Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/3137372e3232332e3133342e302f32332d3233203d3e20323731303031.roa
File:                     3137372e3232332e3133342e302f32332d3233203d3e20323731303031.roa (raw, json)
Hash identifier:          3ntzYsi1IOZza3qeVwwdkv0WKZbyr128hpJBpmu3I78=
Subject key identifier:   7C:AC:45:D3:14:50:50:72:A0:9C:40:E5:D7:91:92:68:E9:D5:F0:BA
Certificate issuer:       /CN=B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81
Certificate serial:       4A38E631F593C6EC77975A6ABD2F1B1D1F6E2F3E
Authority key identifier: B6:C5:FB:85:7E:69:A9:04:49:73:FA:30:62:AA:1D:6F:BF:5C:4A:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/3137372e3232332e3133342e302f32332d3233203d3e20323731303031.roa
Signing time:             Thu 05 Feb 2026 02:16:16 +0000
ROA not before:           Thu 05 Feb 2026 02:11:16 +0000
ROA not after:            Thu 04 Feb 2027 02:16:16 +0000
asID:                     271001
IP address blocks:        177.223.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.crl
                          rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:38:e6:31:f5:93:c6:ec:77:97:5a:6a:bd:2f:1b:1d:1f:6e:2f:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81
        Validity
            Not Before: Feb  5 02:11:16 2026 GMT
            Not After : Feb  4 02:16:16 2027 GMT
        Subject: CN=7CAC45D314505072A09C40E5D7919268E9D5F0BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ff:e5:eb:8e:1d:3c:d3:b0:56:8f:04:07:9d:
                    a3:63:23:8e:24:b6:96:b8:fd:43:97:d6:38:45:46:
                    ba:14:03:62:16:85:d7:d9:90:a8:49:71:92:6a:20:
                    c5:2e:e4:e8:75:04:ad:d7:a1:d3:a8:e5:0a:3f:14:
                    cc:31:9e:5d:47:ba:36:66:e0:ea:02:d0:ce:b0:d7:
                    b2:21:ee:ea:50:4e:af:5c:57:db:cd:49:9b:1a:d4:
                    c7:1e:b4:33:35:1d:f5:99:ce:bd:94:b8:dd:e3:44:
                    bf:fe:23:68:3a:04:f7:c1:68:1d:f4:46:90:28:44:
                    82:ba:50:b1:c9:de:f4:15:07:66:d3:af:93:46:06:
                    83:04:90:51:bb:ac:30:65:b9:15:c1:f3:49:11:21:
                    75:aa:67:74:b9:9e:70:46:b7:6b:c3:e6:6a:3b:7e:
                    55:21:d0:27:ee:c8:34:a0:92:d0:72:19:b1:2e:97:
                    f8:99:4a:4d:b0:9e:02:2b:ff:f8:ad:57:46:f6:bd:
                    b9:83:8b:e7:07:63:3c:4c:72:15:19:09:0e:76:cc:
                    30:e4:e0:fc:91:d4:0e:85:9f:51:9a:1e:b8:0c:33:
                    8b:10:b6:97:08:f3:fb:2c:f2:27:a0:7b:b1:09:e3:
                    1a:5e:21:2a:75:c6:9c:59:c5:dd:28:e9:59:e4:4d:
                    be:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:AC:45:D3:14:50:50:72:A0:9C:40:E5:D7:91:92:68:E9:D5:F0:BA
            X509v3 Authority Key Identifier:
                keyid:B6:C5:FB:85:7E:69:A9:04:49:73:FA:30:62:AA:1D:6F:BF:5C:4A:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/3137372e3232332e3133342e302f32332d3233203d3e20323731303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bd:58:fc:a5:35:64:91:25:37:7b:6d:bb:b5:72:00:04:0d:3d:
         c3:bb:5a:75:d2:84:45:0c:93:35:5d:c6:9e:45:3d:5a:ae:e6:
         a0:16:05:1f:3b:2f:14:b1:88:49:7e:5d:37:62:4b:1e:3a:06:
         b8:58:be:af:dd:26:45:2e:34:0d:f3:7f:9c:99:ea:d9:70:12:
         8a:ee:c3:44:c0:ab:fd:69:70:ff:bf:17:c8:a8:4f:95:9b:e9:
         64:94:54:70:c5:21:32:24:c6:40:99:87:78:87:11:03:9f:2f:
         2c:94:38:2c:09:86:f5:5c:bc:36:09:41:30:b0:e4:0c:db:21:
         da:c1:84:fc:92:53:af:c7:95:a9:36:d8:58:db:7a:8e:54:84:
         cb:67:07:62:7d:83:e3:34:f3:4e:14:fb:f0:69:33:43:7d:aa:
         e9:c8:ed:36:86:e5:01:4e:b5:c6:dc:42:95:14:36:0d:85:22:
         a3:0d:1a:f4:32:9e:ac:c2:68:86:30:19:c1:d2:a3:a0:d8:1d:
         c0:bc:ea:38:fa:f3:9e:11:31:35:3f:3f:91:e5:eb:c1:fd:36:
         ce:96:b5:c8:22:f2:af:83:c2:cc:8f:65:74:93:2b:3b:dc:7a:
         68:98:5b:0c:7b:1f:c2:3a:2a:45:7e:21:66:6e:b6:04:72:96:
         58:3f:e4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:34:37 2026 by rpki-client