Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/3137372e33382e32382e302f32322d3234203d3e20323632393038.roa
File:                     3137372e33382e32382e302f32322d3234203d3e20323632393038.roa (raw, json)
Hash identifier:          n34DzaeBvCex6/NEMgJno7PVg93luggIVmwXokR4qHQ=
Subject key identifier:   EE:2A:67:E6:5D:AA:49:78:C6:A6:E2:38:59:68:53:5D:18:3E:4A:F5
Certificate issuer:       /CN=B0337D2970CB09ECBA6C93B9F730526E8ABD179C
Certificate serial:       6C5C676970BC2AF2E18D2321D163110AE8686CF2
Authority key identifier: B0:33:7D:29:70:CB:09:EC:BA:6C:93:B9:F7:30:52:6E:8A:BD:17:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/3137372e33382e32382e302f32322d3234203d3e20323632393038.roa
Signing time:             Tue 06 Jan 2026 18:41:25 +0000
ROA not before:           Tue 06 Jan 2026 18:36:25 +0000
ROA not after:            Tue 05 Jan 2027 18:41:25 +0000
asID:                     262908
IP address blocks:        177.38.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.crl
                          rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 11:09:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:5c:67:69:70:bc:2a:f2:e1:8d:23:21:d1:63:11:0a:e8:68:6c:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0337D2970CB09ECBA6C93B9F730526E8ABD179C
        Validity
            Not Before: Jan  6 18:36:25 2026 GMT
            Not After : Jan  5 18:41:25 2027 GMT
        Subject: CN=EE2A67E65DAA4978C6A6E2385968535D183E4AF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cf:ce:a5:54:92:54:96:3c:ca:2a:f9:42:0d:
                    35:15:c5:13:8e:ac:16:55:7e:79:27:ee:d6:af:23:
                    fb:ee:bb:07:f8:87:5f:4c:83:48:cf:92:61:77:e1:
                    1d:39:42:28:fd:b6:19:3e:1a:ab:6f:26:4e:0e:a9:
                    c0:6a:16:3d:05:11:bb:17:0d:58:41:ef:cf:f2:be:
                    e5:19:63:76:c7:87:32:ee:14:9b:16:f5:74:df:8f:
                    0d:55:9d:d0:41:8d:21:53:11:53:55:a5:ba:b1:28:
                    7e:ec:e0:39:f6:4f:be:43:09:dc:23:e8:14:24:8a:
                    85:63:d0:3c:b8:f5:7e:6c:ec:a9:15:7d:67:c9:c1:
                    e8:c3:30:1e:b9:5c:ae:9e:13:59:93:39:fa:7e:bc:
                    19:9b:5b:ad:58:89:dc:36:ab:91:b8:1b:90:55:da:
                    3d:83:78:33:8c:da:67:36:33:c4:70:c6:93:7b:af:
                    df:89:9c:ce:68:c2:0c:02:49:ba:c8:12:aa:c3:3a:
                    cd:1a:66:74:e6:50:01:26:e7:16:b7:6a:3b:77:55:
                    fc:10:c6:d6:fa:e8:d9:0a:5a:ea:26:2e:68:1f:23:
                    47:10:d5:7b:0a:88:23:3e:e4:89:2f:85:a3:5a:df:
                    c3:b3:ef:85:a3:31:58:05:ab:56:d1:10:83:f5:ee:
                    62:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:2A:67:E6:5D:AA:49:78:C6:A6:E2:38:59:68:53:5D:18:3E:4A:F5
            X509v3 Authority Key Identifier:
                keyid:B0:33:7D:29:70:CB:09:EC:BA:6C:93:B9:F7:30:52:6E:8A:BD:17:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/3137372e33382e32382e302f32322d3234203d3e20323632393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:75:74:2e:ac:d2:2e:b5:15:fe:17:19:c5:ef:e2:1d:93:e7:
         29:74:85:91:7a:85:22:3d:6a:35:18:09:85:a9:67:1e:6b:d7:
         ce:b1:75:1e:18:62:8a:37:ed:0a:c9:dd:11:60:6c:a6:d5:90:
         91:76:f6:09:28:48:19:b2:4d:35:ef:af:81:ea:89:14:05:98:
         fa:6b:56:22:45:38:d7:b2:46:f8:34:e9:73:8a:cc:d6:56:87:
         b0:34:41:71:47:43:2a:e2:a3:b7:a5:42:66:f5:16:e6:af:a5:
         8c:6b:b2:49:f9:ea:e2:77:42:a1:c0:02:d2:01:a2:dd:96:15:
         1b:2c:1e:75:d0:9b:71:02:3c:75:b9:f8:49:09:f9:44:6a:58:
         6f:12:2e:c6:a0:17:63:87:00:59:d8:0f:79:8c:ab:8f:be:43:
         34:b1:90:13:b0:02:d9:18:8d:cf:e4:ce:e8:9b:1e:bd:e9:83:
         45:f2:f5:51:5c:86:b1:32:46:b4:e2:54:ee:fd:ee:93:ca:57:
         37:ad:fe:1c:36:69:e4:42:d4:82:63:21:a7:14:a8:ce:7e:0b:
         1d:45:c3:77:56:c0:a1:01:d5:ea:39:52:5e:03:57:d8:74:92:
         6d:db:1f:39:4a:35:ed:7d:88:3b:f9:cb:00:f3:31:99:9e:50:
         98:a2:59:37
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUbFxnaXC8KvLhjSMh0WMRCuhobPIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjAzMzdEMjk3MENCMDlFQ0JBNkM5M0I5RjczMDUyNkU4
QUJEMTc5QzAeFw0yNjAxMDYxODM2MjVaFw0yNzAxMDUxODQxMjVaMDMxMTAvBgNV
BAMTKEVFMkE2N0U2NURBQTQ5NzhDNkE2RTIzODU5Njg1MzVEMTgzRTRBRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvz86lVJJUljzKKvlCDTUVxROO
rBZVfnkn7tavI/vuuwf4h19Mg0jPkmF34R05Qij9thk+GqtvJk4OqcBqFj0FEbsX
DVhB78/yvuUZY3bHhzLuFJsW9XTfjw1VndBBjSFTEVNVpbqxKH7s4Dn2T75DCdwj
6BQkioVj0Dy49X5s7KkVfWfJwejDMB65XK6eE1mTOfp+vBmbW61Yidw2q5G4G5BV
2j2DeDOM2mc2M8RwxpN7r9+JnM5owgwCSbrIEqrDOs0aZnTmUAEm5xa3ajt3VfwQ
xtb66NkKWuomLmgfI0cQ1XsKiCM+5IkvhaNa38Oz74WjMVgFq1bREIP17mLhAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU7ipn5l2qSXjGpuI4WWhTXRg+SvUwHwYDVR0j
BBgwFoAUsDN9KXDLCey6bJO59zBSboq9F5wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXBoN3pEWVpHOG5yQXJmS1Jjb25ZcWlMSzRxU1M5dlEzOWZWMm82UlBr
UWUvMC9CMDMzN0QyOTcwQ0IwOUVDQkE2QzkzQjlGNzMwNTI2RThBQkQxNzlDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IwMzM3RDI5NzBDQjA5RUNC
QTZDOTNCOUY3MzA1MjZFOEFCRDE3OUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlwaDd6RFlaRzhuckFyZktSY29uWXFpTEs0cVNTOXZRMzlmVjJvNlJQa1FlLzAv
MzEzNzM3MmUzMzM4MmUzMjM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMy
MzkzMDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsSYcMA0GCSqGSIb3DQEBCwUAA4IBAQA8dXQurNIu
tRX+FxnF7+Idk+cpdIWReoUiPWo1GAmFqWcea9fOsXUeGGKKN+0Kyd0RYGym1ZCR
dvYJKEgZsk0176+B6okUBZj6a1YiRTjXskb4NOlziszWVoewNEFxR0Mq4qO3pUJm
9Rbmr6WMa7JJ+erid0KhwALSAaLdlhUbLB510JtxAjx1ufhJCflEalhvEi7GoBdj
hwBZ2A95jKuPvkM0sZATsALZGI3P5M7omx696YNF8vVRXIaxMka04lTu/e6Tylc3
rf4cNmnkQtSCYyGnFKjOfgsdRcN3VsChAdXqOVJeA1fYdJJt2x85SjXtfYg7+csA
8zGZnlCYolk3
-----END CERTIFICATE-----
Generated at Thu Feb 19 04:23:12 2026 by rpki-client