Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/3137372e38362e3132302e302f32342d3234203d3e203532383532.roa
File:                     3137372e38362e3132302e302f32342d3234203d3e203532383532.roa (raw, json)
Hash identifier:          EPieHgmaGEVf3YfI/OOnumcY8u8IJJlQ7zjgs37/Frk=
Subject key identifier:   D1:82:0D:28:71:04:18:A3:1D:93:49:47:C5:C6:E3:46:DC:E9:E3:D1
Certificate issuer:       /CN=0D483B0825B3E88C6437693FB9EC26E45EAACF21
Certificate serial:       3BF17F348E1963F9D66031AA4DC50FE4BD4FCA6E
Authority key identifier: 0D:48:3B:08:25:B3:E8:8C:64:37:69:3F:B9:EC:26:E4:5E:AA:CF:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/3137372e38362e3132302e302f32342d3234203d3e203532383532.roa
Signing time:             Wed 04 Feb 2026 20:25:25 +0000
ROA not before:           Wed 04 Feb 2026 20:20:25 +0000
ROA not after:            Wed 03 Feb 2027 20:25:25 +0000
asID:                     52852
IP address blocks:        177.86.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.crl
                          rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 18:53:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:f1:7f:34:8e:19:63:f9:d6:60:31:aa:4d:c5:0f:e4:bd:4f:ca:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D483B0825B3E88C6437693FB9EC26E45EAACF21
        Validity
            Not Before: Feb  4 20:20:25 2026 GMT
            Not After : Feb  3 20:25:25 2027 GMT
        Subject: CN=D1820D28710418A31D934947C5C6E346DCE9E3D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f3:2f:ac:81:a6:8d:0a:4f:ba:71:c6:52:07:
                    8d:38:86:37:5d:a4:a1:d4:39:a3:03:12:49:9d:b3:
                    68:55:5b:00:7a:93:bf:11:ab:73:88:31:dd:4a:4e:
                    24:c7:5f:6c:8d:94:fa:42:08:d3:f4:bd:4a:db:c2:
                    3d:ce:96:75:6d:ee:ff:2b:94:51:4c:16:09:9b:a9:
                    86:9d:a6:a7:66:47:c1:fa:89:48:db:f4:18:b0:db:
                    3f:21:a2:96:82:05:70:59:b0:15:18:2e:2c:43:2f:
                    b0:3e:00:96:29:f6:4c:2a:bd:9d:b0:9e:76:80:43:
                    04:aa:e5:39:6e:d2:a9:f3:88:14:f0:e5:a7:f1:80:
                    61:63:5a:06:db:5f:e6:d8:8c:23:4e:9c:70:54:1c:
                    59:0b:f8:6b:da:c5:8c:ca:13:de:aa:07:04:af:b6:
                    8d:92:dd:81:e8:7a:22:b5:14:65:22:fe:98:b5:18:
                    83:48:f7:8d:87:17:32:d8:78:fa:b4:fc:40:55:fe:
                    7c:03:10:16:26:77:48:9c:6e:0d:6f:60:53:c3:52:
                    aa:f8:34:bd:3d:8b:6c:ab:42:bf:a7:19:18:7b:60:
                    38:45:80:69:d4:31:15:56:49:54:d2:87:5f:37:8e:
                    52:5c:ff:76:d6:e2:37:da:fa:c1:dd:62:86:da:d6:
                    8a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:82:0D:28:71:04:18:A3:1D:93:49:47:C5:C6:E3:46:DC:E9:E3:D1
            X509v3 Authority Key Identifier:
                keyid:0D:48:3B:08:25:B3:E8:8C:64:37:69:3F:B9:EC:26:E4:5E:AA:CF:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/3137372e38362e3132302e302f32342d3234203d3e203532383532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:58:a6:27:6c:c4:9c:b2:32:8d:4e:0c:55:73:a8:ad:10:56:
         e5:bd:98:0a:fe:64:36:ef:69:52:bd:0f:8a:c8:35:fd:35:4e:
         c4:23:68:ed:6d:f8:49:21:71:82:99:9d:21:34:d1:0e:25:49:
         3d:57:43:e2:0a:37:1e:fa:3e:7f:68:7c:b3:27:b3:a2:48:fa:
         47:d5:c6:86:63:dc:d8:ab:3d:02:53:05:e0:0a:11:0b:4b:b3:
         22:e8:95:17:7a:e0:9f:36:2d:68:c8:51:c9:ff:a3:10:a0:8c:
         09:94:96:49:b8:eb:6d:6b:0a:83:d5:0b:96:1b:12:cf:28:48:
         7e:c9:4f:06:c8:7b:98:16:21:8e:07:28:6b:96:30:ff:2e:a2:
         09:95:74:95:70:17:d1:0a:03:78:f8:91:20:e8:d0:ab:02:5a:
         5d:63:00:c5:46:77:3b:6b:aa:c6:fb:86:be:87:e8:36:c5:4d:
         d6:24:59:81:ef:e5:67:6f:53:68:08:67:84:fe:f7:e4:7b:ae:
         4e:49:ba:d4:77:d4:d0:f8:11:ca:ec:76:89:f3:00:1d:04:2d:
         17:ce:53:0a:4d:cf:53:ca:da:dd:f7:15:ac:5e:6a:eb:23:a5:
         ff:d8:8e:56:4a:b6:f1:23:d8:ab:35:bf:2d:60:24:38:f6:5e:
         05:63:88:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:17:49 2026 by rpki-client