Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3133312e3130302e3137322e302f32322d3232203d3e203232313737.roa
File:                     3133312e3130302e3137322e302f32322d3232203d3e203232313737.roa (raw, json)
Hash identifier:          TGrfzvEPH/KDtpDUD7qXJSWxp0NISABDPGuPeJAyIH4=
Subject key identifier:   F4:8A:C0:06:8B:26:FC:FD:A7:37:DF:5D:51:6C:A6:31:68:16:DC:ED
Certificate issuer:       /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial:       6CFA5388821D43FAA89C723C89F6EFB424633008
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3133312e3130302e3137322e302f32322d3232203d3e203232313737.roa
Signing time:             Thu 05 Feb 2026 05:30:06 +0000
ROA not before:           Thu 05 Feb 2026 05:25:06 +0000
ROA not after:            Thu 04 Feb 2027 05:30:06 +0000
asID:                     22177
IP address blocks:        131.100.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
                          rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 07:07:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:fa:53:88:82:1d:43:fa:a8:9c:72:3c:89:f6:ef:b4:24:63:30:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
        Validity
            Not Before: Feb  5 05:25:06 2026 GMT
            Not After : Feb  4 05:30:06 2027 GMT
        Subject: CN=F48AC0068B26FCFDA737DF5D516CA6316816DCED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:89:18:ff:95:c2:e3:b7:da:1e:e1:5d:55:a5:
                    ba:ae:8d:52:84:24:e1:4a:64:d4:2e:d6:e5:8d:32:
                    d7:33:3e:6d:4b:59:64:b0:b7:8a:c2:e0:80:91:7c:
                    d9:4a:f3:c6:4f:e1:07:b3:b6:68:d2:2d:cb:19:89:
                    c2:40:93:8f:91:21:92:c0:54:f7:15:71:fb:59:6a:
                    45:05:ed:07:18:31:78:84:39:2d:16:dd:c4:da:79:
                    e4:a8:e7:ca:e5:4b:f5:40:33:f4:70:e5:c4:71:e1:
                    71:79:82:32:8d:da:d2:aa:3e:52:19:9c:99:04:92:
                    4a:b2:6e:1a:31:a6:13:de:51:b6:36:93:8a:ce:a0:
                    f6:7a:56:cb:bd:cc:5d:be:f4:b8:05:bd:95:55:9c:
                    98:60:0c:b8:84:4d:85:06:42:59:89:e8:4c:3d:ab:
                    0e:46:fa:ef:40:52:ed:f1:c4:ad:6b:93:15:81:4d:
                    a9:fd:bd:b8:e0:03:52:2b:9a:b8:14:d5:39:f7:ff:
                    35:8a:3b:62:c1:35:55:68:e6:53:97:34:78:33:65:
                    07:46:c2:07:50:f1:5f:fc:d5:64:f1:21:90:c8:5f:
                    89:16:22:c9:1a:9c:86:a1:34:30:39:ee:7e:5f:75:
                    fc:0c:75:5c:67:d2:63:e0:a9:9d:c7:d2:85:f0:6c:
                    f1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:8A:C0:06:8B:26:FC:FD:A7:37:DF:5D:51:6C:A6:31:68:16:DC:ED
            X509v3 Authority Key Identifier:
                keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3133312e3130302e3137322e302f32322d3232203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:1b:79:c0:c4:60:e4:a1:13:fd:52:50:25:df:80:b8:a2:74:
         3c:d8:8c:8a:87:ce:74:1c:14:c7:b4:a6:b4:fd:88:dd:2e:6e:
         a0:ab:07:31:d1:a3:1f:dc:f0:1b:4f:31:e4:9b:80:46:e0:27:
         65:98:38:2f:23:0b:51:64:21:fc:bd:8a:ad:dc:52:d8:dd:8a:
         cd:18:1e:6c:d5:2f:90:91:73:65:a9:c9:f4:a4:85:6a:fc:0f:
         a5:44:0f:e1:a1:3d:d4:27:a0:90:3f:cd:67:19:4e:f7:2e:75:
         aa:2e:e8:79:d8:6d:ed:77:82:70:87:77:c3:c8:34:67:27:42:
         72:d2:4c:09:a3:04:82:a8:9f:5d:27:0c:8c:02:91:72:1d:5d:
         cc:dc:f5:71:fe:1a:69:f9:04:95:f2:bd:52:2d:56:74:5d:1d:
         18:30:49:6e:b2:c6:41:f2:a7:4d:10:80:b4:f3:6d:f8:c5:12:
         b6:97:7c:38:fd:c1:8e:eb:ab:a1:2b:a5:64:2f:0a:19:b2:11:
         e9:b5:f2:00:99:e7:6f:53:22:d1:40:35:3f:e0:67:4b:69:ea:
         39:a5:e8:3f:0b:87:1c:a5:69:1b:89:5d:66:8a:3e:d2:50:9b:
         d9:a2:04:07:78:38:95:2f:e2:c4:51:3a:a2:9a:b4:f0:2f:2f:
         24:a6:8a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 08:51:38 2026 by rpki-client