Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3137372e32332e39382e302f32332d3233203d3e20323633333437.roa
File:                     3137372e32332e39382e302f32332d3233203d3e20323633333437.roa (raw, json)
Hash identifier:          WqZq3FYINp0kaEOcPRgiuh0FOWy+/vyounkuCkRIR7I=
Subject key identifier:   DA:28:20:F2:2C:15:F6:F0:09:E4:28:1E:B3:9C:71:6C:DB:E1:10:32
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       0A0FB1AC08C13C974ED620D76DF1DC3A337DCA57
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3137372e32332e39382e302f32332d3233203d3e20323633333437.roa
Signing time:             Thu 05 Feb 2026 18:58:18 +0000
ROA not before:           Thu 05 Feb 2026 18:53:18 +0000
ROA not after:            Thu 04 Feb 2027 18:58:18 +0000
asID:                     263347
IP address blocks:        177.23.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:28:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:0f:b1:ac:08:c1:3c:97:4e:d6:20:d7:6d:f1:dc:3a:33:7d:ca:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Feb  5 18:53:18 2026 GMT
            Not After : Feb  4 18:58:18 2027 GMT
        Subject: CN=DA2820F22C15F6F009E4281EB39C716CDBE11032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:94:67:34:b5:76:5a:d1:cf:5e:b7:ba:e7:7b:
                    fd:3e:3f:c5:50:c4:7c:58:9e:b0:05:00:b1:fb:38:
                    36:29:04:3d:c0:4d:2d:3d:fb:82:1d:53:c9:e4:11:
                    dc:9e:7a:35:1d:5d:c0:5e:e8:e1:46:e9:21:d4:db:
                    55:60:bd:56:fb:66:58:65:60:e0:43:40:70:26:2c:
                    f1:86:7a:bd:78:ce:6b:dd:d2:6e:1e:73:b0:21:e7:
                    8c:61:d0:e1:3f:a8:1c:3a:11:eb:be:f4:2b:1f:93:
                    f7:99:33:1f:c1:21:74:16:de:4d:bc:36:d0:88:59:
                    75:0f:0f:f0:5f:be:ae:e7:9a:f3:f7:f0:ab:ca:8d:
                    a5:f5:d0:1a:05:f9:7d:1a:11:c1:69:cd:c0:16:b8:
                    c4:b9:cf:0b:4a:03:a2:12:1e:67:74:0c:20:42:06:
                    ad:3e:d0:1c:93:84:9e:de:80:24:b3:32:80:fa:73:
                    06:90:b4:68:ca:ac:f6:c2:72:bf:56:00:18:16:63:
                    13:b5:6b:8c:5e:3d:b6:5c:a2:af:69:0a:ba:6b:d1:
                    e5:12:c0:a4:45:46:4a:78:2f:47:52:63:d4:84:3f:
                    bd:99:e2:6e:c0:14:0b:68:0b:15:91:df:eb:2f:f0:
                    26:8e:50:05:33:b4:af:a5:8c:a9:1c:ba:d2:80:cc:
                    cd:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:28:20:F2:2C:15:F6:F0:09:E4:28:1E:B3:9C:71:6C:DB:E1:10:32
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3137372e32332e39382e302f32332d3233203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:41:cd:3d:81:2a:75:ee:4b:4b:04:b8:f9:f1:6e:71:3c:b7:
         f9:55:d4:f7:32:a1:4a:2a:ee:a5:b6:5d:9e:a3:d4:a0:c7:52:
         9e:d0:e7:66:80:23:f4:c1:3e:37:8d:62:29:bb:e4:d0:56:f6:
         ed:cf:30:2b:3b:b5:e0:18:40:db:a8:fd:71:d7:46:a2:22:97:
         19:61:06:cd:0a:fb:24:40:f5:9f:27:a9:71:1d:11:61:3e:0f:
         43:99:9f:68:93:5b:05:da:b5:b1:26:dc:e0:c9:4b:95:ff:89:
         23:38:21:24:3b:28:da:6e:6a:96:ad:19:4b:b7:9d:6a:c6:03:
         4a:7b:d0:69:df:9d:d1:3e:83:be:f1:bd:71:50:49:91:ab:1d:
         64:ad:12:3d:b5:6e:10:9d:f6:f0:cf:1f:4f:8c:44:32:3d:50:
         cb:7f:a0:31:a7:e5:ac:ed:ae:f1:2d:36:e7:11:9e:29:01:72:
         6a:c1:c8:b9:b1:e0:24:a0:bd:5a:a3:0d:e2:aa:01:d8:34:a3:
         1d:84:3d:b3:53:e5:79:67:f1:da:2c:a6:c7:e2:41:a7:bb:04:
         54:c8:03:8d:33:bc:4c:7e:dd:c2:ad:51:4a:f1:d3:c5:09:00:
         95:80:4f:bd:9a:5d:4c:21:0c:fc:ea:e2:cb:e5:a9:d7:fb:e6:
         68:45:56:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:03:26 2026 by rpki-client