Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/3137372e31302e3132302e302f32322d3234203d3e203533323336.roa
File:                     3137372e31302e3132302e302f32322d3234203d3e203533323336.roa (raw, json)
Hash identifier:          QfGZPys6gzQD0vqjumVY2poUp7smmBGChRcJ4Cv1/Fs=
Subject key identifier:   7F:19:58:61:BD:F0:B5:86:A7:62:12:60:71:16:3F:4C:52:C2:B0:17
Certificate issuer:       /CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
Certificate serial:       0524CF35C11D62417B2D599B26E119A25649B9A0
Authority key identifier: 17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/3137372e31302e3132302e302f32322d3234203d3e203533323336.roa
Signing time:             Wed 04 Feb 2026 20:00:01 +0000
ROA not before:           Wed 04 Feb 2026 19:55:01 +0000
ROA not after:            Wed 03 Feb 2027 20:00:01 +0000
asID:                     53236
IP address blocks:        177.10.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl
                          rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:24:cf:35:c1:1d:62:41:7b:2d:59:9b:26:e1:19:a2:56:49:b9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
        Validity
            Not Before: Feb  4 19:55:01 2026 GMT
            Not After : Feb  3 20:00:01 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:84:e5:d9:05:e5:d1:ca:3f:90:d1:70:d3:76:
                    13:90:e9:4a:63:79:8a:73:bd:88:8e:25:9f:82:42:
                    2f:a6:e8:aa:b3:bf:12:24:ad:a5:e7:5d:1f:c8:f6:
                    91:e8:d5:1f:4f:3b:f0:57:de:86:10:9c:e4:1c:db:
                    7f:47:3f:13:51:1a:5b:71:8b:76:3d:a8:3d:27:8c:
                    7b:7a:9d:e8:81:79:bd:ac:6a:9e:7f:ad:40:7a:ab:
                    77:af:a9:fc:79:7b:ff:5e:08:e0:1a:8d:15:1b:bc:
                    e6:54:7d:9b:e9:de:5a:60:d8:48:83:a3:a5:46:20:
                    da:46:d6:5c:a5:75:c4:7f:74:19:30:19:47:c4:de:
                    e8:2d:d7:74:4d:b1:35:7b:03:9c:11:76:e6:a7:18:
                    aa:7c:f4:77:ad:68:b2:1f:25:4c:28:7b:65:79:ce:
                    54:bb:43:92:8e:44:f1:e2:5a:cc:4e:ad:29:65:99:
                    c1:de:9b:44:d6:ca:7a:b5:c6:be:0b:a6:f2:44:40:
                    35:85:0b:b3:a8:d3:2b:a7:4a:d9:3a:67:47:a2:6c:
                    88:ad:ba:0c:90:16:6b:7d:5c:32:1d:0a:cd:cd:da:
                    1a:d0:d9:24:ad:de:10:64:cf:5f:96:58:71:54:03:
                    84:81:6c:ba:7b:82:b3:48:7e:c0:10:9c:24:83:5a:
                    39:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:19:58:61:BD:F0:B5:86:A7:62:12:60:71:16:3F:4C:52:C2:B0:17
            X509v3 Authority Key Identifier:
                keyid:17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/3137372e31302e3132302e302f32322d3234203d3e203533323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:c3:db:3c:a6:0c:e8:31:5e:76:19:51:54:51:3c:b6:9c:b7:
         a1:04:40:15:e4:c9:0d:0f:30:69:49:68:b2:ae:47:bf:72:71:
         dc:19:2f:77:8e:f9:43:80:85:c4:42:c5:92:fa:b8:d2:5c:74:
         29:c6:06:ac:bc:33:34:ac:06:04:6c:71:f5:3b:a7:3f:b2:3e:
         1a:d5:dc:83:3e:7c:f1:c5:65:a7:95:04:99:25:38:4d:80:a0:
         59:54:04:88:1b:24:cf:5a:a6:eb:da:c8:ea:ea:eb:25:4d:31:
         7b:73:eb:e9:ea:cd:5f:e6:8e:4f:45:cf:e1:19:38:11:ba:6a:
         04:f3:6d:43:42:42:9b:ed:e6:d5:04:09:24:67:d5:29:6c:d9:
         27:35:53:99:a6:c6:e3:82:ac:98:b2:3d:2f:c9:84:a9:9e:e7:
         e0:8f:57:59:e4:55:69:41:9e:c1:e3:a3:8f:8f:01:2f:89:79:
         33:2c:14:93:63:b3:c5:a1:f6:c0:c6:d0:30:7a:c1:93:f2:2e:
         76:22:83:5f:38:4e:00:3f:96:85:fc:dd:f2:c2:f9:1b:46:88:
         b9:89:b6:a8:7b:8d:a3:29:fd:1d:b0:6b:c3:e6:2c:30:da:60:
         1c:88:04:df:1a:20:f4:4c:d9:c4:08:62:c3:ff:91:16:5e:58:
         de:98:6b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 05:56:04 2026 by rpki-client