Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137372e33392e37352e302f32342d3234203d3e203532393737.roa
File:                     3137372e33392e37352e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier:          UsEkS4tpXR/SRG/NYyKpqK4Q9hniVgvC3NOPU+BcdaA=
Subject key identifier:   DC:B8:38:0D:8A:19:51:DA:E5:93:75:94:D1:7C:28:78:EB:E6:69:72
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       7A748340A005F43234ACD62CAB084829B4A58F19
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137372e33392e37352e302f32342d3234203d3e203532393737.roa
Signing time:             Wed 04 Feb 2026 20:00:02 +0000
ROA not before:           Wed 04 Feb 2026 19:55:02 +0000
ROA not after:            Wed 03 Feb 2027 20:00:02 +0000
asID:                     52977
IP address blocks:        177.39.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
                          rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 06:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:74:83:40:a0:05:f4:32:34:ac:d6:2c:ab:08:48:29:b4:a5:8f:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Feb  4 19:55:02 2026 GMT
            Not After : Feb  3 20:00:02 2027 GMT
        Subject: CN=DCB8380D8A1951DAE5937594D17C2878EBE66972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:49:55:fc:bd:2d:6e:ad:c5:c5:24:78:c8:bf:
                    8a:27:ef:1d:35:ae:85:3d:6e:39:61:5f:e1:17:53:
                    92:b4:e9:ac:ab:6d:27:58:79:a8:e2:11:d9:23:2a:
                    fb:e0:65:5f:09:5f:20:ad:e2:65:3d:19:37:33:f9:
                    61:5b:9c:00:a5:e0:30:02:ed:cf:5d:4d:31:4f:41:
                    bc:8e:53:1d:37:95:82:b8:4f:b9:19:3f:41:ac:cc:
                    7a:15:a9:a5:94:c3:5e:2d:3a:f3:67:53:2a:76:79:
                    13:e8:da:13:82:07:70:75:d6:45:dc:ef:8d:80:7c:
                    1b:fe:31:61:52:06:db:e1:d7:ad:49:9b:8a:a9:b2:
                    52:dc:76:af:97:cf:42:d9:46:1a:c9:8d:7a:2d:e2:
                    6f:c2:37:bb:10:6f:6a:31:1f:73:5c:d9:92:04:b1:
                    17:8a:9b:3f:b7:3d:b0:11:72:18:a4:73:55:4a:2f:
                    f1:af:26:62:8a:e1:a3:e6:75:6a:9e:ce:88:9c:89:
                    a7:e3:e2:8c:fb:80:a0:5b:73:4e:38:81:b1:65:4d:
                    e4:cb:bf:54:1c:eb:31:f1:83:b3:e4:49:57:cc:4a:
                    a9:8b:69:1f:cd:cd:a7:6f:35:10:5c:33:70:88:e1:
                    2f:89:d1:ee:3d:42:63:c2:e7:1c:c2:09:5c:54:ba:
                    2c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B8:38:0D:8A:19:51:DA:E5:93:75:94:D1:7C:28:78:EB:E6:69:72
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137372e33392e37352e302f32342d3234203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:a0:54:32:ef:91:e5:88:f6:af:63:a9:0a:3c:08:8f:2b:cc:
         b5:6b:ed:f7:24:38:53:a1:8d:86:0b:bb:cd:05:9c:dc:96:3b:
         60:e2:0c:0f:0c:e6:99:e4:cb:5e:40:3d:ec:1e:a3:ab:28:95:
         fb:f5:34:ad:36:d0:c8:0c:78:bb:d1:8a:ad:42:bd:8a:5f:30:
         b6:e4:a5:15:55:c5:e4:2b:78:58:4b:c5:86:00:2a:f5:af:89:
         c9:2a:40:db:98:62:e5:37:21:69:f3:50:87:71:d3:96:95:be:
         51:83:66:4e:98:0f:b3:b1:af:2f:62:02:d3:a4:e8:e2:18:a3:
         22:e6:5a:ef:b3:c0:7f:95:33:fa:9e:92:6e:7c:54:18:18:e5:
         c7:4b:bd:f7:43:94:7b:d1:ab:67:4f:b8:60:05:f9:ae:b5:c4:
         72:9a:43:97:22:00:1a:3b:fc:94:46:57:89:02:c7:df:bc:a8:
         bf:81:71:7b:47:03:c9:84:96:36:78:8f:09:84:dd:56:75:8a:
         fa:c8:e4:c6:bb:78:37:f8:e7:73:74:b5:77:db:e1:f2:2e:59:
         fc:8c:47:78:14:0f:77:88:29:c1:70:c4:6d:d4:10:b9:70:07:
         53:15:c7:37:5b:59:dd:27:18:ab:ca:7a:5d:ab:6c:f8:7f:44:
         4c:3c:9a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 07:19:39 2026 by rpki-client