Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/3137372e38342e34302e302f32322d3232203d3e203532373038.roa
File:                     3137372e38342e34302e302f32322d3232203d3e203532373038.roa (raw, json)
Hash identifier:          wZ0yXVykZMLbD6s2rpH7sbXkIStBzV2jV1aITe64uRc=
Subject key identifier:   1F:C9:1B:5B:38:1C:3F:75:E0:79:9B:F6:54:55:76:E3:CD:33:F6:80
Certificate issuer:       /CN=5AB6409191BC25DA93A86CB1B79F23A5B47FAABE
Certificate serial:       067DBB06C6832B833E5449ABC9409ED397A29DC5
Authority key identifier: 5A:B6:40:91:91:BC:25:DA:93:A8:6C:B1:B7:9F:23:A5:B4:7F:AA:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB6409191BC25DA93A86CB1B79F23A5B47FAABE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/3137372e38342e34302e302f32322d3232203d3e203532373038.roa
Signing time:             Fri 30 Jan 2026 06:51:39 +0000
ROA not before:           Fri 30 Jan 2026 06:46:39 +0000
ROA not after:            Fri 29 Jan 2027 06:51:39 +0000
asID:                     52708
IP address blocks:        177.84.40.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/5AB6409191BC25DA93A86CB1B79F23A5B47FAABE.crl
                          rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/5AB6409191BC25DA93A86CB1B79F23A5B47FAABE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB6409191BC25DA93A86CB1B79F23A5B47FAABE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:31:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:7d:bb:06:c6:83:2b:83:3e:54:49:ab:c9:40:9e:d3:97:a2:9d:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AB6409191BC25DA93A86CB1B79F23A5B47FAABE
        Validity
            Not Before: Jan 30 06:46:39 2026 GMT
            Not After : Jan 29 06:51:39 2027 GMT
        Subject: CN=1FC91B5B381C3F75E0799BF6545576E3CD33F680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8c:3b:04:4a:d2:f7:e6:b1:e4:13:3a:d8:a0:
                    78:57:a6:e5:23:68:58:1d:32:a2:af:49:48:a7:45:
                    fb:fe:8f:09:a5:27:0e:c9:1f:fc:cc:87:75:19:38:
                    78:46:72:47:a7:04:8a:8f:99:df:55:e4:68:0f:53:
                    7c:6c:51:6f:cd:75:bf:a2:b1:57:e9:7f:da:44:7d:
                    7c:51:dd:cf:07:68:99:40:a0:6e:af:4a:8b:01:06:
                    38:75:d9:fe:5a:f2:61:b1:57:9d:13:76:7f:e6:08:
                    5a:f2:98:92:0f:cb:5f:fe:bc:1e:2c:5b:91:c2:05:
                    38:37:4a:ee:71:a5:5f:b7:7f:55:79:d2:21:32:5e:
                    fc:e0:30:5a:1f:bd:3e:3e:9a:00:5f:23:ed:14:73:
                    88:ac:1d:d7:6b:0d:1f:ce:ce:f1:48:99:1e:9a:d7:
                    94:19:ec:01:64:2e:3c:99:eb:4d:18:a9:3f:06:f0:
                    a9:28:88:09:c6:25:4c:87:43:0c:9d:07:4b:81:ca:
                    c6:9e:66:0f:67:c6:94:97:61:87:de:b7:fd:2c:c1:
                    9b:22:a9:b1:3d:a0:b9:8c:d8:8c:92:a2:4a:7a:37:
                    9e:17:ac:4f:32:c2:00:c3:0d:7f:0a:59:50:8b:3c:
                    a4:ca:90:ef:83:e4:8e:08:b2:ed:26:ce:53:21:a2:
                    bc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C9:1B:5B:38:1C:3F:75:E0:79:9B:F6:54:55:76:E3:CD:33:F6:80
            X509v3 Authority Key Identifier:
                keyid:5A:B6:40:91:91:BC:25:DA:93:A8:6C:B1:B7:9F:23:A5:B4:7F:AA:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/5AB6409191BC25DA93A86CB1B79F23A5B47FAABE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB6409191BC25DA93A86CB1B79F23A5B47FAABE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/3137372e38342e34302e302f32322d3232203d3e203532373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:f4:b8:81:65:8d:94:3f:43:d2:ca:46:5e:f9:ce:5a:e5:81:
         0c:10:c4:d1:e7:11:bb:75:02:e6:58:1e:75:1d:4d:d2:c6:ba:
         10:43:10:73:74:5d:36:06:92:f3:7c:8d:fb:9f:ef:8a:76:3e:
         bc:78:0e:0b:f4:cb:dc:33:c5:0d:5c:83:8d:46:8b:29:2a:b3:
         44:08:70:79:20:f2:60:3b:84:ae:9f:cb:cb:44:c9:f6:dc:84:
         21:7f:50:9d:24:6e:77:3a:ee:f6:26:74:68:b7:de:bf:74:d4:
         24:18:81:f9:2f:3c:3f:e0:83:f9:cc:93:8f:55:f8:4e:15:02:
         85:bd:84:57:8e:a0:7a:30:11:fe:b6:e5:19:de:37:99:68:06:
         30:84:51:6e:00:c8:ee:4d:3b:31:9b:82:7c:d2:cf:69:83:17:
         6c:1a:0c:59:59:b0:e4:26:4a:36:0a:87:da:75:60:b2:fb:65:
         e1:1c:d5:5e:67:47:c8:f5:f0:4b:0d:58:4d:4d:9f:97:80:e0:
         6b:0f:6a:a9:36:00:4b:1d:a9:65:88:53:71:5f:5c:a7:ef:4c:
         81:0b:54:0e:5e:ac:40:b6:87:21:88:e1:70:15:69:cc:45:f4:
         f6:53:81:98:24:c6:77:35:3d:93:67:75:a6:2b:ca:18:e0:ec:
         06:7d:db:c4
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUBn27BsaDK4M+VEmryUCe05eincUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUFCNjQwOTE5MUJDMjVEQTkzQTg2Q0IxQjc5RjIzQTVC
NDdGQUFCRTAeFw0yNjAxMzAwNjQ2MzlaFw0yNzAxMjkwNjUxMzlaMDMxMTAvBgNV
BAMTKDFGQzkxQjVCMzgxQzNGNzVFMDc5OUJGNjU0NTU3NkUzQ0QzM0Y2ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0jDsEStL35rHkEzrYoHhXpuUj
aFgdMqKvSUinRfv+jwmlJw7JH/zMh3UZOHhGckenBIqPmd9V5GgPU3xsUW/Ndb+i
sVfpf9pEfXxR3c8HaJlAoG6vSosBBjh12f5a8mGxV50Tdn/mCFrymJIPy1/+vB4s
W5HCBTg3Su5xpV+3f1V50iEyXvzgMFofvT4+mgBfI+0Uc4isHddrDR/OzvFImR6a
15QZ7AFkLjyZ600YqT8G8KkoiAnGJUyHQwydB0uBysaeZg9nxpSXYYfet/0swZsi
qbE9oLmM2IySokp6N54XrE8ywgDDDX8KWVCLPKTKkO+D5I4Isu0mzlMhory7AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUH8kbWzgcP3XgeZv2VFV2480z9oAwHwYDVR0j
BBgwFoAUWrZAkZG8JdqTqGyxt58jpbR/qr4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXE2dUczYVdmQUJudEtibzh2NXBSckF0Zm9pTld5Z3dqZUxtbkVQdlhV
Z00vMC81QUI2NDA5MTkxQkMyNURBOTNBODZDQjFCNzlGMjNBNUI0N0ZBQUJFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBQjY0MDkxOTFCQzI1REE5
M0E4NkNCMUI3OUYyM0E1QjQ3RkFBQkUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlxNnVHM2FXZkFCbnRLYm84djVwUnJBdGZvaU5XeWd3amVMbW5FUHZYVWdNLzAv
MzEzNzM3MmUzODM0MmUzNDMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzMjM3
MzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEArFUKDANBgkqhkiG9w0BAQsFAAOCAQEAF/S4gWWNlD9D
0spGXvnOWuWBDBDE0ecRu3UC5lgedR1N0sa6EEMQc3RdNgaS83yN+5/vinY+vHgO
C/TL3DPFDVyDjUaLKSqzRAhweSDyYDuErp/Ly0TJ9tyEIX9QnSRudzru9iZ0aLfe
v3TUJBiB+S88P+CD+cyTj1X4ThUChb2EV46gejAR/rblGd43mWgGMIRRbgDI7k07
MZuCfNLPaYMXbBoMWVmw5CZKNgqH2nVgsvtl4RzVXmdHyPXwSw1YTU2fl4Dgaw9q
qTYASx2pZYhTcV9cp+9MgQtUDl6sQLaHIYjhcBVpzEX09lOBmCTGdzU9k2d1pivK
GODsBn3bxA==
-----END CERTIFICATE-----
Generated at Thu Feb 19 17:38:00 2026 by rpki-client