Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/3137372e38342e34322e302f32332d3233203d3e203532373038.roa
File:                     3137372e38342e34322e302f32332d3233203d3e203532373038.roa (raw, json)
Hash identifier:          aigx5YHZ2LGYrbiKJU/rCwNvliN+FENooEnp3miAS5o=
Subject key identifier:   D0:04:D8:28:15:61:D9:EB:D0:E7:5B:97:C0:C1:35:31:B8:2C:0B:C1
Certificate issuer:       /CN=5AB6409191BC25DA93A86CB1B79F23A5B47FAABE
Certificate serial:       131577A24B3B3C14378E2917218FF652B81D4D21
Authority key identifier: 5A:B6:40:91:91:BC:25:DA:93:A8:6C:B1:B7:9F:23:A5:B4:7F:AA:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB6409191BC25DA93A86CB1B79F23A5B47FAABE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/3137372e38342e34322e302f32332d3233203d3e203532373038.roa
Signing time:             Fri 30 Jan 2026 06:52:38 +0000
ROA not before:           Fri 30 Jan 2026 06:47:38 +0000
ROA not after:            Fri 29 Jan 2027 06:52:38 +0000
asID:                     52708
IP address blocks:        177.84.42.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/5AB6409191BC25DA93A86CB1B79F23A5B47FAABE.crl
                          rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/5AB6409191BC25DA93A86CB1B79F23A5B47FAABE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB6409191BC25DA93A86CB1B79F23A5B47FAABE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 16:38:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:15:77:a2:4b:3b:3c:14:37:8e:29:17:21:8f:f6:52:b8:1d:4d:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AB6409191BC25DA93A86CB1B79F23A5B47FAABE
        Validity
            Not Before: Jan 30 06:47:38 2026 GMT
            Not After : Jan 29 06:52:38 2027 GMT
        Subject: CN=D004D8281561D9EBD0E75B97C0C13531B82C0BC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:18:c4:3f:0c:0f:e4:c8:64:ef:b0:63:4f:eb:
                    74:2a:3a:b0:e2:52:a4:d1:76:67:f8:68:da:09:05:
                    29:a0:2e:8a:41:f6:2c:1e:31:f9:c6:27:e5:ce:7a:
                    3a:48:bb:22:ea:38:64:3f:a4:1d:1a:de:ff:35:01:
                    f3:eb:fb:5d:15:65:16:24:af:d8:d9:5b:33:a9:38:
                    0f:f8:94:bb:ef:e7:21:ce:bf:98:73:c6:e8:db:93:
                    5d:bc:dd:4b:24:3b:0c:7f:fc:b5:06:56:81:fe:39:
                    67:1a:af:27:b4:0b:61:bc:8a:fb:51:3b:5e:c4:de:
                    e8:78:c1:75:6b:33:c5:70:11:45:d4:f6:de:86:9a:
                    a5:1d:ff:a1:9d:c2:f4:95:dc:a0:81:6d:92:a8:04:
                    02:41:1f:ff:ba:00:f3:55:94:4b:08:17:17:93:59:
                    c3:d9:41:a6:f7:a3:cf:20:d3:b2:d4:ef:3e:71:57:
                    37:2a:4c:09:82:09:c2:5d:10:25:30:0c:36:5a:c9:
                    17:4c:c4:19:f9:21:27:a8:d6:31:ee:14:7f:91:62:
                    9d:74:44:a9:f6:a2:fd:7c:9d:a9:10:e9:b4:05:8c:
                    2d:2e:39:49:36:1b:12:6a:ee:0f:55:01:88:93:4e:
                    99:29:83:7c:33:d0:77:56:2b:02:24:ee:91:e8:64:
                    9c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:04:D8:28:15:61:D9:EB:D0:E7:5B:97:C0:C1:35:31:B8:2C:0B:C1
            X509v3 Authority Key Identifier:
                keyid:5A:B6:40:91:91:BC:25:DA:93:A8:6C:B1:B7:9F:23:A5:B4:7F:AA:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/5AB6409191BC25DA93A86CB1B79F23A5B47FAABE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB6409191BC25DA93A86CB1B79F23A5B47FAABE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/3137372e38342e34322e302f32332d3233203d3e203532373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:3e:3b:d4:3e:23:3a:97:78:42:1a:7e:bf:14:c3:c6:15:6f:
         b0:53:86:81:46:8b:d9:59:c1:14:36:81:08:ee:9c:28:b8:07:
         26:f1:b4:53:3a:92:5d:dd:13:17:b9:b0:06:9f:1e:24:1c:a8:
         03:22:d3:ec:3b:7d:81:04:ec:bd:f0:5e:bb:f8:ba:57:bd:2f:
         48:f5:a3:b6:58:d8:85:0c:7a:16:95:30:6b:85:cc:22:2c:4d:
         7e:50:b9:aa:aa:5f:15:21:48:b8:9e:cd:6d:23:ee:81:8f:4c:
         ee:00:80:02:ba:71:de:ef:31:e3:7a:c0:34:05:26:85:8c:71:
         50:21:93:8f:bc:12:32:99:dc:af:91:92:8e:fa:c5:86:c9:a3:
         c6:78:c2:e5:0b:73:9a:cf:99:5a:5a:e0:52:5b:ce:2c:5e:3d:
         57:cf:18:1a:e2:e6:f3:d0:ce:74:80:3d:b3:7e:91:e9:61:c3:
         74:73:ac:d6:b4:4d:8b:81:60:ec:dd:88:1a:88:48:36:03:e0:
         ab:06:d4:d3:a8:64:84:bb:61:04:de:43:aa:c0:0a:a8:a8:25:
         23:92:4b:bc:26:1e:91:2b:10:ec:4c:9a:dd:f4:94:0d:41:b0:
         89:60:5b:b4:ae:dc:56:52:c5:4e:74:04:ab:74:62:71:5a:d6:
         ad:d9:7d:e8
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUExV3oks7PBQ3jikXIY/2UrgdTSEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUFCNjQwOTE5MUJDMjVEQTkzQTg2Q0IxQjc5RjIzQTVC
NDdGQUFCRTAeFw0yNjAxMzAwNjQ3MzhaFw0yNzAxMjkwNjUyMzhaMDMxMTAvBgNV
BAMTKEQwMDREODI4MTU2MUQ5RUJEMEU3NUI5N0MwQzEzNTMxQjgyQzBCQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuGMQ/DA/kyGTvsGNP63QqOrDi
UqTRdmf4aNoJBSmgLopB9iweMfnGJ+XOejpIuyLqOGQ/pB0a3v81AfPr+10VZRYk
r9jZWzOpOA/4lLvv5yHOv5hzxujbk1283UskOwx//LUGVoH+OWcarye0C2G8ivtR
O17E3uh4wXVrM8VwEUXU9t6GmqUd/6GdwvSV3KCBbZKoBAJBH/+6APNVlEsIFxeT
WcPZQab3o88g07LU7z5xVzcqTAmCCcJdECUwDDZayRdMxBn5ISeo1jHuFH+RYp10
RKn2ov18nakQ6bQFjC0uOUk2GxJq7g9VAYiTTpkpg3wz0HdWKwIk7pHoZJxLAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU0ATYKBVh2evQ51uXwME1MbgsC8EwHwYDVR0j
BBgwFoAUWrZAkZG8JdqTqGyxt58jpbR/qr4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXE2dUczYVdmQUJudEtibzh2NXBSckF0Zm9pTld5Z3dqZUxtbkVQdlhV
Z00vMC81QUI2NDA5MTkxQkMyNURBOTNBODZDQjFCNzlGMjNBNUI0N0ZBQUJFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBQjY0MDkxOTFCQzI1REE5
M0E4NkNCMUI3OUYyM0E1QjQ3RkFBQkUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlxNnVHM2FXZkFCbnRLYm84djVwUnJBdGZvaU5XeWd3amVMbW5FUHZYVWdNLzAv
MzEzNzM3MmUzODM0MmUzNDMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzUzMjM3
MzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAbFUKjANBgkqhkiG9w0BAQsFAAOCAQEAEz471D4jOpd4
Qhp+vxTDxhVvsFOGgUaL2VnBFDaBCO6cKLgHJvG0UzqSXd0TF7mwBp8eJByoAyLT
7Dt9gQTsvfBeu/i6V70vSPWjtljYhQx6FpUwa4XMIixNflC5qqpfFSFIuJ7NbSPu
gY9M7gCAArpx3u8x43rANAUmhYxxUCGTj7wSMpncr5GSjvrFhsmjxnjC5Qtzms+Z
WlrgUlvOLF49V88YGuLm89DOdIA9s36R6WHDdHOs1rRNi4Fg7N2IGohINgPgqwbU
06hkhLthBN5DqsAKqKglI5JLvCYekSsQ7Eya3fSUDUGwiWBbtK7cVlLFTnQEq3Ri
cVrWrdl96A==
-----END CERTIFICATE-----
Generated at Thu Feb 19 19:06:15 2026 by rpki-client