Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3137372e3132392e3136342e302f32342d3234203d3e20323632373938.roa
File:                     3137372e3132392e3136342e302f32342d3234203d3e20323632373938.roa (raw, json)
Hash identifier:          x7guWoxisyodvSi9TWk10V1NDkaf9V9kr/ExiP64JmU=
Subject key identifier:   54:2A:53:1A:47:74:36:22:3C:DE:CE:9F:7D:E8:1E:7D:7A:83:16:B8
Certificate issuer:       /CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
Certificate serial:       76EDEDED6CE1EB17846BD24CF52CF1B1947E0C79
Authority key identifier: DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3137372e3132392e3136342e302f32342d3234203d3e20323632373938.roa
Signing time:             Thu 05 Feb 2026 00:29:01 +0000
ROA not before:           Thu 05 Feb 2026 00:24:01 +0000
ROA not after:            Thu 04 Feb 2027 00:29:01 +0000
asID:                     262798
IP address blocks:        177.129.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl
                          rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:ed:ed:ed:6c:e1:eb:17:84:6b:d2:4c:f5:2c:f1:b1:94:7e:0c:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
        Validity
            Not Before: Feb  5 00:24:01 2026 GMT
            Not After : Feb  4 00:29:01 2027 GMT
        Subject: CN=542A531A477436223CDECE9F7DE81E7D7A8316B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:66:d9:ec:84:84:e2:2a:3f:a2:96:ed:d5:e1:
                    a8:8c:c6:91:52:f4:6e:fc:b6:38:02:b6:14:cb:48:
                    56:63:7f:b7:f1:85:65:16:9f:83:fe:c9:cd:4e:ef:
                    cc:57:a0:6b:02:7b:7e:8f:f3:f6:be:d2:90:78:d7:
                    39:81:5a:13:ae:e1:30:44:22:c5:b9:e9:f0:44:c6:
                    b2:d4:13:5b:f9:af:09:b5:a3:5d:5c:99:fd:69:7c:
                    92:7b:a7:24:dd:b1:01:74:22:68:9d:6c:5f:f2:67:
                    53:7c:f3:83:4e:1d:b4:bb:2b:1b:ef:84:ac:3b:09:
                    30:48:3e:46:0a:51:d4:88:21:89:f2:07:0c:ac:dc:
                    17:43:2a:03:94:0c:42:1c:8c:df:f7:f2:42:9f:5f:
                    58:e0:30:66:ff:87:af:c4:fb:91:21:85:16:d8:34:
                    54:82:b2:8d:cf:5b:b7:8f:71:17:f0:c9:1a:ae:13:
                    57:59:65:b0:df:c7:b2:c1:4d:ef:e2:09:45:70:79:
                    31:42:22:03:c2:b9:78:54:2d:1a:59:92:ee:d1:1c:
                    fa:fe:e3:20:de:e3:2f:e7:ae:28:10:e5:dc:2d:e3:
                    24:e2:cd:8e:16:99:0d:80:d6:5b:bd:79:eb:12:35:
                    eb:b1:a2:77:86:61:42:16:a1:93:ce:8b:42:12:ed:
                    96:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:2A:53:1A:47:74:36:22:3C:DE:CE:9F:7D:E8:1E:7D:7A:83:16:B8
            X509v3 Authority Key Identifier:
                keyid:DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3137372e3132392e3136342e302f32342d3234203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:58:fc:e7:7c:f4:56:b9:02:68:94:32:c6:88:14:a8:fb:3e:
         ee:e3:cc:80:2e:36:b0:76:b2:9c:b9:2c:9a:04:cf:04:f6:fe:
         71:9c:8f:ab:7f:0d:73:a0:bf:03:ae:7d:6b:4e:b0:68:18:b3:
         11:d1:75:19:3a:30:de:d3:92:87:b8:53:eb:fa:4c:97:54:2f:
         de:95:0e:4c:86:44:32:08:8f:ef:58:90:13:9d:aa:62:6d:35:
         25:ff:11:36:fb:a3:eb:b0:63:a1:10:bd:6f:bc:2b:1a:c4:16:
         d8:30:67:76:93:a6:00:60:a5:2b:ad:bb:1f:ee:7b:48:57:1b:
         5b:94:d2:9c:af:81:1a:99:10:9a:88:66:a2:4b:ed:4d:ac:5a:
         a1:ab:e1:a5:a7:14:9d:53:18:db:0f:67:3e:76:e8:9d:78:8f:
         64:c9:3d:d0:37:ae:50:62:a7:b9:20:0a:b4:2d:5f:a2:4f:a4:
         2a:04:cd:75:11:6b:30:7f:53:4d:4a:69:4c:18:a7:e9:0e:a3:
         cd:1a:b3:29:4e:3e:54:a7:03:b1:d7:d5:06:3e:08:ec:a0:0b:
         7b:27:c9:b9:5f:fe:a0:e1:bf:e4:46:3d:9e:56:2e:11:c1:03:
         f7:18:cf:f7:a9:71:d9:9a:a1:3b:f3:06:93:b6:f8:39:27:6e:
         aa:bf:aa:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:39:35 2026 by rpki-client