Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3134302e302f32332d3234203d3e203533303138.roa
File:                     3137372e37322e3134302e302f32332d3234203d3e203533303138.roa (raw, json)
Hash identifier:          5eLFHUYxz9BUIzrtMBlfR1CJCuE+KFuAOIV7DldC3CU=
Subject key identifier:   9F:56:B5:1D:E2:89:ED:09:63:7C:87:E1:19:1F:7B:B1:58:DD:6C:74
Certificate issuer:       /CN=A544DD2AA52098BFB87BA57914AB9400EAEE4FC0
Certificate serial:       6DAF3034E39E31937F50FC32F7D9A69D56F25240
Authority key identifier: A5:44:DD:2A:A5:20:98:BF:B8:7B:A5:79:14:AB:94:00:EA:EE:4F:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3134302e302f32332d3234203d3e203533303138.roa
Signing time:             Thu 05 Feb 2026 14:46:21 +0000
ROA not before:           Thu 05 Feb 2026 14:41:21 +0000
ROA not after:            Thu 04 Feb 2027 14:46:21 +0000
asID:                     53018
IP address blocks:        177.72.140.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.crl
                          rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:af:30:34:e3:9e:31:93:7f:50:fc:32:f7:d9:a6:9d:56:f2:52:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A544DD2AA52098BFB87BA57914AB9400EAEE4FC0
        Validity
            Not Before: Feb  5 14:41:21 2026 GMT
            Not After : Feb  4 14:46:21 2027 GMT
        Subject: CN=9F56B51DE289ED09637C87E1191F7BB158DD6C74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b6:2e:23:df:58:ed:71:ca:23:99:30:11:b0:
                    ee:71:9e:f0:d7:3a:7f:00:af:03:be:7d:16:5b:5d:
                    90:b0:a3:e2:0d:34:a9:e7:29:a4:ab:a2:4f:b4:d9:
                    37:94:16:6e:63:bd:92:a8:df:87:5e:60:ea:11:ff:
                    5e:6b:9c:d3:7b:e1:27:98:27:be:4b:c8:54:0a:72:
                    87:cf:13:d6:a8:64:4f:35:8b:61:1b:55:c4:b8:3a:
                    aa:8a:ff:67:55:ad:91:e6:4b:c4:e8:7a:a7:69:0d:
                    c4:92:4e:dd:29:f6:75:e6:32:b2:ca:f4:e1:b8:f4:
                    df:ef:d8:99:2e:7f:b1:f0:ed:69:49:f0:95:4e:d5:
                    b4:64:50:0a:2e:6a:ef:fb:7e:59:53:ec:15:4c:f1:
                    e7:52:85:6c:bc:3c:e5:6e:d6:71:72:d2:17:e7:dd:
                    08:b1:de:c7:23:9e:11:3d:75:a0:c1:49:ca:66:f2:
                    27:59:ab:a7:46:f0:77:43:a0:4d:49:70:af:9d:93:
                    b8:55:12:d3:2d:24:82:fa:57:91:d1:fa:ef:9b:df:
                    e6:5b:67:c1:db:1e:cf:b7:ff:4b:4c:4c:cd:7f:9f:
                    5d:b6:43:15:4b:a1:38:13:74:07:84:ea:1a:cb:0d:
                    d6:79:de:2d:b0:40:ba:69:b3:74:63:7f:85:db:a9:
                    3c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:56:B5:1D:E2:89:ED:09:63:7C:87:E1:19:1F:7B:B1:58:DD:6C:74
            X509v3 Authority Key Identifier:
                keyid:A5:44:DD:2A:A5:20:98:BF:B8:7B:A5:79:14:AB:94:00:EA:EE:4F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3134302e302f32332d3234203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:27:98:e9:6c:bd:b9:a4:65:a5:94:51:9e:82:2e:68:38:d1:
         00:9c:b5:38:20:db:dc:e9:3b:76:63:83:f3:91:ea:e1:18:62:
         7f:02:04:7e:4f:5f:ad:84:42:96:53:76:73:e2:e2:5c:93:63:
         81:8f:32:92:3f:4a:e7:68:64:71:de:bb:e2:71:4b:cf:b9:b9:
         45:2b:5f:71:22:40:c3:c4:e2:bd:07:0e:df:53:59:a2:00:26:
         4a:24:7a:3f:c3:c1:24:7c:19:d4:c3:98:a7:e0:97:76:39:ef:
         eb:f4:f1:af:af:7d:88:c0:28:1e:f2:1e:c5:a3:20:bf:a2:2c:
         8f:d3:f6:a7:9a:d0:30:68:01:e9:0a:32:a1:6d:ba:60:65:64:
         2a:f9:85:c9:fb:06:70:55:b7:fe:ec:e7:56:a1:1e:10:53:84:
         a2:cb:d9:2e:09:95:23:01:59:56:54:71:bf:b1:55:e3:30:e0:
         92:ac:b0:3e:9e:be:c2:14:aa:6d:40:43:bd:e7:41:f6:5a:8e:
         7a:62:e2:54:b2:c8:e5:3b:3f:c1:09:bd:2c:d6:10:7c:21:77:
         af:5c:b2:a1:6a:d6:61:f6:7f:cb:a2:df:84:f5:ce:0a:78:b8:
         a6:48:91:d7:ee:6a:bf:95:fd:cd:dc:59:93:ee:48:ce:2b:2d:
         af:d4:8d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 06:10:33 2026 by rpki-client