Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3137372e38342e3137362e302f32312d3234203d3e20323632343230.roa
File:                     3137372e38342e3137362e302f32312d3234203d3e20323632343230.roa (raw, json)
Hash identifier:          g+2X3EHPSij7Zl0pmNNNKYZbuDUNr58UrjDRtCuChVc=
Subject key identifier:   9E:0A:57:F5:19:2B:B4:70:E8:9F:4D:B1:CF:8C:FC:A1:4A:FA:8E:7F
Certificate issuer:       /CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Certificate serial:       0C23A16F2735C4ABC630174403DC1F85D52B0851
Authority key identifier: A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3137372e38342e3137362e302f32312d3234203d3e20323632343230.roa
Signing time:             Mon 12 Jan 2026 15:22:09 +0000
ROA not before:           Mon 12 Jan 2026 15:17:09 +0000
ROA not after:            Mon 11 Jan 2027 15:22:09 +0000
asID:                     262420
IP address blocks:        177.84.176.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 14:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:23:a1:6f:27:35:c4:ab:c6:30:17:44:03:dc:1f:85:d5:2b:08:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
        Validity
            Not Before: Jan 12 15:17:09 2026 GMT
            Not After : Jan 11 15:22:09 2027 GMT
        Subject: CN=9E0A57F5192BB470E89F4DB1CF8CFCA14AFA8E7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1e:e4:40:e6:59:30:28:6b:ed:60:93:06:6c:
                    d5:c7:a4:3d:2e:da:ff:02:dd:da:a9:63:4e:8d:0a:
                    cc:0d:8e:ee:56:3a:fc:39:15:6a:72:c3:8e:1a:c8:
                    c3:57:05:bf:b7:98:b1:84:56:38:d5:e7:32:e8:fb:
                    56:46:e3:51:b7:b8:97:ab:9a:16:5b:00:74:dd:c3:
                    a3:81:94:8d:de:ce:bf:d7:ea:14:c3:c1:ba:d3:6e:
                    9d:4d:77:19:23:1f:64:da:c6:cd:a8:5f:6b:a5:4d:
                    f6:2b:3c:d1:9d:0e:02:ab:e7:b2:37:04:4b:6e:d5:
                    3d:b2:39:12:69:a4:2e:6b:7b:4e:9f:a1:37:a2:3d:
                    17:cc:4c:db:94:4e:57:4f:37:d5:7c:73:7e:8f:ab:
                    0f:60:c2:d9:bf:5b:d0:38:15:f7:00:36:d5:a4:6b:
                    17:87:be:a6:26:55:7d:c5:8e:48:3a:e1:73:51:a4:
                    de:33:dd:ad:7e:ed:03:08:28:2e:bd:e4:1e:44:b0:
                    11:41:49:79:88:bd:f2:48:5b:8d:fe:ef:3c:b9:99:
                    88:ea:e8:49:d7:f8:91:af:4b:1f:23:fe:8f:f0:80:
                    93:9f:57:db:e5:3e:8f:4c:47:b4:4f:24:6a:e9:81:
                    3d:14:ef:8b:45:6f:70:3e:df:c3:cb:36:99:15:72:
                    b8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:0A:57:F5:19:2B:B4:70:E8:9F:4D:B1:CF:8C:FC:A1:4A:FA:8E:7F
            X509v3 Authority Key Identifier:
                keyid:A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3137372e38342e3137362e302f32312d3234203d3e20323632343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3f:98:36:af:3f:1d:37:7a:58:59:bc:21:85:45:18:c0:e3:83:
         de:2d:c1:65:9d:77:6a:12:40:d9:60:84:b6:54:42:d7:04:b4:
         ec:19:08:d2:fe:0a:9c:b4:7b:60:25:a5:0f:b4:ea:b8:73:47:
         a0:b3:71:2d:cc:3e:dd:fa:b0:4e:07:84:9f:e4:cb:74:be:af:
         f8:34:65:3c:9a:48:f9:36:29:84:72:7c:ca:05:61:bd:85:f5:
         f9:fb:6e:3a:7b:57:98:51:17:96:9e:b6:9f:0b:78:fb:38:1c:
         87:1c:28:e2:d2:77:7c:94:6d:ab:3f:30:cd:0b:c8:05:75:2d:
         5f:89:8b:b8:23:7a:09:b0:fa:0c:72:3e:06:9a:90:7f:58:8f:
         14:2c:64:68:a8:e9:88:aa:83:96:33:69:c0:4f:b1:be:03:51:
         cd:d3:8f:2c:61:94:01:7f:95:42:00:ad:8f:bf:f8:44:2e:37:
         49:d6:04:53:1c:f3:bc:91:b8:2f:65:a7:df:67:c7:88:a6:e8:
         01:c7:45:76:2a:a3:7f:4d:36:21:d0:53:c7:a1:b1:1f:03:4b:
         f2:83:03:69:48:56:fc:76:33:ef:0a:00:10:81:d6:e4:11:bb:
         94:a4:65:3c:c8:2e:de:7a:92:98:d6:42:d2:62:33:d2:ec:e9:
         4b:fa:1b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 07:23:27 2026 by rpki-client