Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3137372e3135342e36342e302f32312d3234203d3e20323637343834.roa
File:                     3137372e3135342e36342e302f32312d3234203d3e20323637343834.roa (raw, json)
Hash identifier:          mNwlr+h7iP2/luLYjwk8qIXR0ECV+UauYf4sMxDwKpg=
Subject key identifier:   42:DA:45:CC:5C:F2:71:E3:7B:D9:AA:BE:92:72:66:E4:4F:6E:71:51
Certificate issuer:       /CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Certificate serial:       7C2835C0535273BC7D12122E28E4918E23392F78
Authority key identifier: A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3137372e3135342e36342e302f32312d3234203d3e20323637343834.roa
Signing time:             Mon 12 Jan 2026 15:22:16 +0000
ROA not before:           Mon 12 Jan 2026 15:17:16 +0000
ROA not after:            Mon 11 Jan 2027 15:22:16 +0000
asID:                     267484
IP address blocks:        177.154.64.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 07:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:28:35:c0:53:52:73:bc:7d:12:12:2e:28:e4:91:8e:23:39:2f:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
        Validity
            Not Before: Jan 12 15:17:16 2026 GMT
            Not After : Jan 11 15:22:16 2027 GMT
        Subject: CN=42DA45CC5CF271E37BD9AABE927266E44F6E7151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:75:4e:b3:9e:d5:e8:61:1c:54:ee:b7:24:3c:
                    71:fb:88:3e:64:a9:59:7a:21:9f:0b:16:7c:df:b3:
                    17:79:63:80:f7:65:51:dc:83:0b:0e:5b:af:db:2a:
                    d4:33:ad:ce:11:2d:8e:6c:da:59:90:c1:0b:ed:57:
                    2a:fd:77:01:90:f7:a8:40:aa:03:c2:70:91:13:e8:
                    82:37:6c:50:a6:90:70:d6:d3:f0:f5:9f:7b:66:7a:
                    56:79:de:9f:46:27:17:20:9c:4d:36:c2:46:81:0f:
                    f8:c4:17:10:f6:fc:55:1a:4c:f2:cd:0f:60:cf:76:
                    6e:8e:46:5d:92:a4:0e:2e:78:af:3a:0d:01:f7:0e:
                    4d:62:87:2b:07:95:e7:67:07:ad:20:77:54:84:6a:
                    74:e4:4a:75:46:be:fa:c4:70:5f:c8:4f:83:e5:b2:
                    18:61:0b:5d:6f:9d:b6:cf:75:a4:3b:4c:8c:04:2e:
                    5a:70:7c:a5:6e:3e:c5:68:e2:2f:4b:d0:bc:6f:ce:
                    e2:27:0b:bf:dc:d5:6b:ac:9e:f3:3d:16:41:95:c7:
                    11:45:62:d4:17:2f:05:98:ef:3f:f6:a9:49:9e:73:
                    5c:e9:bb:e5:23:8c:b4:11:77:f3:b2:ce:29:ce:28:
                    97:99:02:d5:cd:d1:65:06:86:b0:4b:09:3d:e4:61:
                    1c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:DA:45:CC:5C:F2:71:E3:7B:D9:AA:BE:92:72:66:E4:4F:6E:71:51
            X509v3 Authority Key Identifier:
                keyid:A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3137372e3135342e36342e302f32312d3234203d3e20323637343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         73:78:f2:a1:8d:f7:6b:c8:31:7e:e4:11:95:16:f4:40:a1:aa:
         1a:55:0d:b8:22:f7:68:5c:bb:fe:8f:77:b4:7c:64:3f:59:7f:
         6b:7e:73:ee:26:00:08:a3:80:ec:67:78:7b:8c:15:24:fa:23:
         be:63:2d:80:42:15:82:c6:5a:55:fe:9c:a6:68:0d:30:74:1a:
         f6:8d:75:9c:e7:ab:ef:7b:04:94:97:9d:ec:51:18:42:f9:86:
         3b:76:0b:ac:28:d2:ac:1b:3b:01:a4:ce:fb:d7:54:4b:71:54:
         13:72:7c:d7:20:d5:2c:77:bb:8c:d9:a5:8a:13:1e:13:cb:32:
         a9:bd:4e:5d:97:52:05:e6:77:9a:b6:97:bb:5f:7f:d6:4c:ab:
         75:78:d1:f6:63:b0:f3:85:8c:46:62:94:f4:9a:66:51:70:83:
         86:30:8d:73:1b:6b:1e:6b:41:ff:cf:73:32:6f:98:b7:88:1d:
         cd:c8:bb:55:e1:4d:15:d1:dc:cd:73:e1:49:18:dd:89:a6:d4:
         21:e2:1b:a4:22:38:09:d1:c0:16:79:35:bb:ac:e8:21:f8:01:
         ce:25:50:b6:25:65:06:3b:6d:9e:fa:6b:7d:d0:13:df:d5:d2:
         11:d2:58:41:cb:aa:4f:0a:00:35:4f:8f:72:96:93:0f:65:a9:
         d7:32:f5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:40:46 2026 by rpki-client