Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/1/3137372e3132392e39322e302f32322d3234203d3e203631383834.roa
File:                     3137372e3132392e39322e302f32322d3234203d3e203631383834.roa (raw, json)
Hash identifier:          dq4R0bNTUQoAKe/o7e3dBgMXZRKwenppWlBLM71RP18=
Subject key identifier:   CD:78:6E:44:13:FA:68:6B:53:DD:19:69:68:1E:9C:BA:1A:DF:8C:23
Certificate issuer:       /CN=65266773FE30988C76975E1CA92521B7BCB5897A
Certificate serial:       4315E4F7A9A8D80B8CE6C8000EF514F47E1E1CCC
Authority key identifier: 65:26:67:73:FE:30:98:8C:76:97:5E:1C:A9:25:21:B7:BC:B5:89:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65266773FE30988C76975E1CA92521B7BCB5897A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/1/3137372e3132392e39322e302f32322d3234203d3e203631383834.roa
Signing time:             Sat 14 Feb 2026 19:24:52 +0000
ROA not before:           Sat 14 Feb 2026 19:19:52 +0000
ROA not after:            Sat 13 Feb 2027 19:24:52 +0000
asID:                     61884
IP address blocks:        177.129.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/1/65266773FE30988C76975E1CA92521B7BCB5897A.crl
                          rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/1/65266773FE30988C76975E1CA92521B7BCB5897A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65266773FE30988C76975E1CA92521B7BCB5897A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 15:38:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:15:e4:f7:a9:a8:d8:0b:8c:e6:c8:00:0e:f5:14:f4:7e:1e:1c:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65266773FE30988C76975E1CA92521B7BCB5897A
        Validity
            Not Before: Feb 14 19:19:52 2026 GMT
            Not After : Feb 13 19:24:52 2027 GMT
        Subject: CN=CD786E4413FA686B53DD1969681E9CBA1ADF8C23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:22:71:34:92:99:09:e4:30:de:12:c0:62:cf:
                    e5:0f:36:28:cf:86:90:30:dd:af:eb:29:de:bd:ba:
                    d5:a3:b7:02:24:49:cf:8d:2b:19:b6:d9:c7:0c:9f:
                    04:dd:4a:4e:05:30:0d:4e:df:6b:8d:6f:29:e7:0c:
                    85:c9:83:99:54:d9:87:5f:6b:c0:b9:48:30:39:05:
                    00:25:76:a0:09:0f:4b:ed:cb:67:d4:b4:ec:0a:cb:
                    15:77:d3:4f:a9:b1:62:9f:da:49:9e:3c:bc:6f:dc:
                    ce:dd:cc:ff:54:e5:fe:4d:e0:c1:2b:ca:f4:1f:c9:
                    66:ac:1c:e0:ee:0c:c4:cc:6b:5c:1e:57:76:08:bb:
                    ce:7d:5d:d6:e4:12:45:a7:9b:ac:a3:9a:88:44:b2:
                    21:18:91:49:af:f7:ea:33:17:0d:ba:23:22:20:18:
                    ff:b9:63:48:28:85:86:af:cd:2b:27:31:80:32:f3:
                    01:5c:21:d2:fa:e2:fc:df:60:58:9f:fb:f7:ed:05:
                    88:28:d8:0c:af:48:06:06:5e:9f:ef:c7:89:5c:14:
                    fd:a2:04:10:cc:bc:26:8e:50:b9:de:7d:4f:d2:db:
                    7a:fa:7b:3d:3a:9b:da:86:d2:33:3d:29:c0:8a:99:
                    bf:b8:07:e2:81:47:b4:3e:3c:86:80:14:c9:38:b2:
                    99:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:78:6E:44:13:FA:68:6B:53:DD:19:69:68:1E:9C:BA:1A:DF:8C:23
            X509v3 Authority Key Identifier:
                keyid:65:26:67:73:FE:30:98:8C:76:97:5E:1C:A9:25:21:B7:BC:B5:89:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/1/65266773FE30988C76975E1CA92521B7BCB5897A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65266773FE30988C76975E1CA92521B7BCB5897A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/1/3137372e3132392e39322e302f32322d3234203d3e203631383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:c7:4f:cc:48:da:91:c7:7f:80:4e:e7:ef:63:16:8a:b8:68:
         93:31:54:2b:d6:48:80:49:d6:8e:dc:1d:02:44:1d:61:f0:22:
         ba:59:42:f4:6e:2c:67:a3:18:ad:fe:3f:25:d7:e4:de:0e:d9:
         f7:7d:bd:83:55:3b:8c:d7:98:bb:66:e4:dc:f5:d8:bd:a6:4c:
         bc:45:a0:f2:47:42:75:93:33:72:cb:7b:6c:de:a1:07:46:99:
         66:f2:4d:1d:50:09:ef:e3:5d:35:db:32:0c:33:7a:1f:de:50:
         eb:10:ab:b3:78:37:19:a9:b7:2f:37:db:43:2b:cf:cc:7d:e0:
         80:1a:16:82:82:60:2e:fc:30:7a:de:36:e5:ab:e5:f4:4f:70:
         d1:8e:03:03:15:9d:22:6d:db:90:ff:50:b3:ad:35:d8:07:41:
         63:00:91:e6:c1:a9:b4:72:dd:48:54:a6:42:be:d7:a1:b4:db:
         69:ab:31:04:2e:af:20:47:68:e9:11:39:0e:6b:fe:48:fa:d2:
         fb:ff:8f:ac:c2:e4:90:b2:1d:9a:12:f2:69:32:d7:95:ce:0f:
         4c:fa:18:9e:c2:76:40:2a:8e:87:89:b7:b5:45:2b:ca:34:64:
         43:8c:cd:77:36:75:d7:8d:98:2e:aa:74:0e:15:ef:ef:b1:ff:
         3e:21:8b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:01:14 2026 by rpki-client