Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3133322e302f32342d3234203d3e203533303138.roa
File:                     3137372e37322e3133322e302f32342d3234203d3e203533303138.roa (raw, json)
Hash identifier:          qzHFtJom6M5ePmXg89lb8z3ZSwEHNYqJDR9c6nFTQnA=
Subject key identifier:   8D:C3:F4:DC:D4:58:41:09:91:C0:41:10:F8:0D:B4:52:E9:9F:57:17
Certificate issuer:       /CN=A544DD2AA52098BFB87BA57914AB9400EAEE4FC0
Certificate serial:       74A86481AE360781FC5C3702F7BE41D63FA2EAFF
Authority key identifier: A5:44:DD:2A:A5:20:98:BF:B8:7B:A5:79:14:AB:94:00:EA:EE:4F:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3133322e302f32342d3234203d3e203533303138.roa
Signing time:             Thu 05 Feb 2026 14:46:20 +0000
ROA not before:           Thu 05 Feb 2026 14:41:20 +0000
ROA not after:            Thu 04 Feb 2027 14:46:20 +0000
asID:                     53018
IP address blocks:        177.72.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.crl
                          rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:a8:64:81:ae:36:07:81:fc:5c:37:02:f7:be:41:d6:3f:a2:ea:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A544DD2AA52098BFB87BA57914AB9400EAEE4FC0
        Validity
            Not Before: Feb  5 14:41:20 2026 GMT
            Not After : Feb  4 14:46:20 2027 GMT
        Subject: CN=8DC3F4DCD458410991C04110F80DB452E99F5717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1e:55:8d:22:ff:91:c8:11:ad:d6:28:98:21:
                    99:8b:ee:de:7f:8a:36:5c:29:f5:eb:a9:b4:85:14:
                    c1:d3:5a:cb:8a:3e:91:6c:0e:75:f3:87:17:c6:7d:
                    21:a5:cd:df:a3:8e:75:6e:e0:7f:55:ba:6d:1a:25:
                    f6:5c:6b:d1:f7:ce:0b:e8:31:2c:ea:be:22:f9:ab:
                    bd:f2:37:f7:0e:ea:0f:8f:97:5c:54:a9:38:a9:07:
                    bc:9b:58:19:ae:14:ae:5d:27:dc:4d:32:a4:69:41:
                    46:e2:7a:f2:8b:c4:d7:c8:38:fa:76:23:ba:0b:aa:
                    d2:cc:a3:5e:71:2f:5b:91:be:dd:e9:29:39:27:30:
                    6e:4c:b5:89:98:d7:4e:9b:11:9c:1e:a3:84:8d:a2:
                    1d:e1:ac:9d:c3:2a:a7:27:60:79:0b:84:ad:43:7f:
                    7c:bf:a6:19:ec:4f:bb:e7:37:f1:80:ce:0a:d1:61:
                    4b:44:f4:cb:b8:f4:8e:38:08:71:5e:53:f0:87:17:
                    0c:9b:0d:e2:c2:0b:12:04:bd:17:8c:c0:58:f5:bf:
                    bf:98:c0:f4:a7:eb:ff:1a:f2:11:90:fb:0b:d7:77:
                    ff:b8:1e:1a:f1:30:df:b6:ab:a5:fa:e6:3c:90:e8:
                    3a:a1:6d:99:19:08:29:90:d3:34:de:b2:17:20:22:
                    be:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C3:F4:DC:D4:58:41:09:91:C0:41:10:F8:0D:B4:52:E9:9F:57:17
            X509v3 Authority Key Identifier:
                keyid:A5:44:DD:2A:A5:20:98:BF:B8:7B:A5:79:14:AB:94:00:EA:EE:4F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3133322e302f32342d3234203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:c8:b1:7b:f0:a2:93:85:2d:27:38:b4:30:8c:06:72:23:8c:
         f7:16:47:81:9b:14:0e:61:20:ce:b0:51:b4:f3:a1:1b:7b:cf:
         0b:9e:61:5a:42:02:5d:09:be:75:2f:0c:61:78:62:0e:b1:c6:
         89:95:30:04:96:0b:de:50:cf:1b:de:eb:ca:ee:08:af:7d:4c:
         18:dc:85:d4:a8:41:3f:6e:e4:03:49:ad:65:2e:2d:8c:5a:6f:
         5f:ca:21:3d:b4:42:b6:62:f3:4a:20:dd:de:3f:c1:1d:55:f5:
         3f:c6:5e:82:a1:ff:6c:fb:9b:15:15:3c:4b:4a:40:dc:ee:cf:
         1a:4f:54:57:dd:1e:6d:72:23:b8:83:89:4c:9e:c2:2c:16:5d:
         6d:61:03:6d:65:42:c1:06:b4:50:1c:67:27:9d:36:53:fa:bd:
         e7:dd:8a:45:ff:f6:6d:2f:16:fe:c9:fc:4d:df:10:f0:92:9c:
         91:e2:6f:a9:99:19:0e:cc:b4:30:6a:4a:b7:bf:32:7e:76:2a:
         6d:0b:1a:dc:f3:91:aa:5a:4e:d9:79:09:71:11:f2:53:55:5b:
         fb:05:fa:99:d5:5c:90:15:7c:70:df:87:bb:cc:a8:57:1e:46:
         04:c4:ec:bf:1e:14:fe:14:64:03:44:73:ca:d0:82:4b:d5:cc:
         ae:95:02:d4
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUdKhkga42B4H8XDcC975B1j+i6v8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU0NEREMkFBNTIwOThCRkI4N0JBNTc5MTRBQjk0MDBF
QUVFNEZDMDAeFw0yNjAyMDUxNDQxMjBaFw0yNzAyMDQxNDQ2MjBaMDMxMTAvBgNV
BAMTKDhEQzNGNERDRDQ1ODQxMDk5MUMwNDExMEY4MERCNDUyRTk5RjU3MTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfHlWNIv+RyBGt1iiYIZmL7t5/
ijZcKfXrqbSFFMHTWsuKPpFsDnXzhxfGfSGlzd+jjnVu4H9Vum0aJfZca9H3zgvo
MSzqviL5q73yN/cO6g+Pl1xUqTipB7ybWBmuFK5dJ9xNMqRpQUbievKLxNfIOPp2
I7oLqtLMo15xL1uRvt3pKTknMG5MtYmY106bEZweo4SNoh3hrJ3DKqcnYHkLhK1D
f3y/phnsT7vnN/GAzgrRYUtE9Mu49I44CHFeU/CHFwybDeLCCxIEvReMwFj1v7+Y
wPSn6/8a8hGQ+wvXd/+4HhrxMN+2q6X65jyQ6DqhbZkZCCmQ0zTeshcgIr4BAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUjcP03NRYQQmRwEEQ+A20UumfVxcwHwYDVR0j
BBgwFoAUpUTdKqUgmL+4e6V5FKuUAOruT8AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0U3Tk1BUnBnM2NQYzN0VVprRk1yS3pSdEdiNVJIdHlCR3B6dEZWV011
SmYvMS9BNTQ0REQyQUE1MjA5OEJGQjg3QkE1NzkxNEFCOTQwMEVBRUU0RkMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1NDRERDJBQTUyMDk4QkZC
ODdCQTU3OTE0QUI5NDAwRUFFRTRGQzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdFN05NQVJwZzNjUGMzdFVaa0ZNckt6UnRHYjVSSHR5QkdwenRGVldNdUpmLzEv
MzEzNzM3MmUzNzMyMmUzMTMzMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMz
MzAzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsUiEMA0GCSqGSIb3DQEBCwUAA4IBAQB2yLF78KKT
hS0nOLQwjAZyI4z3FkeBmxQOYSDOsFG086Ebe88LnmFaQgJdCb51LwxheGIOscaJ
lTAElgveUM8b3uvK7givfUwY3IXUqEE/buQDSa1lLi2MWm9fyiE9tEK2YvNKIN3e
P8EdVfU/xl6Cof9s+5sVFTxLSkDc7s8aT1RX3R5tciO4g4lMnsIsFl1tYQNtZULB
BrRQHGcnnTZT+r3n3YpF//ZtLxb+yfxN3xDwkpyR4m+pmRkOzLQwakq3vzJ+dipt
Cxrc85GqWk7ZeQlxEfJTVVv7BfqZ1VyQFXxw34e7zKhXHkYExOy/HhT+FGQDRHPK
0IJL1cyulQLU
-----END CERTIFICATE-----
Generated at Thu Feb 19 06:10:32 2026 by rpki-client