Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/3137372e38342e3133322e302f32322d3332203d3e203532393938.roa
File:                     3137372e38342e3133322e302f32322d3332203d3e203532393938.roa (raw, json)
Hash identifier:          znF6N7PFh1mvbrBMmCOtML4RkXP/iF7dwKow+jMPHdg=
Subject key identifier:   E9:4C:0C:3A:79:AD:2B:83:F4:EC:0D:66:2C:E6:84:EB:4A:D9:13:9C
Certificate issuer:       /CN=2E3906019F53CEC4441CD3D21CFF37C136BF24EC
Certificate serial:       0DB5A173A067FBD8675D34E48AB65F757B343C94
Authority key identifier: 2E:39:06:01:9F:53:CE:C4:44:1C:D3:D2:1C:FF:37:C1:36:BF:24:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/3137372e38342e3133322e302f32322d3332203d3e203532393938.roa
Signing time:             Thu 05 Feb 2026 14:11:18 +0000
ROA not before:           Thu 05 Feb 2026 14:06:18 +0000
ROA not after:            Thu 04 Feb 2027 14:11:18 +0000
asID:                     52998
IP address blocks:        177.84.132.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.crl
                          rsync://rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:29:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:b5:a1:73:a0:67:fb:d8:67:5d:34:e4:8a:b6:5f:75:7b:34:3c:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E3906019F53CEC4441CD3D21CFF37C136BF24EC
        Validity
            Not Before: Feb  5 14:06:18 2026 GMT
            Not After : Feb  4 14:11:18 2027 GMT
        Subject: CN=E94C0C3A79AD2B83F4EC0D662CE684EB4AD9139C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2d:11:5a:ad:eb:3b:13:65:6b:ca:de:28:9c:
                    b6:ce:1f:39:f9:f3:a6:ee:6f:91:a7:68:ee:b8:1f:
                    96:f2:a4:8e:f4:d6:cc:f6:4f:70:10:4c:3d:23:cd:
                    03:27:65:01:b6:75:a5:4e:f2:33:41:35:43:bc:0a:
                    92:63:d5:bd:2d:5f:21:d5:7b:68:8f:f9:d7:3d:34:
                    7e:6f:11:66:c7:4a:52:6b:24:fb:36:6b:7e:58:e1:
                    e4:83:df:6a:5c:97:cd:7d:44:73:ff:f0:8d:00:55:
                    d5:6d:13:fa:7d:09:a0:1a:f3:60:f4:d0:5f:f3:99:
                    2e:27:82:43:4a:5e:f2:ec:7b:c1:dc:b7:ec:f2:26:
                    95:df:a7:cc:aa:29:d7:20:ae:9b:f4:6e:9b:6e:8c:
                    c9:3e:20:da:b0:89:22:e3:c2:fc:59:3e:ae:2d:a1:
                    f9:49:b4:15:1b:70:7e:8e:84:c1:83:a2:7b:7f:96:
                    49:3a:d5:72:29:87:98:5a:76:ab:68:38:d0:70:b7:
                    67:d0:f0:f5:53:7c:64:bd:69:fd:d5:7f:28:8e:15:
                    08:10:7c:b3:c2:35:ec:b6:40:ed:19:b4:d0:1d:9b:
                    cf:c7:95:02:97:42:bb:82:6a:fe:ab:c8:d8:37:1c:
                    09:31:38:81:85:ec:67:97:53:53:9d:77:21:c5:b0:
                    36:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:4C:0C:3A:79:AD:2B:83:F4:EC:0D:66:2C:E6:84:EB:4A:D9:13:9C
            X509v3 Authority Key Identifier:
                keyid:2E:39:06:01:9F:53:CE:C4:44:1C:D3:D2:1C:FF:37:C1:36:BF:24:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/3137372e38342e3133322e302f32322d3332203d3e203532393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:58:36:11:d0:f0:51:49:aa:49:b6:86:f7:89:5b:8a:14:6d:
         a0:8e:06:37:4d:9b:65:c3:3b:38:3c:e4:2e:06:87:e4:f0:83:
         c1:80:99:2a:fa:5c:ce:1c:d8:cf:0d:d9:0b:d1:d6:ec:c1:39:
         78:b2:80:34:cc:8e:de:b3:a8:51:3f:da:ea:af:12:f0:5c:5e:
         28:29:9a:c8:3c:2d:34:b6:1a:53:5e:78:ed:ef:1b:45:44:bc:
         9f:e9:44:98:bb:c9:c0:3e:be:fa:51:31:68:fc:d9:66:1d:cc:
         e1:1c:b9:24:52:5b:21:41:8a:ad:59:2f:63:34:f8:71:90:2c:
         67:70:4e:7e:7d:b7:34:af:65:58:75:07:24:fb:d3:af:d2:a4:
         25:f3:29:29:a2:c8:bf:2c:e4:1d:33:1f:2e:9d:96:61:fa:91:
         83:31:0f:13:3d:4a:51:79:54:e9:8a:7b:39:d1:3e:45:19:e2:
         f7:4a:97:14:c5:c0:41:c4:5b:23:68:f9:09:d6:68:99:d2:b0:
         18:34:21:5e:cb:70:60:3d:41:53:60:a0:60:9e:82:d0:7b:17:
         a1:26:b7:d9:a5:37:7c:7b:1d:2e:62:d5:9d:f2:f5:98:43:1c:
         29:e5:0a:9f:31:0a:0f:b9:bf:e5:e5:2d:ed:64:52:01:c1:9a:
         a3:ce:4b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:29:21 2026 by rpki-client