Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137372e33392e37322e302f32342d3234203d3e203532393737.roa
File:                     3137372e33392e37322e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier:          Fh6J01jBSO6F/LqAUZEVIq8gnQV9Pqxzd29DZEj2yvo=
Subject key identifier:   53:CA:40:08:41:5E:8E:DB:D8:A2:D2:E1:D3:BC:39:96:0F:40:40:EE
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       771BBC8F3923140F71D009C35AC7667B078DDA85
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137372e33392e37322e302f32342d3234203d3e203532393737.roa
Signing time:             Wed 04 Feb 2026 20:00:06 +0000
ROA not before:           Wed 04 Feb 2026 19:55:06 +0000
ROA not after:            Wed 03 Feb 2027 20:00:06 +0000
asID:                     52977
IP address blocks:        177.39.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
                          rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 06:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:1b:bc:8f:39:23:14:0f:71:d0:09:c3:5a:c7:66:7b:07:8d:da:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Feb  4 19:55:06 2026 GMT
            Not After : Feb  3 20:00:06 2027 GMT
        Subject: CN=53CA4008415E8EDBD8A2D2E1D3BC39960F4040EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:24:7a:38:28:97:97:36:c7:04:ae:6e:5b:eb:
                    5d:9a:2e:2c:d6:33:9f:4c:1a:d8:e8:73:cd:19:96:
                    82:cf:13:15:df:29:88:99:10:7f:c4:41:8c:8a:27:
                    ba:12:c1:ea:7a:22:aa:96:32:c4:40:74:b3:d2:9d:
                    ea:bc:91:db:04:7a:b0:48:e3:cf:f6:47:62:50:16:
                    3e:4e:06:0e:ed:7f:26:b2:a9:66:ef:aa:c6:8e:cb:
                    97:66:b4:6b:a9:01:fe:49:2b:44:49:05:39:ec:52:
                    9c:1f:59:2c:db:61:b0:50:b2:bf:c4:2d:2b:01:30:
                    91:98:38:3a:5d:ec:6c:43:e6:30:54:b6:40:79:74:
                    e9:e1:56:ed:24:24:d6:66:c0:c8:32:fc:ab:5b:1a:
                    a8:b8:b9:02:d0:5b:15:0a:09:ef:ec:e9:11:d4:e3:
                    a5:ec:8a:f6:44:ba:3e:7f:f5:04:bc:52:89:3d:2a:
                    50:d7:25:76:29:8f:58:6a:e6:05:3b:8e:c9:b1:37:
                    f1:9a:8e:06:81:23:1a:c8:de:51:58:29:84:6f:90:
                    e3:f2:34:e1:8c:bd:13:ec:b7:84:b4:66:75:1b:0b:
                    ec:c9:57:46:08:bc:53:fc:a0:df:5a:d8:43:38:01:
                    4c:51:1b:6f:dc:ce:2a:21:95:ec:c3:26:88:97:49:
                    e6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:CA:40:08:41:5E:8E:DB:D8:A2:D2:E1:D3:BC:39:96:0F:40:40:EE
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137372e33392e37322e302f32342d3234203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:14:60:09:4c:3f:17:2c:09:1f:f3:9c:63:c5:dd:38:d8:9d:
         ba:6d:b2:e0:5e:33:31:9c:7d:27:b7:cc:ed:82:99:20:f4:7c:
         5c:17:7e:70:84:d9:87:10:20:2c:0b:10:fa:a0:fe:5c:23:2e:
         84:21:6f:33:3f:f9:6f:9e:70:70:19:dd:96:62:86:77:bb:6a:
         a4:64:4e:7a:fb:3e:9b:04:a1:5d:bc:5e:61:72:6f:e4:72:0f:
         01:1e:d5:95:67:4a:dd:00:ca:ee:2d:61:f8:f1:28:89:b1:6a:
         a0:49:de:3f:ba:1c:6c:5a:31:d8:4a:0c:43:b7:d0:cf:0f:00:
         a4:e0:de:26:6c:f8:e7:43:2f:b8:96:d4:60:2c:61:2f:07:b4:
         99:47:a9:50:de:29:71:e7:e0:46:9f:89:01:51:94:d6:33:c6:
         53:6e:4b:3a:f6:70:e7:58:e5:cc:a2:46:d0:39:57:1e:75:96:
         b2:2b:cb:73:dc:5d:a7:dc:d1:7a:ed:ba:83:80:af:64:c3:ac:
         5f:39:03:22:5b:77:b1:e7:c3:99:1e:47:33:b8:7f:a6:e3:e8:
         57:40:53:30:2b:dc:ff:a6:5a:93:42:2f:63:91:f4:46:24:6f:
         7d:e8:9c:33:34:8e:c1:c7:8c:6d:8f:52:f0:07:57:79:a1:5b:
         3f:91:3d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:38:36 2026 by rpki-client