Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3137372e32332e3130322e302f32332d3233203d3e20323633333437.roa
File:                     3137372e32332e3130322e302f32332d3233203d3e20323633333437.roa (raw, json)
Hash identifier:          Wj5BraZN7vVrQn5+/xB/B5Yph01jPCAZ5oH1gUMqeiA=
Subject key identifier:   D5:13:D7:38:E2:23:BD:FB:61:4C:A8:72:BC:4A:E4:24:48:BB:FC:27
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       27AC42CF23387EF3DCE5727829898F228A8B831F
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3137372e32332e3130322e302f32332d3233203d3e20323633333437.roa
Signing time:             Thu 05 Feb 2026 18:58:19 +0000
ROA not before:           Thu 05 Feb 2026 18:53:19 +0000
ROA not after:            Thu 04 Feb 2027 18:58:19 +0000
asID:                     263347
IP address blocks:        177.23.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:28:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ac:42:cf:23:38:7e:f3:dc:e5:72:78:29:89:8f:22:8a:8b:83:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Feb  5 18:53:19 2026 GMT
            Not After : Feb  4 18:58:19 2027 GMT
        Subject: CN=D513D738E223BDFB614CA872BC4AE42448BBFC27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8e:5d:2f:cf:e0:ee:d1:55:2c:52:34:31:b8:
                    1b:a7:3c:5a:18:55:9e:1b:f4:e4:e8:f4:07:e2:7f:
                    47:15:73:b5:93:55:5e:46:98:df:b0:71:ee:63:1f:
                    49:f6:96:0a:7a:64:1f:33:bc:f5:75:d4:aa:ba:af:
                    cf:c4:2e:3c:33:b1:39:26:43:d2:6e:92:4e:31:0b:
                    17:28:a4:0c:06:c1:03:ad:33:1a:47:64:fd:10:0e:
                    c1:85:af:b6:9e:8a:46:ba:62:f9:89:5f:b5:a0:83:
                    50:7d:58:45:5b:45:ac:96:3d:4e:e7:fa:58:7d:e7:
                    d4:63:95:c3:28:97:5c:05:e9:10:25:c4:3b:80:70:
                    71:2c:2c:92:62:81:14:bf:e6:8b:89:b3:a4:58:22:
                    01:69:4a:a9:c4:69:69:45:4b:ff:d5:95:86:42:87:
                    4d:57:2d:d3:6c:9d:59:84:30:7d:5b:9e:a6:40:e5:
                    cc:5b:aa:a0:50:2b:cb:a3:09:64:15:dd:1c:6e:13:
                    da:b8:a6:25:52:ac:49:a1:e4:f6:b7:35:04:af:e6:
                    2c:79:43:80:57:0f:f4:4f:00:0a:8f:96:a8:3b:75:
                    0d:2d:59:76:fa:d5:ba:6d:db:f5:ce:68:49:2d:4e:
                    4a:cc:84:f5:98:ab:f9:8d:af:2f:61:6e:2e:21:fd:
                    06:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:13:D7:38:E2:23:BD:FB:61:4C:A8:72:BC:4A:E4:24:48:BB:FC:27
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3137372e32332e3130322e302f32332d3233203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:26:bf:a9:ed:98:28:41:67:8b:ed:70:ee:8b:9b:7a:5e:b5:
         b8:24:3d:6c:db:9d:95:0c:cd:f6:ac:e7:e1:de:1d:05:a1:0a:
         34:4f:2d:21:ee:27:24:c7:fa:fb:6d:c9:1a:31:fa:62:21:a2:
         1e:72:00:7e:ec:b7:73:3d:d2:2f:a4:31:94:08:ce:7a:b8:63:
         6d:fa:fc:02:e8:df:6e:07:44:73:7d:4e:a4:0d:50:c1:59:3b:
         db:4b:cd:a3:84:f7:27:e4:65:34:28:a9:6c:48:55:fe:02:e0:
         1b:21:e4:8c:df:60:34:c4:1d:9b:42:2a:0d:10:9a:5d:ee:d1:
         22:67:25:73:2f:cc:b9:9a:d3:64:d5:c4:0d:69:55:45:22:aa:
         1c:08:c7:78:31:20:7b:e8:3c:60:6a:c3:5a:0f:24:07:59:66:
         ce:8f:0f:2b:92:67:18:54:ff:81:cb:16:33:84:a0:6f:c6:9f:
         c7:57:f1:0e:11:5d:8e:4c:34:e6:50:e5:d1:46:5e:5e:c9:d5:
         a8:1d:fe:a3:3b:8f:7e:2e:80:6e:e4:e7:77:7c:41:6a:4d:28:
         e2:05:9c:24:39:7d:13:8c:6c:39:27:77:60:f9:34:c3:86:f5:
         a1:05:ed:33:03:5b:e9:41:5b:d9:fc:45:99:88:91:a2:f3:06:
         8b:a7:c6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:03:15 2026 by rpki-client