Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3133362e302f32322d3234203d3e203533303138.roa
File:                     3137372e37322e3133362e302f32322d3234203d3e203533303138.roa (raw, json)
Hash identifier:          C40mi0lD3iM0SICYSCG9jfgQApAzpF9lk0SocTawI0k=
Subject key identifier:   47:8F:D6:64:95:A3:B8:A7:49:46:81:7B:59:17:F4:4C:91:89:93:87
Certificate issuer:       /CN=A544DD2AA52098BFB87BA57914AB9400EAEE4FC0
Certificate serial:       60A00D6846114B92E9966D9F8A3DE8D88E9E2517
Authority key identifier: A5:44:DD:2A:A5:20:98:BF:B8:7B:A5:79:14:AB:94:00:EA:EE:4F:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3133362e302f32322d3234203d3e203533303138.roa
Signing time:             Thu 05 Feb 2026 14:46:20 +0000
ROA not before:           Thu 05 Feb 2026 14:41:20 +0000
ROA not after:            Thu 04 Feb 2027 14:46:20 +0000
asID:                     53018
IP address blocks:        177.72.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.crl
                          rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:a0:0d:68:46:11:4b:92:e9:96:6d:9f:8a:3d:e8:d8:8e:9e:25:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A544DD2AA52098BFB87BA57914AB9400EAEE4FC0
        Validity
            Not Before: Feb  5 14:41:20 2026 GMT
            Not After : Feb  4 14:46:20 2027 GMT
        Subject: CN=478FD66495A3B8A74946817B5917F44C91899387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:53:d6:26:9e:19:4a:f5:b6:b3:48:ca:8e:3b:
                    ca:8f:cd:3b:69:73:54:13:36:79:82:e8:18:c3:81:
                    d5:73:0a:e6:1b:3a:ad:14:8d:da:65:eb:cb:f5:b7:
                    36:6b:a9:a1:b2:89:fa:57:f1:e8:06:cd:59:a3:af:
                    17:36:39:aa:32:67:0c:5c:29:a6:52:f4:42:a2:65:
                    cd:54:34:be:7d:f5:a9:54:ab:b1:11:59:0f:ce:b6:
                    34:cc:6d:80:0b:b8:a3:a0:13:03:82:58:69:b9:00:
                    d3:3a:14:4b:15:44:90:f5:6b:3b:17:ef:53:8b:90:
                    f6:69:25:15:c7:19:bf:b4:23:e2:09:71:a5:3e:09:
                    c4:c1:4a:11:58:83:7c:c3:54:3a:7c:8a:f5:d1:6f:
                    3c:c4:9e:7d:cc:cb:25:37:aa:99:2a:41:cc:94:29:
                    fc:d9:7e:2b:4a:0b:2f:6f:6e:f8:e9:55:bf:d0:d7:
                    8a:82:e1:aa:be:1a:df:09:73:ac:3e:e5:11:34:35:
                    f1:c4:c5:6f:4d:aa:4d:41:66:31:a7:62:e6:29:43:
                    53:f7:1c:03:5e:3a:fb:ae:d6:3d:03:88:19:5b:9d:
                    24:73:59:a4:f7:2d:4d:b9:00:3e:36:9d:a9:20:fd:
                    08:d3:df:04:cb:94:be:5e:7b:7e:3d:cb:41:3e:c6:
                    8e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:8F:D6:64:95:A3:B8:A7:49:46:81:7B:59:17:F4:4C:91:89:93:87
            X509v3 Authority Key Identifier:
                keyid:A5:44:DD:2A:A5:20:98:BF:B8:7B:A5:79:14:AB:94:00:EA:EE:4F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3133362e302f32322d3234203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:b0:62:78:59:8b:b2:ac:4c:c7:72:cf:35:70:e6:d1:38:ba:
         04:d0:ef:51:06:c1:fb:9a:e6:9d:5c:f6:d8:17:b4:c0:46:8c:
         10:cb:20:85:8a:15:5f:75:96:bd:0f:d2:42:c8:c9:d3:31:b8:
         a8:12:5b:90:19:9d:02:b8:a6:c7:ea:ab:cb:65:86:b5:fe:f2:
         e4:d9:f3:63:6f:97:52:38:e5:8a:0d:6c:4d:0f:2e:89:ba:2c:
         42:9c:e0:68:9c:e7:d4:44:50:a4:bb:42:93:ea:e0:b5:bc:45:
         1a:9c:a5:b0:51:dd:3b:5e:cf:00:e8:66:b2:71:90:7d:24:7a:
         f5:24:88:6c:e1:1d:17:91:b0:f7:ca:65:30:21:d6:6e:4e:11:
         d4:4d:93:98:30:b6:4e:d8:a7:bb:31:55:6d:4a:8a:3e:6f:9d:
         78:6c:bd:45:0f:46:1d:fd:4a:55:5b:60:6d:70:a7:3c:87:d0:
         4b:dd:20:13:82:60:0a:c2:55:2b:0c:5b:07:cd:da:05:0b:da:
         7c:05:e7:28:4d:9c:d6:b0:83:2c:f8:a1:e6:2b:a0:5e:4a:2f:
         63:35:5c:2f:f6:28:d4:cf:d1:f5:3f:4c:f5:9d:94:80:62:43:
         dd:b3:67:43:53:4f:43:bc:00:13:59:6e:c6:45:73:c7:87:92:
         37:6b:a9:91
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUYKANaEYRS5Lplm2fij3o2I6eJRcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU0NEREMkFBNTIwOThCRkI4N0JBNTc5MTRBQjk0MDBF
QUVFNEZDMDAeFw0yNjAyMDUxNDQxMjBaFw0yNzAyMDQxNDQ2MjBaMDMxMTAvBgNV
BAMTKDQ3OEZENjY0OTVBM0I4QTc0OTQ2ODE3QjU5MTdGNDRDOTE4OTkzODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiU9YmnhlK9bazSMqOO8qPzTtp
c1QTNnmC6BjDgdVzCuYbOq0Ujdpl68v1tzZrqaGyifpX8egGzVmjrxc2OaoyZwxc
KaZS9EKiZc1UNL599alUq7ERWQ/OtjTMbYALuKOgEwOCWGm5ANM6FEsVRJD1azsX
71OLkPZpJRXHGb+0I+IJcaU+CcTBShFYg3zDVDp8ivXRbzzEnn3MyyU3qpkqQcyU
KfzZfitKCy9vbvjpVb/Q14qC4aq+Gt8Jc6w+5RE0NfHExW9Nqk1BZjGnYuYpQ1P3
HANeOvuu1j0DiBlbnSRzWaT3LU25AD42nakg/QjT3wTLlL5ee349y0E+xo4lAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUR4/WZJWjuKdJRoF7WRf0TJGJk4cwHwYDVR0j
BBgwFoAUpUTdKqUgmL+4e6V5FKuUAOruT8AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0U3Tk1BUnBnM2NQYzN0VVprRk1yS3pSdEdiNVJIdHlCR3B6dEZWV011
SmYvMS9BNTQ0REQyQUE1MjA5OEJGQjg3QkE1NzkxNEFCOTQwMEVBRUU0RkMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1NDRERDJBQTUyMDk4QkZC
ODdCQTU3OTE0QUI5NDAwRUFFRTRGQzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdFN05NQVJwZzNjUGMzdFVaa0ZNckt6UnRHYjVSSHR5QkdwenRGVldNdUpmLzEv
MzEzNzM3MmUzNzMyMmUzMTMzMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMz
MzAzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsUiIMA0GCSqGSIb3DQEBCwUAA4IBAQCgsGJ4WYuy
rEzHcs81cObROLoE0O9RBsH7muadXPbYF7TARowQyyCFihVfdZa9D9JCyMnTMbio
EluQGZ0CuKbH6qvLZYa1/vLk2fNjb5dSOOWKDWxNDy6JuixCnOBonOfURFCku0KT
6uC1vEUanKWwUd07Xs8A6GaycZB9JHr1JIhs4R0XkbD3ymUwIdZuThHUTZOYMLZO
2Ke7MVVtSoo+b514bL1FD0Yd/UpVW2BtcKc8h9BL3SATgmAKwlUrDFsHzdoFC9p8
BecoTZzWsIMs+KHmK6BeSi9jNVwv9ijUz9H1P0z1nZSAYkPds2dDU09DvAATWW7G
RXPHh5I3a6mR
-----END CERTIFICATE-----
Generated at Thu Feb 19 06:10:31 2026 by rpki-client