Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137372e38372e312e302f32342d3234203d3e20323632363432.roa
File:                     3137372e38372e312e302f32342d3234203d3e20323632363432.roa (raw, json)
Hash identifier:          7+aIWb5xrpMBHRXykBIARduFrZvuMknXQg2ogiRNMgw=
Subject key identifier:   1E:58:59:9F:C8:F0:E1:05:D9:A2:04:B8:D9:65:35:BE:8A:29:9A:A8
Certificate issuer:       /CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
Certificate serial:       305B1CA62F5A9F26DD7A4A7D842048615304F9D6
Authority key identifier: C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137372e38372e312e302f32342d3234203d3e20323632363432.roa
Signing time:             Thu 05 Feb 2026 04:43:39 +0000
ROA not before:           Thu 05 Feb 2026 04:38:39 +0000
ROA not after:            Thu 04 Feb 2027 04:43:39 +0000
asID:                     262642
IP address blocks:        177.87.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:20:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:5b:1c:a6:2f:5a:9f:26:dd:7a:4a:7d:84:20:48:61:53:04:f9:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
        Validity
            Not Before: Feb  5 04:38:39 2026 GMT
            Not After : Feb  4 04:43:39 2027 GMT
        Subject: CN=1E58599FC8F0E105D9A204B8D96535BE8A299AA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:53:da:8c:ee:11:31:df:12:13:db:b3:54:bc:
                    f3:fe:52:dc:20:33:0c:84:46:c6:83:76:43:79:c3:
                    f7:7b:2b:b7:ba:9e:98:b2:8a:33:75:22:a4:88:48:
                    97:73:0a:cb:3d:73:29:bc:d1:41:36:31:94:5d:34:
                    46:71:41:87:b6:7e:7b:4b:88:4d:bb:7b:b4:1d:27:
                    cb:20:4c:72:9d:40:c2:0e:bf:29:2a:07:c0:f3:15:
                    f3:6f:8e:bf:3f:c3:08:45:96:a4:a8:7c:5a:96:d2:
                    35:4b:48:69:69:17:c9:18:26:da:33:8a:cc:08:6f:
                    80:53:27:8b:e3:85:08:d1:8b:63:59:19:db:dd:3c:
                    11:85:b4:b0:82:90:b7:6a:be:ed:5e:90:29:8e:f7:
                    d2:91:d6:ac:42:c9:f3:39:30:ed:10:ea:57:60:aa:
                    8f:30:d3:1c:cf:e5:28:f5:ec:89:48:55:0d:8b:b3:
                    84:cb:a8:71:9a:89:88:18:d7:88:54:f5:0c:76:d7:
                    55:7d:df:9b:52:2f:76:d6:8b:5c:27:45:74:44:eb:
                    e3:9b:29:e7:b3:44:cc:ef:db:67:0e:17:0f:25:f4:
                    25:38:b5:87:84:18:02:02:9c:04:7c:3f:a0:38:47:
                    f3:b2:f3:7e:a6:93:0d:ec:e9:f2:a2:8c:5c:ca:84:
                    0d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:58:59:9F:C8:F0:E1:05:D9:A2:04:B8:D9:65:35:BE:8A:29:9A:A8
            X509v3 Authority Key Identifier:
                keyid:C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137372e38372e312e302f32342d3234203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:44:ca:98:4b:bc:a0:de:05:c2:bd:b7:ae:6a:97:2f:02:53:
         e3:cd:96:4d:29:f2:5b:f5:35:e0:86:0e:24:6e:64:1c:ef:2f:
         50:43:22:06:cd:52:58:37:03:9e:18:c9:17:f9:01:2a:38:3d:
         37:8d:c0:f2:e8:79:a1:af:12:25:51:67:64:6e:fc:c7:70:7f:
         c2:6c:84:49:30:16:64:2b:90:25:0d:c9:76:fd:e2:83:34:e3:
         33:95:ef:e1:8d:85:07:fa:f1:58:a4:f6:26:ee:7b:c7:70:a2:
         79:d5:97:fb:28:15:ab:f1:b6:ef:1b:33:de:76:67:42:41:86:
         f4:67:94:f8:0d:95:9d:a4:78:04:0d:aa:c1:7c:71:90:c5:66:
         04:c7:5e:5c:31:dd:40:11:21:58:d2:29:46:9c:78:93:98:4f:
         a6:7a:e7:5a:15:59:dd:1a:84:8e:a5:2d:06:9e:d0:21:53:94:
         27:35:3a:9b:c5:89:9a:9c:64:66:37:a8:a0:d9:3b:5c:bb:03:
         51:b5:87:eb:44:17:ef:e3:4a:b2:89:50:84:91:05:d9:52:8b:
         c9:0a:76:6d:01:19:cf:69:91:a4:ec:81:fe:eb:f8:86:e8:79:
         92:42:ad:c5:a0:6f:62:52:57:b8:af:c0:e3:05:1b:2c:89:f6:
         25:c0:71:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 01:42:09 2026 by rpki-client