Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/3137372e38352e3136342e302f32322d3232203d3e203532373433.roa
File:                     3137372e38352e3136342e302f32322d3232203d3e203532373433.roa (raw, json)
Hash identifier:          mcWZkfXu9xnFjE1ymSk14x6r8LbE5gP7O/pxaEjtpfA=
Subject key identifier:   F2:B5:B5:C8:AA:40:CA:2F:1F:31:7C:77:D4:7A:12:9D:79:63:E5:05
Certificate issuer:       /CN=B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66
Certificate serial:       2F871015EF78D2BAE0D95B8F4C9BCC627C7C59B5
Authority key identifier: B8:5D:CA:CB:96:F5:5E:6D:2A:D1:68:6E:1E:DE:7B:55:55:4C:FE:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/3137372e38352e3136342e302f32322d3232203d3e203532373433.roa
Signing time:             Thu 05 Feb 2026 15:00:34 +0000
ROA not before:           Thu 05 Feb 2026 14:55:34 +0000
ROA not after:            Thu 04 Feb 2027 15:00:34 +0000
asID:                     52743
IP address blocks:        177.85.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.crl
                          rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:10:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:87:10:15:ef:78:d2:ba:e0:d9:5b:8f:4c:9b:cc:62:7c:7c:59:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66
        Validity
            Not Before: Feb  5 14:55:34 2026 GMT
            Not After : Feb  4 15:00:34 2027 GMT
        Subject: CN=F2B5B5C8AA40CA2F1F317C77D47A129D7963E505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:42:c5:37:10:d1:77:21:84:c1:80:aa:d6:2c:
                    60:53:5c:09:fc:7d:7b:6b:7d:b3:72:df:d6:6c:97:
                    51:e0:0e:d2:d1:4a:b0:23:b9:9e:a7:86:a7:d6:50:
                    89:20:44:7f:72:70:7e:4e:42:a4:b7:75:d3:93:42:
                    8e:73:eb:62:81:fe:91:ae:9f:ea:8f:2e:1c:ea:f8:
                    44:ab:95:91:66:09:63:07:15:cf:59:2b:ff:fa:ac:
                    10:14:20:06:96:fe:c2:d0:31:44:43:8e:34:4b:59:
                    7a:a5:31:7a:d5:b7:8d:4e:cb:92:5a:31:40:39:61:
                    fd:46:4b:e8:03:60:38:b6:93:89:92:9d:72:a3:f0:
                    d4:a9:f1:64:71:75:67:12:7a:d7:62:84:36:6d:2b:
                    9b:6e:9f:ca:b4:9f:67:32:35:d6:8b:a8:f7:be:a1:
                    85:97:4c:47:32:4a:2f:c5:a2:df:55:11:db:0b:91:
                    93:11:50:a1:c5:17:0c:fe:52:f2:42:76:c8:8d:22:
                    57:71:34:f6:a1:6c:0c:da:58:f0:a9:c6:3a:bc:ce:
                    28:19:e5:b6:5c:00:0c:d6:1f:70:96:02:7e:51:c4:
                    3e:9c:38:ad:e0:d6:08:3c:6c:61:37:33:c4:8e:d2:
                    a0:04:62:41:0d:91:9f:5f:5d:7e:37:32:35:19:82:
                    e7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B5:B5:C8:AA:40:CA:2F:1F:31:7C:77:D4:7A:12:9D:79:63:E5:05
            X509v3 Authority Key Identifier:
                keyid:B8:5D:CA:CB:96:F5:5E:6D:2A:D1:68:6E:1E:DE:7B:55:55:4C:FE:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/3137372e38352e3136342e302f32322d3232203d3e203532373433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:27:ba:b4:f2:e6:f0:7c:0e:93:11:52:02:01:83:af:96:66:
         fd:e1:2c:65:b1:ea:d8:99:62:9d:9d:95:2e:ce:e5:31:9d:b7:
         b7:85:4a:a6:8a:61:07:ec:3c:7b:39:27:49:a0:a3:df:67:a7:
         24:f9:a3:a1:f9:81:b5:16:fa:9f:8d:eb:a0:2c:78:e0:68:6e:
         eb:fa:18:f5:9f:63:af:03:01:cf:7e:95:8c:dc:db:7e:ef:4e:
         2c:2f:95:d3:70:f8:4b:51:b2:71:fd:bd:e5:33:33:a5:0b:32:
         85:bb:51:c1:40:fe:dc:73:06:a8:0e:34:dd:14:9c:2d:51:b0:
         97:5b:5d:30:fd:fa:f6:19:c0:dd:e7:f0:57:81:d8:2f:f7:ea:
         cb:df:47:66:b1:64:42:ab:f3:34:a5:6c:05:58:9f:23:bc:72:
         1f:c8:64:5a:b2:32:80:87:51:0b:8e:b5:e7:35:f9:ce:a3:fa:
         13:a8:7b:6e:eb:19:ab:40:c3:13:79:1e:2c:8c:d0:dd:f2:5f:
         02:82:df:4c:fd:ac:ea:9f:21:57:ce:75:ca:e0:3c:e4:48:56:
         a2:28:08:32:0b:9c:96:8b:bc:91:3d:22:18:f6:c0:e4:4a:f0:
         3c:fb:e1:d2:d8:35:60:4e:dc:a2:1f:7e:d7:f4:ec:2a:a7:b6:
         b6:95:de:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:37:23 2026 by rpki-client