Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/3137372e38362e3132322e302f32332d3233203d3e203532383532.roa
File:                     3137372e38362e3132322e302f32332d3233203d3e203532383532.roa (raw, json)
Hash identifier:          w2C0YHP6tf1oR+p6FNid1d+ORCrxq2BRdn7N2dRiGnc=
Subject key identifier:   6B:D0:DB:88:15:20:06:87:E8:E5:64:35:7B:43:AB:97:D1:8D:25:CE
Certificate issuer:       /CN=0D483B0825B3E88C6437693FB9EC26E45EAACF21
Certificate serial:       4B2280CC5BCA3AB65BC0125750C05F9B554C3135
Authority key identifier: 0D:48:3B:08:25:B3:E8:8C:64:37:69:3F:B9:EC:26:E4:5E:AA:CF:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/3137372e38362e3132322e302f32332d3233203d3e203532383532.roa
Signing time:             Wed 04 Feb 2026 20:25:25 +0000
ROA not before:           Wed 04 Feb 2026 20:20:25 +0000
ROA not after:            Wed 03 Feb 2027 20:25:25 +0000
asID:                     52852
IP address blocks:        177.86.122.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.crl
                          rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 18:53:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:22:80:cc:5b:ca:3a:b6:5b:c0:12:57:50:c0:5f:9b:55:4c:31:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D483B0825B3E88C6437693FB9EC26E45EAACF21
        Validity
            Not Before: Feb  4 20:20:25 2026 GMT
            Not After : Feb  3 20:25:25 2027 GMT
        Subject: CN=6BD0DB8815200687E8E564357B43AB97D18D25CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c5:01:80:9f:34:2a:23:3e:8b:fa:1c:73:36:
                    97:e2:42:b6:08:3b:3b:e5:a2:32:5d:00:9f:18:9f:
                    3c:d2:1c:cc:8d:66:b0:96:ce:5c:50:8c:98:a6:bb:
                    64:13:87:59:e2:bd:9a:85:a8:2e:a7:fe:68:6e:a7:
                    31:a3:21:c4:6c:25:ab:38:e1:a3:cb:f0:61:f2:35:
                    86:57:0b:fc:f1:10:4f:d7:fb:34:fb:e3:89:aa:d0:
                    21:55:1b:cc:52:f5:31:75:8a:87:58:39:22:50:5a:
                    6c:d7:57:95:70:9c:3c:d3:56:35:e6:bb:b1:5e:00:
                    40:74:4b:7d:07:1e:99:fe:76:5c:2c:35:31:4b:85:
                    7c:fc:a6:02:9b:bc:92:71:ad:a9:41:d6:63:fa:fa:
                    dc:56:ef:f7:cd:6b:6b:58:92:b1:05:89:08:87:ea:
                    7b:09:9c:a0:04:02:8f:a9:2e:e0:dc:eb:23:85:75:
                    c9:8a:47:8f:60:7a:42:46:07:54:b7:5e:3b:e4:19:
                    dd:8f:72:f5:b1:7b:bf:69:fb:49:fd:1d:4a:1b:0d:
                    d3:12:b0:d9:04:23:ce:d1:e3:be:20:e8:de:a1:4e:
                    71:c8:88:c4:7d:c9:cb:95:09:71:52:07:76:38:d8:
                    e0:24:46:47:75:a6:03:3a:17:40:bb:1f:c3:21:84:
                    42:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D0:DB:88:15:20:06:87:E8:E5:64:35:7B:43:AB:97:D1:8D:25:CE
            X509v3 Authority Key Identifier:
                keyid:0D:48:3B:08:25:B3:E8:8C:64:37:69:3F:B9:EC:26:E4:5E:AA:CF:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/3137372e38362e3132322e302f32332d3233203d3e203532383532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:28:8c:14:4b:67:84:a3:e4:3a:2c:3e:2a:8b:70:e4:42:c8:
         e2:c2:a8:78:c3:36:d5:df:59:30:bc:19:f1:43:6b:98:fa:3a:
         5f:fd:2c:18:58:3d:20:25:c4:87:d0:73:00:83:6a:fe:43:8d:
         fd:f2:ea:19:a6:f6:8a:f8:d3:27:90:b1:28:15:eb:72:55:f8:
         8f:bd:db:89:d9:d9:93:fd:e4:fb:15:81:fc:77:17:d0:83:dd:
         ac:35:24:35:d2:e2:19:cc:cf:fd:70:c2:53:17:78:5f:f2:6d:
         28:c5:84:60:7c:2a:32:35:ab:18:2f:d5:f4:26:25:18:c3:ad:
         f6:e4:5b:64:20:d4:9f:7e:3e:4c:11:f7:bd:0b:a8:ab:8d:72:
         98:bf:fc:24:a5:34:26:8e:a3:f3:f1:ab:de:45:74:a9:92:db:
         66:14:8a:fe:ff:0f:fa:46:f9:41:38:94:0c:f3:e9:05:b3:37:
         c7:ef:93:65:ea:f3:68:e0:bb:14:0e:e3:28:96:99:b1:47:c8:
         91:6d:05:89:c5:7a:7c:44:25:7d:7e:81:a6:2f:f5:f5:2e:54:
         44:db:19:1e:20:94:8c:8d:16:61:14:ff:57:1e:48:62:4c:e3:
         b2:62:5e:b4:4f:14:ad:e2:33:1e:05:23:7c:4c:0e:48:d1:86:
         e4:28:e3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:18:11 2026 by rpki-client