Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137372e33392e37372e302f32342d3234203d3e203532393737.roa
File:                     3137372e33392e37372e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier:          dZ4Vw77aYNH98F97Vdb0er/SlkJ84p+cd429ftwB8oQ=
Subject key identifier:   91:06:8B:78:F5:3D:6E:C6:3D:50:84:39:A3:7A:C6:95:0E:C9:6E:15
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       7AF5C8E7B23B0E50E6E0B3D6C7226D57D4AAF5E6
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137372e33392e37372e302f32342d3234203d3e203532393737.roa
Signing time:             Wed 04 Feb 2026 20:00:02 +0000
ROA not before:           Wed 04 Feb 2026 19:55:02 +0000
ROA not after:            Wed 03 Feb 2027 20:00:02 +0000
asID:                     52977
IP address blocks:        177.39.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
                          rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 11:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:f5:c8:e7:b2:3b:0e:50:e6:e0:b3:d6:c7:22:6d:57:d4:aa:f5:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Feb  4 19:55:02 2026 GMT
            Not After : Feb  3 20:00:02 2027 GMT
        Subject: CN=91068B78F53D6EC63D508439A37AC6950EC96E15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:dd:51:75:62:d7:e7:78:64:38:7c:e9:d5:c2:
                    c2:d6:54:43:d5:b0:4f:33:e4:ce:1d:d0:4a:dc:44:
                    be:f6:59:f0:f6:c1:a5:15:15:6c:01:88:8a:ce:ee:
                    c1:02:27:18:5e:81:7a:27:96:b6:af:00:d4:1d:44:
                    66:31:c8:3d:43:f3:a6:48:32:91:f3:3a:f4:6b:0b:
                    3a:31:4a:78:9c:91:62:be:48:9c:30:d3:d3:ba:84:
                    73:42:57:4d:bc:45:ad:5e:ea:02:1a:bc:19:77:f0:
                    53:4d:d0:6e:f4:2a:ec:37:9c:31:4a:b6:1c:b2:9b:
                    49:4f:f8:c1:04:6a:66:1c:58:1c:72:cd:3f:99:ce:
                    1c:4d:2a:63:6d:60:01:9f:06:c5:28:87:af:a6:d6:
                    44:61:20:ff:b4:fa:e4:d9:d6:47:7b:be:bf:9e:9b:
                    86:d4:3c:f9:5e:73:bc:58:c1:6a:dd:ab:7a:a7:42:
                    79:9e:7f:e6:12:47:af:2d:29:5f:25:e6:36:23:d0:
                    94:bd:36:26:28:ed:52:c0:aa:3b:fe:79:a2:57:da:
                    71:15:8b:87:38:a4:e0:0c:6b:22:b7:df:66:88:d9:
                    d6:cf:9b:e0:e2:3c:68:e0:82:1b:5d:a7:7a:62:1f:
                    9e:6b:2c:77:88:36:d3:dc:d6:be:b3:ce:32:a2:3f:
                    85:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:06:8B:78:F5:3D:6E:C6:3D:50:84:39:A3:7A:C6:95:0E:C9:6E:15
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137372e33392e37372e302f32342d3234203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         da:d3:46:14:27:8c:00:cc:02:ff:f0:31:e8:ef:02:c5:f6:98:
         bf:ea:5c:61:73:a2:4e:2b:0d:36:c1:54:c3:57:35:b2:2a:8f:
         b7:b1:e2:c4:13:cc:1f:8f:9a:68:2e:85:50:35:13:b7:c6:91:
         8e:c3:54:49:05:18:1f:16:86:85:6e:0b:ce:6a:d4:46:9a:3d:
         c2:78:de:2a:9e:f8:c0:f7:4f:dd:12:86:45:50:e1:f2:fa:14:
         45:3f:5d:97:35:0d:f9:1a:94:6e:fb:7e:3c:ab:5a:80:06:51:
         eb:c0:3e:bd:4a:29:8b:e8:9a:62:fd:5a:f5:b6:23:87:57:ce:
         89:99:bd:8f:f7:65:b5:09:0f:48:66:17:ea:23:df:0d:2b:ef:
         52:3b:e5:95:a8:9a:be:9e:46:b3:b4:01:9f:29:2a:e6:ed:7c:
         3e:03:70:aa:88:64:27:e9:9f:40:dc:cc:89:31:ac:d6:a2:30:
         4e:f6:4d:ca:d6:52:4c:95:c0:cc:93:5e:dc:0d:01:49:05:21:
         78:64:83:5d:8e:d8:ed:f3:e1:85:f9:bc:26:c2:6a:64:b3:9a:
         68:f3:14:ea:0c:2b:ce:73:37:69:ad:ab:ed:0b:d8:98:f2:12:
         a6:60:cd:f5:e2:b0:99:21:f9:0b:fe:53:7c:58:57:28:50:eb:
         50:b3:6c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:00:21 2026 by rpki-client