df:b8:52:5d:28:2a:96:cf:fb:77:e4:
                    9b:9c:c3:67:c6:88:1d:dc:af:c9:2e:6c:e9:31:95:
                    6a:9a:d8:2b:5e:4b:c2:62:22:b7:73:31:8a:65:21:
                    75:15:af:a3:fd:97:a5:0a:51:ca:0b:38:ee:5f:6f:
                    ef:8d:22:65:85:0c:8d:ce:da:ed:4a:01:cb:1b:88:
                    a8:4f:65:8c:c4:5b:43:8f:19:75:7a:3c:b3:2f:73:
                    86:c1:7f:ad:10:86:21:c5:16:cf:76:57:89:fa:60:
                    d6:40:0e:c5:1f:91:a7:ad:2a:87:8a:83:c7:16:c9:
                    a1:c0:68:d9:58:41:87:f0:69:5e:76:cb:59:76:68:
                    bc:44:04:e5:d6:0e:4a:cb:53:9a:70:b7:ed:e1:b1:
                    1a:27:de:ee:3a:67:ee:2a:ca:de:aa:de:21:c4:22:
                    f2:6d:83:58:72:bd:28:35:b7:28:c0:e9:70:a1:6e:
                    4e:12:98:06:02:85:4b:3c:df:49:28:30:87:ce:c4:
                    19:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:DC:0A:B6:A5:87:F2:28:E7:10:73:9B:79:34:E5:3F:91:67:49:7B
            X509v3 Authority Key Identifier:
                keyid:38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e33302e302f32332d3233203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b3:c3:f1:87:e6:23:dd:3f:bc:3b:ce:45:71:eb:b8:c9:20:8f:
         15:7d:6c:cf:60:40:28:6a:50:60:a3:82:52:32:e7:c6:fd:fc:
         3c:ca:07:b2:55:d2:7d:d0:44:86:27:3c:41:74:44:12:5e:fd:
         75:5b:6b:d9:d9:97:e2:4e:97:69:62:45:8c:21:b9:d6:1b:47:
         cb:b9:0d:8b:29:d6:00:88:35:29:6c:a9:11:95:ab:bb:69:58:
         9a:ea:d5:ea:31:b2:4a:3a:39:8d:c6:eb:6c:9e:1a:33:3e:f3:
         23:89:5f:d3:14:ef:9f:c8:da:22:fb:b9:1d:04:6c:73:9e:eb:
         ab:f9:cb:00:15:94:43:f3:e5:18:16:93:a7:c3:bf:ad:b2:3e:
         4f:94:a9:9f:16:15:61:86:ad:41:77:0d:dd:46:65:52:f3:5c:
         69:28:c9:4e:7d:62:3f:a4:f2:1e:87:ab:6b:f5:36:95:1d:9e:
         56:e2:8e:34:8e:aa:d3:5a:50:65:75:05:35:87:c6:dd:5c:69:
         41:f0:93:71:c5:59:1f:2a:df:46:9e:86:75:3e:04:06:3d:b9:
         40:96:5c:93:1d:01:f9:9e:a6:7c:90:c8:ce:bb:94:83:5e:4b:
         7c:9c:1f:d3:0b:9a:4f:9e:d8:49:99:07:79:60:9d:41:58:12:
         1e:a1:a2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:23:22 2026 by rpki-client