Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BvnizDybwSScQTGAZYo5gKukuEvZKZtP36XPDDMpmqJ9/1/3137372e38362e36382e302f32322d3234203d3e203532353630.roa
File:                     3137372e38362e36382e302f32322d3234203d3e203532353630.roa (raw, json)
Hash identifier:          nnA6vgcXRzukgr0WAZtC7PHbYvuXy9sXgdTF1CsAuWU=
Subject key identifier:   29:8A:B7:51:89:61:9F:B9:11:B9:66:55:1D:EC:11:89:2E:AC:4A:5A
Certificate issuer:       /CN=122355C7CE6C4B651C393D8619E964AD6CFEB76A
Certificate serial:       75CDDAD8AF82A07047D3D9F144CC543A9CF68FC7
Authority key identifier: 12:23:55:C7:CE:6C:4B:65:1C:39:3D:86:19:E9:64:AD:6C:FE:B7:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/122355C7CE6C4B651C393D8619E964AD6CFEB76A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvnizDybwSScQTGAZYo5gKukuEvZKZtP36XPDDMpmqJ9/1/3137372e38362e36382e302f32322d3234203d3e203532353630.roa
Signing time:             Thu 05 Feb 2026 05:26:04 +0000
ROA not before:           Thu 05 Feb 2026 05:21:04 +0000
ROA not after:            Thu 04 Feb 2027 05:26:04 +0000
asID:                     52560
IP address blocks:        177.86.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BvnizDybwSScQTGAZYo5gKukuEvZKZtP36XPDDMpmqJ9/1/122355C7CE6C4B651C393D8619E964AD6CFEB76A.crl
                          rsync://rpki-repo.registro.br/repo/BvnizDybwSScQTGAZYo5gKukuEvZKZtP36XPDDMpmqJ9/1/122355C7CE6C4B651C393D8619E964AD6CFEB76A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/122355C7CE6C4B651C393D8619E964AD6CFEB76A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:21:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:cd:da:d8:af:82:a0:70:47:d3:d9:f1:44:cc:54:3a:9c:f6:8f:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122355C7CE6C4B651C393D8619E964AD6CFEB76A
        Validity
            Not Before: Feb  5 05:21:04 2026 GMT
            Not After : Feb  4 05:26:04 2027 GMT
        Subject: CN=298AB75189619FB911B966551DEC11892EAC4A5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1e:10:ec:be:15:d9:6e:45:8d:4a:04:1a:a0:
                    c5:8d:2f:1e:91:c4:ae:c3:2f:e2:11:b0:4d:fb:3b:
                    b8:ed:08:09:57:65:5f:3e:00:36:57:9a:13:f3:97:
                    bb:8e:0a:2c:10:80:9c:3e:fc:4a:25:ec:dc:77:04:
                    1a:4d:7d:a2:7e:d9:4d:94:3e:4a:5f:96:11:d1:92:
                    15:90:7f:cf:cd:18:43:e4:28:0f:38:e6:ce:db:af:
                    6b:71:0a:9b:df:8b:5e:5d:bb:26:79:f3:20:5a:0b:
                    d7:9c:8e:69:f4:12:a9:f2:7c:23:b8:3f:db:4d:67:
                    69:78:44:3f:26:f6:a2:46:24:a0:0f:d7:44:80:ce:
                    67:62:07:7f:2c:8d:c3:fa:d5:14:c7:35:26:27:d8:
                    74:da:00:10:ef:c4:b6:64:a9:94:20:81:97:18:73:
                    67:f3:e1:38:a5:af:0a:c0:df:d3:55:52:b7:79:97:
                    47:7e:5f:7a:d4:19:ff:0b:b4:1b:99:23:dd:00:19:
                    5c:6b:57:55:ba:ed:db:9a:d4:08:1d:fa:56:c5:09:
                    5b:74:31:7d:54:a7:26:34:9c:14:cb:d3:39:81:b0:
                    c6:4d:e2:5e:ee:8d:15:09:30:23:e6:a1:12:76:2d:
                    d9:3c:6f:bd:19:d6:ea:a6:a1:bc:61:22:28:9c:02:
                    77:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:8A:B7:51:89:61:9F:B9:11:B9:66:55:1D:EC:11:89:2E:AC:4A:5A
            X509v3 Authority Key Identifier:
                keyid:12:23:55:C7:CE:6C:4B:65:1C:39:3D:86:19:E9:64:AD:6C:FE:B7:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvnizDybwSScQTGAZYo5gKukuEvZKZtP36XPDDMpmqJ9/1/122355C7CE6C4B651C393D8619E964AD6CFEB76A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/122355C7CE6C4B651C393D8619E964AD6CFEB76A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvnizDybwSScQTGAZYo5gKukuEvZKZtP36XPDDMpmqJ9/1/3137372e38362e36382e302f32322d3234203d3e203532353630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:5f:7f:80:02:be:da:54:4d:a6:55:05:a0:ed:19:e6:9a:ab:
         33:09:62:44:c6:e0:b6:33:61:c0:82:04:b2:cb:db:36:4e:da:
         97:e3:26:49:98:b4:d6:5d:2d:3a:08:9b:64:51:dd:17:db:9d:
         a4:33:01:30:1c:e5:0a:b3:ec:2d:26:43:8a:3b:c9:7f:63:44:
         2a:08:08:14:1a:8b:d8:0a:d2:e3:69:73:f8:9c:9a:7c:d3:14:
         30:6f:64:a8:99:08:95:7c:96:61:94:3c:6f:d1:08:03:9d:f1:
         28:fa:42:d1:97:0a:8f:72:f0:f9:81:a4:88:ed:c5:75:90:e6:
         ea:53:f6:18:0f:b7:68:27:01:a2:87:3f:b2:d3:11:f8:61:c1:
         bb:66:ce:cd:07:37:2f:68:65:67:2c:97:76:60:91:db:e7:9a:
         29:e1:fc:e0:d9:30:d9:da:35:be:3d:21:8a:15:37:d6:12:fa:
         0e:2a:9f:74:ee:35:7c:03:fc:47:63:bc:ba:ed:ab:ae:3e:61:
         05:1a:f0:ec:0c:6a:13:35:a3:76:48:f3:2d:ff:0d:75:ce:49:
         66:d7:a7:ca:49:34:60:47:66:52:ae:8c:fa:78:96:2e:b6:9d:
         0f:c9:2f:9d:da:da:54:51:2c:cc:18:76:ec:5a:2a:0a:b3:37:
         1f:a3:57:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:39:34 2026 by rpki-client