Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/3137372e35332e3230302e302f32332d3332203d3e203532393938.roa
File:                     3137372e35332e3230302e302f32332d3332203d3e203532393938.roa (raw, json)
Hash identifier:          /WaesXsz0Xno7VyqwEauwiLSqzzexkH4LMpPjy2BIiE=
Subject key identifier:   F1:05:AB:D0:F7:49:6F:18:E0:D9:0E:41:96:AB:55:7A:7D:65:5A:D6
Certificate issuer:       /CN=2E3906019F53CEC4441CD3D21CFF37C136BF24EC
Certificate serial:       2B09B633479899F19596C7693A2046378E690924
Authority key identifier: 2E:39:06:01:9F:53:CE:C4:44:1C:D3:D2:1C:FF:37:C1:36:BF:24:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/3137372e35332e3230302e302f32332d3332203d3e203532393938.roa
Signing time:             Thu 05 Feb 2026 14:11:18 +0000
ROA not before:           Thu 05 Feb 2026 14:06:18 +0000
ROA not after:            Thu 04 Feb 2027 14:11:18 +0000
asID:                     52998
IP address blocks:        177.53.200.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.crl
                          rsync://rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:29:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:09:b6:33:47:98:99:f1:95:96:c7:69:3a:20:46:37:8e:69:09:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E3906019F53CEC4441CD3D21CFF37C136BF24EC
        Validity
            Not Before: Feb  5 14:06:18 2026 GMT
            Not After : Feb  4 14:11:18 2027 GMT
        Subject: CN=F105ABD0F7496F18E0D90E4196AB557A7D655AD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:11:f3:2d:1d:45:63:8e:98:6b:06:82:5e:96:
                    28:9f:1a:0b:31:57:3c:27:e9:02:33:53:02:3d:f7:
                    07:5d:0f:45:d3:4d:ef:ed:00:90:ed:fa:7b:48:c3:
                    fe:db:fb:09:71:90:64:d8:ec:8d:5a:de:71:21:68:
                    d1:8d:fc:f3:65:38:26:32:68:a0:8c:49:7f:01:34:
                    b0:cd:7e:51:0d:e0:83:c2:25:88:e5:d3:1a:6a:c1:
                    92:d9:a5:18:85:f2:00:ff:a8:0c:c9:4d:1d:5b:92:
                    60:72:15:23:e3:06:d3:6f:e7:6a:ca:4c:7d:52:5d:
                    80:25:e1:e5:55:51:8f:be:d6:bd:19:ad:f9:97:46:
                    53:eb:9e:bb:8c:6e:0b:c0:00:e0:fb:ae:de:87:c5:
                    d2:0e:02:02:8f:ee:a9:5d:55:cc:17:9d:98:0a:6d:
                    f7:c1:bd:52:ef:40:dc:08:0b:cc:16:d8:64:44:87:
                    03:a9:41:dc:05:a0:a0:0f:bd:3d:08:c0:20:11:68:
                    70:00:14:65:ef:96:1a:e6:77:3f:eb:5b:af:96:1b:
                    49:d2:b6:b5:e7:41:b2:9f:18:1d:f5:fd:00:40:40:
                    c1:aa:67:06:d7:93:7e:b0:10:74:30:b7:9b:c7:45:
                    f0:54:52:b2:8a:bd:42:b7:71:7a:ed:d1:82:88:db:
                    68:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:05:AB:D0:F7:49:6F:18:E0:D9:0E:41:96:AB:55:7A:7D:65:5A:D6
            X509v3 Authority Key Identifier:
                keyid:2E:39:06:01:9F:53:CE:C4:44:1C:D3:D2:1C:FF:37:C1:36:BF:24:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/3137372e35332e3230302e302f32332d3332203d3e203532393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:2d:ae:73:61:e4:67:c8:c5:29:d2:78:39:35:16:ea:d0:0e:
         bf:09:46:6a:11:77:70:a7:49:d4:90:a7:e1:bf:53:e8:f6:d3:
         a7:07:b4:bc:61:22:56:32:c3:29:b7:da:23:50:c4:4a:ce:74:
         28:47:61:86:5f:33:24:6b:6b:b2:0e:c4:31:75:78:13:81:c8:
         c2:e0:e1:f1:74:e2:94:42:b8:12:e9:06:6a:23:66:91:1c:5f:
         39:25:7c:34:34:63:b7:5b:cc:35:a4:d6:71:19:d9:c2:f0:a6:
         7b:c3:74:8b:08:d6:27:f7:0f:78:e9:9c:5c:bd:b4:aa:56:3c:
         ca:3d:5a:56:38:9c:af:13:85:12:be:e4:a2:33:e2:02:e3:bf:
         72:d8:a8:53:be:89:25:30:d2:a9:82:5c:7b:d0:7a:d2:e2:40:
         24:2a:fc:e0:5e:10:0b:3e:10:df:13:f8:08:25:03:39:b2:f3:
         75:5e:0d:47:b0:d4:02:ae:6c:13:00:ba:01:91:03:28:be:fa:
         24:f8:f6:d5:0f:3e:72:d9:ff:21:81:43:b8:6d:da:c3:2e:c6:
         29:d0:58:93:82:53:6c:03:ec:fb:a9:f3:67:c7:69:47:13:1e:
         9d:54:3b:86:b9:e4:71:96:00:d0:d1:e8:b6:44:f2:ed:8f:ce:
         56:52:75:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:27:53 2026 by rpki-client