Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137372e38372e322e302f32342d3234203d3e20323632363432.roa
File:                     3137372e38372e322e302f32342d3234203d3e20323632363432.roa (raw, json)
Hash identifier:          rCTu+bviuAChWTJISv5i7a2fh72/FJ+Nk+CROFeSRw4=
Subject key identifier:   28:31:98:E1:F0:23:E8:A5:5F:ED:0C:3C:2F:06:CC:78:9F:53:08:4C
Certificate issuer:       /CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
Certificate serial:       39F4FB10F5F9517C126DB361948FACF313636AA2
Authority key identifier: C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137372e38372e322e302f32342d3234203d3e20323632363432.roa
Signing time:             Thu 05 Feb 2026 04:43:39 +0000
ROA not before:           Thu 05 Feb 2026 04:38:39 +0000
ROA not after:            Thu 04 Feb 2027 04:43:39 +0000
asID:                     262642
IP address blocks:        177.87.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:20:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:f4:fb:10:f5:f9:51:7c:12:6d:b3:61:94:8f:ac:f3:13:63:6a:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
        Validity
            Not Before: Feb  5 04:38:39 2026 GMT
            Not After : Feb  4 04:43:39 2027 GMT
        Subject: CN=283198E1F023E8A55FED0C3C2F06CC789F53084C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:07:c3:86:ca:6d:28:4b:9b:10:64:43:fc:bb:
                    51:18:8b:4e:18:07:01:6c:eb:b4:4f:e8:3e:ef:d0:
                    8c:d8:78:b1:2d:0a:e3:72:2f:25:17:33:88:b0:03:
                    52:81:96:46:55:92:6e:4c:6f:a5:d2:aa:27:ac:d6:
                    14:bd:67:36:bd:6e:1a:3f:41:bd:59:20:2a:d3:0c:
                    83:19:aa:65:93:80:d7:e5:84:1e:fb:c6:91:e3:2c:
                    de:ee:36:cf:ee:21:33:20:88:94:37:96:ea:3b:ec:
                    91:9a:78:18:6d:42:5c:1d:0f:de:f0:a9:e6:94:7c:
                    25:db:78:df:1a:ed:06:8e:75:ca:b7:58:9f:ef:a6:
                    f1:3c:2e:82:67:4b:d5:09:9e:d2:94:b6:ed:52:8c:
                    46:68:26:fe:73:6f:f7:66:5b:95:27:8a:b8:fc:1b:
                    c6:f5:e3:9d:1d:ff:e3:7c:bc:0e:03:6a:a7:e8:37:
                    e9:52:fb:7d:52:91:29:72:1d:bd:23:d6:e3:70:1f:
                    f9:a2:e4:e7:dd:cb:e4:27:9e:82:09:51:24:65:29:
                    ee:52:6a:fd:5c:73:22:b3:36:d3:cf:a8:e6:02:35:
                    a9:23:68:85:4b:26:bf:75:68:de:85:e4:e6:fd:6b:
                    2a:84:cc:28:be:e4:0b:5e:37:ce:ab:d2:a2:07:1c:
                    12:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:31:98:E1:F0:23:E8:A5:5F:ED:0C:3C:2F:06:CC:78:9F:53:08:4C
            X509v3 Authority Key Identifier:
                keyid:C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137372e38372e322e302f32342d3234203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:89:42:b3:40:8b:cb:98:d6:37:15:60:e9:4e:6b:b5:92:2c:
         40:6d:6b:4a:5c:6b:34:84:96:9d:4f:59:af:ef:5e:f3:4b:64:
         5b:c9:a3:c7:61:d8:b5:3a:96:03:a0:d3:f6:98:ba:39:12:b3:
         b5:a8:8e:dd:04:6a:2a:a4:50:1e:90:79:c2:e3:db:8a:2c:de:
         0f:b2:a1:2b:f3:2e:a3:ab:15:d0:b6:03:33:b9:c5:6b:e1:4e:
         34:85:2c:99:b0:d0:29:6d:d2:e6:85:bb:cb:af:4d:26:2f:c2:
         3e:9b:3f:84:3c:e5:11:30:3f:7b:4c:fb:e3:50:4f:55:c6:19:
         d9:5f:4d:54:39:c6:c8:39:99:61:3b:0f:35:23:3d:66:81:dc:
         b8:2c:29:f2:69:6e:af:87:2b:e6:fd:f2:17:5c:10:32:c7:52:
         9d:fb:17:d9:56:ed:70:b5:ad:74:29:be:eb:0e:5e:ff:77:30:
         11:39:13:4f:f5:3d:e8:5b:fb:d0:3a:b4:3a:9f:8c:c7:49:ad:
         a8:7a:fb:15:67:48:fc:69:7e:1e:ec:4b:03:d2:41:34:b0:26:
         b8:03:2f:e5:e2:7a:19:b5:1f:3a:ae:90:03:94:2c:54:a8:8f:
         df:22:39:8e:25:7d:dc:54:d0:7e:af:fc:14:14:ba:fd:f3:7f:
         f6:39:4f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:43:07 2026 by rpki-client