Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CiLRDdtgpLjBPbxqjYKbYewZSayYtRQPGn87PU36TpyS/0/3137372e3132382e38302e302f32312d3234203d3e20323632333635.roa
File:                     3137372e3132382e38302e302f32312d3234203d3e20323632333635.roa (raw, json)
Hash identifier:          Ic1g2FrGuzG8/girRqzfNacImOiEYbtWTkB/hM3fBVw=
Subject key identifier:   31:15:31:D2:F4:17:83:75:5A:39:A3:20:51:46:02:96:5C:97:EE:A6
Certificate issuer:       /CN=27099971A951F649FE90998E50362A7BF96EA7B1
Certificate serial:       292FB29A4E1898923786DF209FCB98176E671C61
Authority key identifier: 27:09:99:71:A9:51:F6:49:FE:90:99:8E:50:36:2A:7B:F9:6E:A7:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27099971A951F649FE90998E50362A7BF96EA7B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CiLRDdtgpLjBPbxqjYKbYewZSayYtRQPGn87PU36TpyS/0/3137372e3132382e38302e302f32312d3234203d3e20323632333635.roa
Signing time:             Tue 06 Jan 2026 12:45:46 +0000
ROA not before:           Tue 06 Jan 2026 12:40:46 +0000
ROA not after:            Tue 05 Jan 2027 12:45:46 +0000
asID:                     262365
IP address blocks:        177.128.80.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CiLRDdtgpLjBPbxqjYKbYewZSayYtRQPGn87PU36TpyS/0/27099971A951F649FE90998E50362A7BF96EA7B1.crl
                          rsync://rpki-repo.registro.br/repo/CiLRDdtgpLjBPbxqjYKbYewZSayYtRQPGn87PU36TpyS/0/27099971A951F649FE90998E50362A7BF96EA7B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27099971A951F649FE90998E50362A7BF96EA7B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:2f:b2:9a:4e:18:98:92:37:86:df:20:9f:cb:98:17:6e:67:1c:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27099971A951F649FE90998E50362A7BF96EA7B1
        Validity
            Not Before: Jan  6 12:40:46 2026 GMT
            Not After : Jan  5 12:45:46 2027 GMT
        Subject: CN=311531D2F41783755A39A320514602965C97EEA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:86:0f:49:39:7f:18:c4:a8:9d:4f:bd:a0:1f:
                    66:f8:fa:a6:bd:5f:15:4d:84:97:c8:53:c9:cf:0d:
                    6e:5f:0a:68:2f:b9:97:8c:d2:67:d6:0b:c9:09:2a:
                    aa:e3:24:3b:cf:5f:a9:27:21:e4:16:35:c3:03:0d:
                    63:db:0e:0e:a2:79:d6:a7:10:86:2c:dd:a9:c1:b4:
                    b1:b3:29:a7:de:3b:f9:3f:d9:bb:64:32:60:b2:c2:
                    12:87:f0:5d:f3:fe:a4:ac:eb:1d:20:0b:31:6d:c2:
                    e2:4d:4a:b4:c9:8f:7b:7d:2d:c7:de:51:bd:4d:67:
                    a2:41:5c:8b:53:1d:93:76:ad:96:c8:44:15:a9:ec:
                    ae:1f:f3:58:76:20:77:d1:b9:49:7a:38:f2:ce:10:
                    02:27:e7:7f:63:cb:60:f0:4e:9e:e2:fd:eb:dc:04:
                    74:b6:fb:11:34:e5:fe:48:9f:b9:07:4b:f1:65:b5:
                    75:c3:be:d6:49:d0:77:88:f8:fe:36:fe:89:88:f7:
                    31:5e:f4:7b:c0:36:a9:64:5e:63:db:50:7e:e7:70:
                    42:ce:e9:59:32:2b:df:8a:f5:6f:b1:8a:ac:b9:58:
                    91:99:01:7c:32:c5:be:c3:73:e7:00:20:b3:94:e9:
                    45:a4:d7:74:22:86:02:e7:7e:55:c5:ee:f2:8e:ef:
                    3b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:15:31:D2:F4:17:83:75:5A:39:A3:20:51:46:02:96:5C:97:EE:A6
            X509v3 Authority Key Identifier:
                keyid:27:09:99:71:A9:51:F6:49:FE:90:99:8E:50:36:2A:7B:F9:6E:A7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CiLRDdtgpLjBPbxqjYKbYewZSayYtRQPGn87PU36TpyS/0/27099971A951F649FE90998E50362A7BF96EA7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27099971A951F649FE90998E50362A7BF96EA7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CiLRDdtgpLjBPbxqjYKbYewZSayYtRQPGn87PU36TpyS/0/3137372e3132382e38302e302f32312d3234203d3e20323632333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3e:41:d5:93:20:95:53:7d:c0:92:b6:c5:39:2c:98:14:a7:df:
         c9:7b:3b:22:45:5a:43:94:94:21:36:92:07:88:e6:04:d6:73:
         fd:a9:45:88:f6:ee:88:8c:57:03:d4:3b:89:37:96:e4:34:58:
         91:e6:fa:1b:d0:56:47:39:90:5b:57:75:74:20:55:e9:7a:59:
         ea:97:79:44:c8:a7:54:09:3e:13:03:b9:9f:f9:ac:3c:55:bf:
         88:73:07:4b:28:8a:7a:cc:d4:b9:cb:06:62:cf:ef:ee:db:38:
         f5:8f:fb:47:c2:3a:f4:aa:9a:59:73:20:d7:c0:46:0b:97:20:
         80:07:d2:b0:2a:1d:8a:f9:75:e4:bf:fc:9e:0d:8b:2c:9e:06:
         6c:f8:62:58:fe:6e:84:a5:59:5f:0e:eb:36:5a:25:4b:8d:d5:
         9f:3d:82:c7:ee:49:91:ce:13:18:79:0f:f7:11:f7:9e:84:4e:
         4a:82:81:b9:22:b4:5c:8c:fe:a4:99:52:9d:82:e6:da:25:d5:
         f2:58:f7:e9:f8:23:bc:88:44:8e:63:f5:5d:a0:ec:4e:b7:b4:
         34:a5:1d:2d:d8:84:b7:55:a0:1e:9a:ba:3a:c2:23:b4:5d:38:
         76:1f:8c:aa:c2:e9:1b:a3:e8:3f:aa:78:c8:46:b4:ad:f7:17:
         31:79:74:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 21:45:37 2026 by rpki-client