Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137372e38372e302e302f32312d3231203d3e20323632363432.roa
File:                     3137372e38372e302e302f32312d3231203d3e20323632363432.roa (raw, json)
Hash identifier:          ghp8DhT3Dk3LowwLXextTzQmzzgLKVl57w0SQIbpPEQ=
Subject key identifier:   D3:69:15:B7:1A:E4:79:0F:60:61:81:AA:C4:D5:E7:3A:F1:A8:F8:78
Certificate issuer:       /CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
Certificate serial:       4406EABF9A229D30DBDF3B11CE8E48CD42E5EB21
Authority key identifier: C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137372e38372e302e302f32312d3231203d3e20323632363432.roa
Signing time:             Thu 05 Feb 2026 04:43:39 +0000
ROA not before:           Thu 05 Feb 2026 04:38:39 +0000
ROA not after:            Thu 04 Feb 2027 04:43:39 +0000
asID:                     262642
IP address blocks:        177.87.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:20:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:06:ea:bf:9a:22:9d:30:db:df:3b:11:ce:8e:48:cd:42:e5:eb:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
        Validity
            Not Before: Feb  5 04:38:39 2026 GMT
            Not After : Feb  4 04:43:39 2027 GMT
        Subject: CN=D36915B71AE4790F606181AAC4D5E73AF1A8F878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e3:4e:24:83:a7:f4:57:9e:0b:55:f2:b3:2a:
                    09:41:82:ae:f1:59:63:04:6a:5c:1a:e0:8c:bd:c3:
                    85:38:dd:69:14:94:e2:bb:d6:0f:48:57:c3:0c:38:
                    d0:af:05:dd:cb:c5:1f:ab:4d:d2:3d:e1:62:bd:27:
                    b4:fe:76:10:7d:18:31:33:1d:8e:ed:0e:40:0e:ae:
                    dc:0f:13:24:b3:9a:fe:64:54:03:a3:9f:58:3e:b4:
                    e2:b9:01:bf:59:66:aa:23:80:86:8f:08:5c:9f:6b:
                    e0:84:e5:5f:07:6e:1d:08:55:50:a3:4e:5e:f6:83:
                    8e:ab:57:ae:39:08:46:38:e4:8a:8a:ef:38:e8:69:
                    c0:44:cc:f7:a7:b2:99:35:2b:f2:28:e7:97:a0:50:
                    fd:16:52:a2:7e:72:ad:67:14:72:af:f2:57:bf:b4:
                    b8:fb:2c:1b:7e:5a:60:38:40:0c:46:03:be:34:d5:
                    6f:9f:60:0d:62:60:db:83:13:4b:36:0d:e1:bf:7a:
                    c3:bb:06:fd:3d:ff:3e:b5:cb:45:64:92:63:ee:46:
                    37:ec:ae:c2:7b:02:d7:91:70:38:39:f6:b8:19:58:
                    d2:1e:bf:7b:21:2b:12:1a:ef:2c:21:2a:41:2a:65:
                    98:f6:1c:11:eb:57:12:38:35:0b:61:e4:da:8c:c9:
                    4e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:69:15:B7:1A:E4:79:0F:60:61:81:AA:C4:D5:E7:3A:F1:A8:F8:78
            X509v3 Authority Key Identifier:
                keyid:C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137372e38372e302e302f32312d3231203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2c:4d:3b:d5:3c:c1:95:2c:08:a0:43:56:a4:d2:68:7a:1a:56:
         c8:f7:5b:04:70:1e:57:aa:f6:bf:84:b4:07:0b:fd:a7:97:f6:
         31:2c:d4:32:90:b3:f3:86:05:8a:60:29:1c:f3:18:fa:ba:a2:
         b6:f3:a9:99:f6:c3:92:9e:b5:c5:75:84:c7:e8:60:93:b7:45:
         95:66:0d:e9:ed:5b:0d:95:ce:bb:18:b5:7e:6f:d3:a6:43:3c:
         8e:d3:ed:c6:d5:70:1d:f2:e4:50:ea:38:ee:c8:c7:aa:51:3a:
         4f:6f:f1:b5:d2:fc:42:af:dc:f1:67:91:e4:68:5e:b0:67:a2:
         fa:c3:eb:c1:e5:de:ae:e3:b7:75:ca:3c:8b:c4:9e:a2:74:c5:
         df:05:b0:c0:ff:09:2d:62:9e:8c:8f:5e:be:58:e9:01:38:3c:
         10:ba:af:9f:2b:67:f8:c7:0e:d6:fd:b1:61:25:ff:73:50:da:
         87:0b:37:e6:2c:42:16:14:f9:39:36:da:fb:21:fa:43:3c:02:
         a0:b2:67:3d:93:8e:59:a6:2d:53:a6:48:96:a8:e1:65:2b:12:
         b8:6b:e8:b9:fd:ce:10:0e:94:96:62:a3:02:e1:c3:25:8b:3b:
         f2:1d:63:0a:27:41:c3:f5:02:ac:ff:1e:1d:69:e6:5b:7e:c5:
         a5:14:a4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 01:42:34 2026 by rpki-client