Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/1/3137372e35342e36342e302f32302d3234203d3e203238313534.roa
File:                     3137372e35342e36342e302f32302d3234203d3e203238313534.roa (raw, json)
Hash identifier:          ewI/qYag4wfdaWBOLywUVYR7OpqGnpoBxfHyr+fgJXs=
Subject key identifier:   22:1E:46:8E:71:65:A2:16:47:25:3F:58:4F:D7:2D:D4:07:05:4C:74
Certificate issuer:       /CN=812191D8B89140CC7C6B2A5D3CF140116F023979
Certificate serial:       1AD6784FB7BDBAA9AADAEB2E115F51265A8A1C70
Authority key identifier: 81:21:91:D8:B8:91:40:CC:7C:6B:2A:5D:3C:F1:40:11:6F:02:39:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/812191D8B89140CC7C6B2A5D3CF140116F023979.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/1/3137372e35342e36342e302f32302d3234203d3e203238313534.roa
Signing time:             Thu 05 Feb 2026 08:38:06 +0000
ROA not before:           Thu 05 Feb 2026 08:33:06 +0000
ROA not after:            Thu 04 Feb 2027 08:38:06 +0000
asID:                     28154
IP address blocks:        177.54.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/1/812191D8B89140CC7C6B2A5D3CF140116F023979.crl
                          rsync://rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/1/812191D8B89140CC7C6B2A5D3CF140116F023979.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/812191D8B89140CC7C6B2A5D3CF140116F023979.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 18:13:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:d6:78:4f:b7:bd:ba:a9:aa:da:eb:2e:11:5f:51:26:5a:8a:1c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=812191D8B89140CC7C6B2A5D3CF140116F023979
        Validity
            Not Before: Feb  5 08:33:06 2026 GMT
            Not After : Feb  4 08:38:06 2027 GMT
        Subject: CN=221E468E7165A21647253F584FD72DD407054C74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d2:ca:e5:a3:cd:f8:f9:6b:07:53:ce:64:5c:
                    04:98:bd:f8:60:9e:80:23:ca:29:0e:66:4a:c7:bd:
                    7e:59:49:b6:85:93:62:5a:44:4c:af:e1:30:ac:f4:
                    59:2d:56:55:fa:4e:ef:a3:e6:64:5d:83:24:be:2d:
                    49:83:d4:6c:62:50:85:2d:4f:96:01:2e:4b:eb:7d:
                    59:48:ac:28:c4:25:fc:54:7b:e6:0c:4c:2c:a7:be:
                    02:33:a6:b3:a1:f9:28:b8:94:e7:34:da:e8:e8:35:
                    e0:7c:b0:b6:55:ab:ef:3e:e7:69:94:c6:2d:0a:e4:
                    4d:0f:21:e7:23:85:2d:95:0a:e9:2b:0d:c8:42:a5:
                    3b:43:bb:8a:27:3b:e2:ae:e1:01:2a:e3:50:87:83:
                    ae:36:65:20:fd:ac:e0:a6:93:af:1e:7e:29:93:96:
                    4e:96:29:4f:4c:bb:1f:bf:11:a3:0c:11:06:69:54:
                    9f:3d:5b:8f:ef:0b:92:94:3d:b1:5d:c1:d7:c6:7e:
                    9d:94:96:00:0c:ce:a0:6a:16:07:05:ab:a0:97:af:
                    d1:1a:cd:55:04:59:b0:81:0f:c5:f7:84:00:bc:fa:
                    dc:48:68:24:50:c2:dc:c0:06:67:46:ec:b9:aa:8e:
                    31:f1:d3:c9:d1:c0:af:4d:5a:d2:01:4a:f2:d8:d2:
                    54:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:1E:46:8E:71:65:A2:16:47:25:3F:58:4F:D7:2D:D4:07:05:4C:74
            X509v3 Authority Key Identifier:
                keyid:81:21:91:D8:B8:91:40:CC:7C:6B:2A:5D:3C:F1:40:11:6F:02:39:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/1/812191D8B89140CC7C6B2A5D3CF140116F023979.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/812191D8B89140CC7C6B2A5D3CF140116F023979.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/1/3137372e35342e36342e302f32302d3234203d3e203238313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         75:cc:92:3d:ad:95:a4:2f:d1:b7:28:7a:52:8f:d5:cd:6d:77:
         31:b9:df:ee:6d:5b:e8:de:88:b3:cb:08:2c:83:c7:10:dc:fc:
         e9:a0:50:f4:ac:19:46:f0:46:86:4a:82:d9:fa:35:5b:2b:71:
         b5:0e:d5:b0:6c:eb:1d:e6:f3:32:9a:9b:09:e0:51:f3:a0:20:
         0a:b4:9d:fb:56:b6:bd:da:17:a4:bc:04:e3:04:af:de:2f:5f:
         de:c4:7f:15:e0:2e:94:36:7b:45:3f:95:f6:7c:30:b0:2d:6a:
         00:4b:96:fe:b6:2f:f6:1d:c5:d4:15:d0:17:10:c0:04:16:92:
         b4:d2:d9:a6:e5:52:42:03:64:13:55:7b:10:57:fd:5c:43:1c:
         c1:ec:d4:dd:8d:83:01:44:10:38:ad:72:a1:d2:28:9b:13:cd:
         3d:bc:b6:4b:4a:fa:3c:17:3c:ab:62:6f:a6:54:e6:7e:ba:b3:
         31:a1:73:51:be:97:bc:b5:d6:2a:47:60:c8:86:5c:b1:53:00:
         ca:78:e5:16:76:be:0e:e5:a0:c1:e3:ad:a2:37:62:d5:3e:92:
         c0:95:f3:0c:32:69:cf:1a:70:0f:cc:e7:6f:24:7d:3d:7d:b8:
         7b:9b:8c:4d:d1:aa:73:90:15:c8:e2:20:49:d1:2f:06:a6:3f:
         96:30:9f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:14:09 2026 by rpki-client