Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3137372e35322e33382e302f32332d3332203d3e2030.roa
File:                     3137372e35322e33382e302f32332d3332203d3e2030.roa (raw, json)
Hash identifier:          QIaprSKTl/bA/EUlkx6iVSAmmh3cXkYB0CyhQjMNQzY=
Subject key identifier:   B4:00:03:81:14:73:F9:EE:D0:25:E4:45:D8:86:36:01:01:EF:67:F9
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       0D69B6313A061B49CA192588A89ADCEF90FC4047
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3137372e35322e33382e302f32332d3332203d3e2030.roa
Signing time:             Fri 30 Jan 2026 19:20:33 +0000
ROA not before:           Fri 30 Jan 2026 19:15:33 +0000
ROA not after:            Fri 29 Jan 2027 19:20:33 +0000
asID:                     0
IP address blocks:        177.52.38.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 07:40:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:69:b6:31:3a:06:1b:49:ca:19:25:88:a8:9a:dc:ef:90:fc:40:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Jan 30 19:15:33 2026 GMT
            Not After : Jan 29 19:20:33 2027 GMT
        Subject: CN=B40003811473F9EED025E445D886360101EF67F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:89:34:a9:43:25:18:8f:25:a1:ed:2f:62:bb:
                    93:e2:42:25:14:65:ad:f5:bb:6a:1d:45:8d:c5:8c:
                    e6:a6:8e:0d:c0:ca:e0:2d:91:74:1c:c1:d7:91:12:
                    9b:4b:01:8f:81:e0:12:2d:ed:10:a1:44:74:48:5b:
                    af:da:d4:16:f2:09:e5:f5:d9:34:c8:e9:17:20:d9:
                    17:81:2e:e5:29:51:2d:c3:5f:6d:14:04:69:b2:17:
                    3c:78:3f:ff:80:d0:f6:9d:26:36:65:b5:91:01:24:
                    53:8b:f0:e5:e2:2b:d1:d3:d5:d0:3f:42:d2:7f:fc:
                    2c:d2:2e:c2:dc:2a:10:6f:0c:f1:db:3a:f5:4e:16:
                    d9:d2:13:a6:8e:85:36:c5:27:be:ac:47:94:14:6f:
                    43:59:4f:94:1f:78:9c:6e:93:8a:fc:f0:f1:53:ee:
                    ff:ba:e8:39:e0:66:0a:94:0c:b9:81:24:da:f6:c5:
                    ba:f2:eb:68:0c:1e:cd:e4:83:fd:4d:b4:eb:bb:f9:
                    ef:af:a0:0b:c7:04:a5:2b:a8:be:47:85:83:99:ce:
                    1b:cd:9e:71:94:57:10:e7:27:14:04:f7:44:3a:88:
                    aa:05:d4:d6:f3:e3:fc:32:ec:b4:1c:3b:7b:25:53:
                    43:51:a6:e6:73:16:f9:7c:d2:ab:a5:a8:b6:4c:10:
                    d5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:00:03:81:14:73:F9:EE:D0:25:E4:45:D8:86:36:01:01:EF:67:F9
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3137372e35322e33382e302f32332d3332203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:b1:f9:63:23:bc:68:92:b9:ea:e0:56:0c:bf:fc:fb:09:8d:
         6f:1d:0f:81:f5:77:9d:4b:98:1b:88:c2:13:3e:cc:fe:3a:92:
         63:ce:0d:0b:07:c5:18:2f:62:79:e2:5a:75:c5:94:65:4f:b4:
         e0:22:ab:1e:2e:04:09:71:a3:7a:3c:6f:ac:c2:e2:b2:f0:7d:
         28:45:e9:55:b0:57:ae:0a:12:60:30:8f:32:04:20:1a:5c:1f:
         e8:27:76:6a:f7:72:71:3c:d1:f6:cf:58:9c:c6:58:4e:62:02:
         3c:5b:09:ee:6b:b6:28:de:34:c0:d5:67:4d:cd:96:c0:30:c4:
         b6:33:39:34:c1:9f:c6:b6:0a:28:6a:db:c5:07:cd:4a:6f:3c:
         55:62:bb:a0:94:92:a1:c1:0a:69:2d:b9:de:cd:b7:78:97:1d:
         10:57:96:53:84:87:83:a7:4d:63:d7:68:1b:42:b1:50:06:ab:
         49:dd:54:ff:e0:30:9d:ca:37:5f:60:65:ec:89:16:9d:fd:bc:
         11:54:72:d0:85:ec:a5:c0:f4:99:79:df:db:6c:ad:5d:df:50:
         7e:1a:2f:c3:77:fb:96:b6:3e:b5:40:f6:fd:c3:cd:50:f7:96:
         75:af:e1:cc:88:7a:56:01:d1:26:03:47:d6:01:81:db:fc:e9:
         32:44:fb:91
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Feb 19 15:41:39 2026 by rpki-client