Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3137372e32332e3130302e302f32332d3233203d3e20323633333437.roa
File:                     3137372e32332e3130302e302f32332d3233203d3e20323633333437.roa (raw, json)
Hash identifier:          7J5uaMUUCk781YNte//ZOQbDoU7ppBwaxuY43miQBWI=
Subject key identifier:   7B:43:62:32:C0:5E:5A:3C:3F:10:B0:67:04:21:AB:FF:68:D2:08:76
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       439A29882AE960D398B040EB9583909A036F6F5F
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3137372e32332e3130302e302f32332d3233203d3e20323633333437.roa
Signing time:             Thu 05 Feb 2026 18:58:20 +0000
ROA not before:           Thu 05 Feb 2026 18:53:20 +0000
ROA not after:            Thu 04 Feb 2027 18:58:20 +0000
asID:                     263347
IP address blocks:        177.23.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:28:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:9a:29:88:2a:e9:60:d3:98:b0:40:eb:95:83:90:9a:03:6f:6f:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Feb  5 18:53:20 2026 GMT
            Not After : Feb  4 18:58:20 2027 GMT
        Subject: CN=7B436232C05E5A3C3F10B0670421ABFF68D20876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:86:ef:87:fe:d4:5f:24:33:ac:dd:b2:a5:e5:
                    93:3d:15:c9:fd:a5:91:cf:37:12:8c:70:f7:a9:5c:
                    05:59:3c:82:ab:96:56:d6:37:47:00:71:74:e1:85:
                    e6:bd:37:a7:36:41:20:2f:57:5d:71:31:50:8e:e3:
                    1b:dd:d2:97:1f:64:3c:50:ff:1a:f6:7e:7b:97:99:
                    1c:34:a1:f4:af:c4:c2:a7:57:79:f4:57:a3:b9:0d:
                    4a:cf:dc:0d:39:6b:44:09:50:f3:68:fa:39:89:0c:
                    a9:69:a5:7d:82:35:4a:0e:ad:c2:98:6e:a5:fa:d4:
                    a0:6b:e1:3d:24:10:0c:b7:73:7b:4f:62:9b:1c:bd:
                    88:74:3d:8f:b6:94:05:69:65:7e:9b:5b:ea:a9:03:
                    16:cd:1b:52:8e:f6:3c:93:4e:10:b5:69:33:32:90:
                    5c:14:7d:09:9f:b1:e1:de:ac:cb:52:08:82:95:02:
                    7f:4c:17:e2:7e:f0:72:85:b4:ad:d0:3b:dc:d4:20:
                    8a:d9:92:81:12:19:d3:8d:c8:6b:42:2d:12:1b:b3:
                    b1:20:06:88:29:bc:a5:d6:69:14:7f:6b:ef:e0:b0:
                    03:c6:62:37:d9:9a:d0:b2:0b:d6:29:9f:d0:93:30:
                    6b:8f:5e:c2:62:48:49:14:e0:b5:2f:c2:4e:fd:87:
                    59:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:43:62:32:C0:5E:5A:3C:3F:10:B0:67:04:21:AB:FF:68:D2:08:76
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3137372e32332e3130302e302f32332d3233203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:6c:62:e5:fc:85:97:2e:f1:74:0f:f3:2a:24:e1:a7:b8:d0:
         2d:2d:06:2c:f1:1d:66:f9:a4:c3:8c:2e:b1:b6:21:c2:19:68:
         c4:f3:5d:53:ff:cd:b1:80:4f:a0:9d:48:a9:92:4a:52:45:24:
         22:0d:39:35:f9:18:ce:2c:82:4d:77:fc:98:e6:37:70:32:6d:
         82:af:bd:5b:7f:5a:76:dc:4f:7b:4f:87:cd:55:00:cd:79:ef:
         4f:78:f5:28:ea:6d:a2:ea:99:1f:78:bb:98:e6:ba:ee:5f:a0:
         48:56:97:b8:fb:bb:ab:2b:85:84:10:bd:5d:65:dc:51:53:45:
         ae:79:a1:2c:cf:67:40:a1:d7:ce:95:2b:c3:f2:e3:d2:38:a5:
         68:18:7e:89:73:21:5b:df:fd:a0:f5:d8:52:3b:0b:b7:7d:5b:
         a1:b4:da:7e:4d:a1:41:8e:85:0c:71:c1:1e:4c:33:18:db:2b:
         60:76:d8:1c:79:38:61:8b:cf:c0:b6:33:6d:ef:b0:63:9e:ec:
         ed:97:48:f4:41:3f:20:bc:12:8a:23:0b:b0:84:07:6d:59:07:
         a8:18:6c:ba:ea:cc:4e:d6:de:80:e4:03:26:87:a3:6a:d3:84:
         ea:3f:f7:52:1d:c3:09:df:f7:79:d6:f9:13:48:58:5d:9b:02:
         47:ec:4d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:03:30 2026 by rpki-client