Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/3137372e38372e34342e302f32322d3234203d3e203532353839.roa
File:                     3137372e38372e34342e302f32322d3234203d3e203532353839.roa (raw, json)
Hash identifier:          fkarykSua1rTGPifPokTqD46VNQqA/JsJz2JjBpFjO0=
Subject key identifier:   0C:E0:C7:F2:4A:D5:0A:D9:95:4C:11:9A:49:E7:C4:CF:0B:54:96:A0
Certificate issuer:       /CN=2B470E5C2388FD4EE27FD093A188DB51D57CAD3B
Certificate serial:       3AA65887C320820A267DB823173CB2DA2C23FDA6
Authority key identifier: 2B:47:0E:5C:23:88:FD:4E:E2:7F:D0:93:A1:88:DB:51:D5:7C:AD:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/3137372e38372e34342e302f32322d3234203d3e203532353839.roa
Signing time:             Thu 05 Feb 2026 13:05:43 +0000
ROA not before:           Thu 05 Feb 2026 13:00:43 +0000
ROA not after:            Thu 04 Feb 2027 13:05:43 +0000
asID:                     52589
IP address blocks:        177.87.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.crl
                          rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 03:51:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:a6:58:87:c3:20:82:0a:26:7d:b8:23:17:3c:b2:da:2c:23:fd:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B470E5C2388FD4EE27FD093A188DB51D57CAD3B
        Validity
            Not Before: Feb  5 13:00:43 2026 GMT
            Not After : Feb  4 13:05:43 2027 GMT
        Subject: CN=0CE0C7F24AD50AD9954C119A49E7C4CF0B5496A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d1:a2:2d:ec:3b:70:e3:02:e5:ca:30:8d:b5:
                    76:b5:38:f1:4d:dc:c1:63:de:17:27:77:fc:23:14:
                    e5:c6:f1:28:71:c2:4c:cd:ad:32:9e:11:a7:f2:da:
                    83:51:e4:20:4c:ee:c4:47:80:14:ba:53:57:0f:0a:
                    66:c0:7c:09:db:f4:de:9d:27:2d:19:9a:2f:c3:eb:
                    8b:15:1b:00:c4:2d:22:3b:8e:08:d5:30:ba:17:1b:
                    c5:b7:6a:9f:09:81:37:46:1b:6a:6b:a8:95:3a:53:
                    f1:a5:ec:a6:cc:b9:43:a2:01:40:23:f2:96:9d:f0:
                    8f:32:8f:60:dc:cc:56:4e:b2:fb:d9:df:34:62:dd:
                    43:68:bf:cc:20:be:8e:e9:fe:94:a1:d0:a3:17:ea:
                    39:29:b5:02:2d:b7:c3:81:5a:89:93:36:9c:28:d7:
                    d8:48:be:a2:5c:6b:04:e8:0c:41:4d:b6:b5:e6:50:
                    77:ff:09:b6:45:cf:10:41:c1:af:09:b4:ac:e2:89:
                    76:ad:cd:c4:37:8c:78:05:69:9f:82:f5:8f:61:f9:
                    2d:45:ed:55:6e:ef:00:d9:3f:76:1a:72:8a:a5:97:
                    61:51:ec:16:4a:2f:50:0a:35:32:0f:0f:a2:88:28:
                    96:93:b4:e5:f2:e2:76:16:29:69:72:ea:49:c2:43:
                    60:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:E0:C7:F2:4A:D5:0A:D9:95:4C:11:9A:49:E7:C4:CF:0B:54:96:A0
            X509v3 Authority Key Identifier:
                keyid:2B:47:0E:5C:23:88:FD:4E:E2:7F:D0:93:A1:88:DB:51:D5:7C:AD:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/3137372e38372e34342e302f32322d3234203d3e203532353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:55:35:91:da:43:6c:d2:f6:e9:b8:ce:44:d9:18:23:b1:88:
         99:9f:cd:6a:5e:27:64:e6:ac:c6:cd:0e:92:3e:43:37:f4:47:
         e1:a1:df:08:da:b9:69:11:19:a6:b0:09:d3:e6:9f:68:cf:5e:
         6a:76:60:3a:12:73:36:4a:bc:75:cb:b2:68:39:04:00:3d:47:
         d1:b8:e6:e3:9d:6e:c1:41:48:6e:f8:e2:d6:01:62:50:d4:db:
         cf:03:52:30:54:41:ca:89:58:68:e2:31:e4:ac:19:cb:04:4c:
         af:04:86:23:5f:b1:c7:ce:85:96:e8:16:fa:34:43:a0:80:7b:
         1a:bf:4e:4d:ef:67:90:fb:ec:1f:73:2b:12:86:1e:65:55:16:
         fd:93:b9:d5:f2:fc:13:bc:4a:91:a3:ef:7a:60:cf:df:cc:73:
         e2:f0:d4:26:d3:aa:79:d5:78:7d:fd:e4:c2:50:6c:26:b0:32:
         fa:5a:40:2f:f4:31:11:7c:55:3d:8f:b3:a5:ab:20:aa:76:28:
         24:2d:5c:eb:86:5b:25:d1:71:4f:3a:03:b6:a7:64:0f:d4:45:
         ec:4e:94:cc:fd:7e:84:ed:79:67:a0:3d:6b:52:ce:d6:94:b8:
         7b:d9:c9:8f:7f:b0:9b:39:00:89:dd:b6:94:a7:63:ec:03:d1:
         ed:ce:db:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:50:43 2026 by rpki-client