Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3137372e3135342e37322e302f32312d3234203d3e203238333439.roa
File:                     3137372e3135342e37322e302f32312d3234203d3e203238333439.roa (raw, json)
Hash identifier:          wk7z5pVrSE+HAUNTvAk4T3odPThTa5P9xQ3MDb0V3hk=
Subject key identifier:   56:FB:09:C6:4D:77:BE:E8:A2:28:B3:7A:1F:FE:6A:22:22:66:61:74
Certificate issuer:       /CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Certificate serial:       59CE68EEF4FD76A08D4FA25FD72DCD95FB1D427E
Authority key identifier: A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3137372e3135342e37322e302f32312d3234203d3e203238333439.roa
Signing time:             Mon 12 Jan 2026 15:22:10 +0000
ROA not before:           Mon 12 Jan 2026 15:17:10 +0000
ROA not after:            Mon 11 Jan 2027 15:22:10 +0000
asID:                     28349
IP address blocks:        177.154.72.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 07:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:ce:68:ee:f4:fd:76:a0:8d:4f:a2:5f:d7:2d:cd:95:fb:1d:42:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
        Validity
            Not Before: Jan 12 15:17:10 2026 GMT
            Not After : Jan 11 15:22:10 2027 GMT
        Subject: CN=56FB09C64D77BEE8A228B37A1FFE6A2222666174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:99:9d:b4:0c:d4:09:4c:ce:da:25:24:ba:11:
                    40:5d:a0:bb:cc:e1:6a:77:26:e3:c1:cf:a0:94:1e:
                    2d:bd:59:89:5c:1b:af:9c:5d:26:d2:ae:85:d8:ab:
                    4f:e9:4d:ec:f2:db:b2:ab:83:d5:1b:30:f3:5b:06:
                    5e:4d:10:b7:f8:56:f2:9d:ab:22:d3:65:47:77:4d:
                    6c:b2:89:8f:9b:eb:9a:74:fb:0d:ea:bb:7b:44:b3:
                    f5:98:50:d3:2c:64:b6:6c:6d:03:42:82:b5:e8:04:
                    17:46:66:9d:84:f9:9a:e1:9f:65:3d:fb:5f:33:e3:
                    76:4f:31:e4:49:cb:5a:26:6f:e0:35:b5:27:bc:37:
                    c7:6e:04:03:75:8c:61:67:a1:c7:be:0f:bb:6d:38:
                    59:a7:49:fe:7c:f5:48:30:3c:77:28:ff:08:76:ec:
                    e8:33:ed:bc:9a:f1:bb:ef:48:2a:09:2b:9f:4d:ce:
                    c1:ef:57:c8:84:1c:de:be:ab:27:96:44:eb:76:7f:
                    c0:bc:a5:e3:35:8f:b5:51:27:b3:10:1f:e7:ab:21:
                    f3:2c:bd:76:4a:cf:fe:c0:24:5e:c5:86:9c:4f:65:
                    bf:f4:11:76:de:b7:cf:ba:fe:92:aa:15:2d:55:1d:
                    5a:d4:c5:fe:9d:cb:55:4f:86:85:93:cd:24:92:bf:
                    e1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:FB:09:C6:4D:77:BE:E8:A2:28:B3:7A:1F:FE:6A:22:22:66:61:74
            X509v3 Authority Key Identifier:
                keyid:A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3137372e3135342e37322e302f32312d3234203d3e203238333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         62:9b:d7:a3:7c:2b:89:13:ca:ea:93:e2:6a:2d:cf:7d:37:13:
         80:aa:3c:40:af:db:e2:7d:76:f7:1e:c7:fe:2f:6c:37:7d:86:
         b9:03:0c:13:3e:34:9e:0d:b0:21:34:be:b2:a7:78:fc:2c:8c:
         a2:61:08:06:2d:a4:a4:d2:00:2f:cd:0f:59:73:84:e2:84:cd:
         2e:e4:f4:89:3e:b4:7d:85:c2:02:5d:f9:da:56:12:b8:de:46:
         4b:d1:66:23:3a:d9:c6:4b:3b:22:b1:9a:9c:d1:8d:6a:ac:83:
         f3:f7:eb:61:77:03:37:2c:8a:3b:d8:ab:c1:f5:51:e3:76:26:
         6b:37:76:38:d9:ee:5e:b8:77:94:f3:3d:78:50:7a:06:cf:93:
         46:e8:66:be:b2:cf:55:72:0c:6d:b5:43:f1:f5:b7:be:24:f2:
         9b:9c:2e:f6:4c:76:b2:23:ec:1f:8a:2c:6b:85:21:54:52:47:
         9c:fd:be:a0:9e:a0:d2:f3:1a:0b:da:84:9e:cd:09:ad:8e:26:
         91:e2:70:df:1e:6f:74:3a:6e:42:c1:1c:ad:5e:7f:35:91:8e:
         6e:37:de:f1:51:75:36:22:0f:4d:ad:a3:13:76:72:ac:75:77:
         7a:78:40:03:9a:30:7e:37:65:97:53:a6:c0:ea:ec:49:11:1f:
         54:8e:b5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:38:48 2026 by rpki-client