Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/3137372e38352e302e302f32312d3234203d3e20323632353935.roa
File:                     3137372e38352e302e302f32312d3234203d3e20323632353935.roa (raw, json)
Hash identifier:          1FDPtnL/oiYQzGlPc4ijuZvBayQlDfq3fYmNZ7nmZrg=
Subject key identifier:   A4:D4:1F:FF:31:8C:5F:3D:CC:27:DE:F0:67:6C:DE:1E:A2:E8:5F:97
Certificate issuer:       /CN=4371007B3B7771C6CF4FBE4A71B3B946B841AD63
Certificate serial:       1357724E56B5B499AE8AB1C017D8C7FEC2F32778
Authority key identifier: 43:71:00:7B:3B:77:71:C6:CF:4F:BE:4A:71:B3:B9:46:B8:41:AD:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/3137372e38352e302e302f32312d3234203d3e20323632353935.roa
Signing time:             Wed 04 Feb 2026 20:00:00 +0000
ROA not before:           Wed 04 Feb 2026 19:55:00 +0000
ROA not after:            Wed 03 Feb 2027 20:00:00 +0000
asID:                     262595
IP address blocks:        177.85.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl
                          rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 05:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:57:72:4e:56:b5:b4:99:ae:8a:b1:c0:17:d8:c7:fe:c2:f3:27:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4371007B3B7771C6CF4FBE4A71B3B946B841AD63
        Validity
            Not Before: Feb  4 19:55:00 2026 GMT
            Not After : Feb  3 20:00:00 2027 GMT
        Subject: CN=A4D41FFF318C5F3DCC27DEF0676CDE1EA2E85F97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:78:cb:19:de:7f:f7:79:8c:70:d0:e8:4f:58:
                    de:c6:d8:49:12:62:a4:82:fe:75:9e:14:bc:c4:58:
                    b7:4d:0b:a7:ed:e5:2d:45:b7:3a:a4:ee:ce:7c:96:
                    47:b9:7a:62:97:61:c8:89:aa:e5:29:c9:58:95:8c:
                    2c:08:4e:f5:de:4d:81:d1:bc:7c:57:f8:35:11:5f:
                    73:a3:72:2b:85:3b:ad:76:c3:03:a2:bc:3b:be:db:
                    17:54:f2:97:a3:45:62:4d:eb:0e:66:4f:69:6e:2e:
                    f9:36:f6:f7:0b:cf:0d:68:f3:e4:3b:d5:0c:49:05:
                    e8:da:9b:8c:b4:87:5c:9e:e4:51:e1:4f:07:e6:51:
                    d8:e4:ab:67:06:5c:42:87:82:a5:65:64:47:49:78:
                    50:3f:16:ad:51:bd:bc:d4:a1:bb:8f:f8:c5:9b:d6:
                    23:49:ad:de:f6:e7:95:ef:d3:b0:f3:4a:38:41:08:
                    ed:ff:6a:94:ce:da:a7:76:7b:87:9b:6a:a6:20:c8:
                    c7:e7:f5:99:5f:00:a0:96:fd:b9:78:3a:b7:c6:73:
                    d0:19:09:ea:f5:51:48:08:00:51:84:c6:8b:29:98:
                    d0:c1:c7:42:f5:a4:69:5f:38:35:a4:3c:2a:9e:04:
                    3f:b8:45:64:f3:24:1f:66:0a:07:25:a0:29:3b:49:
                    85:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:D4:1F:FF:31:8C:5F:3D:CC:27:DE:F0:67:6C:DE:1E:A2:E8:5F:97
            X509v3 Authority Key Identifier:
                keyid:43:71:00:7B:3B:77:71:C6:CF:4F:BE:4A:71:B3:B9:46:B8:41:AD:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/3137372e38352e302e302f32312d3234203d3e20323632353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2b:c1:e2:5c:cf:90:1f:d9:c3:bd:31:89:42:3b:b5:5b:93:31:
         97:a6:fa:f4:1e:eb:ba:4d:9d:d7:47:2f:e4:1e:c0:7f:72:23:
         6a:5c:ca:78:56:fc:e1:9b:94:2c:92:56:e5:87:58:b3:59:8e:
         6d:29:ca:a3:cc:b9:aa:ba:90:0d:88:f5:cc:13:e9:30:70:b9:
         5d:a9:e6:c6:1b:2f:15:4c:e5:15:62:e0:6e:78:31:f5:d0:5a:
         b0:ff:ec:1d:54:fb:c9:56:92:31:44:07:5c:e7:ee:40:83:3b:
         0a:06:51:9e:52:3d:5d:c9:c1:28:24:b6:c8:11:f4:bf:cc:95:
         35:00:76:d9:ca:fd:70:7c:68:3c:fa:89:e0:8e:25:57:12:95:
         97:91:af:17:24:fb:5c:ea:16:71:dc:e9:22:b1:d6:0b:6e:b7:
         db:6e:fb:56:37:c8:32:90:c5:35:d9:56:ff:8e:40:b1:c5:51:
         96:74:0f:a7:5d:71:f6:2a:56:7a:6a:5c:ef:02:bf:23:49:84:
         43:ef:8a:25:10:fa:66:e2:29:b8:39:8e:ea:c5:23:18:04:7b:
         4c:8c:d7:ee:26:8e:1d:bd:6a:53:aa:ed:3c:ad:96:f7:1e:2e:
         23:ba:54:c9:15:a4:9e:3e:1f:30:ee:71:6d:af:98:40:10:8b:
         ab:3f:b1:0c
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUE1dyTla1tJmuirHAF9jH/sLzJ3gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDM3MTAwN0IzQjc3NzFDNkNGNEZCRTRBNzFCM0I5NDZC
ODQxQUQ2MzAeFw0yNjAyMDQxOTU1MDBaFw0yNzAyMDMyMDAwMDBaMDMxMTAvBgNV
BAMTKEE0RDQxRkZGMzE4QzVGM0RDQzI3REVGMDY3NkNERTFFQTJFODVGOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyeMsZ3n/3eYxw0OhPWN7G2EkS
YqSC/nWeFLzEWLdNC6ft5S1Ftzqk7s58lke5emKXYciJquUpyViVjCwITvXeTYHR
vHxX+DURX3OjciuFO612wwOivDu+2xdU8pejRWJN6w5mT2luLvk29vcLzw1o8+Q7
1QxJBejam4y0h1ye5FHhTwfmUdjkq2cGXEKHgqVlZEdJeFA/Fq1RvbzUobuP+MWb
1iNJrd7255Xv07DzSjhBCO3/apTO2qd2e4ebaqYgyMfn9ZlfAKCW/bl4OrfGc9AZ
Cer1UUgIAFGExospmNDBx0L1pGlfODWkPCqeBD+4RWTzJB9mCgcloCk7SYWtAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUpNQf/zGMXz3MJ97wZ2zeHqLoX5cwHwYDVR0j
BBgwFoAUQ3EAezt3ccbPT75KcbO5RrhBrWMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGVEY25nV1hudXF4R0s2b2ZVOVQxVjc1TnRvZERKckFFaE1EY1ZyemNo
NWcvMS80MzcxMDA3QjNCNzc3MUM2Q0Y0RkJFNEE3MUIzQjk0NkI4NDFBRDYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzNzEwMDdCM0I3NzcxQzZD
RjRGQkU0QTcxQjNCOTQ2Qjg0MUFENjMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RlRGNuZ1dYbnVxeEdLNm9mVTlUMVY3NU50b2RESnJBRWhNRGNWcnpjaDVnLzEv
MzEzNzM3MmUzODM1MmUzMDJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMyMzYzMjM1
MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEA7FVADANBgkqhkiG9w0BAQsFAAOCAQEAK8HiXM+QH9nD
vTGJQju1W5Mxl6b69B7ruk2d10cv5B7Af3IjalzKeFb84ZuULJJW5YdYs1mObSnK
o8y5qrqQDYj1zBPpMHC5XanmxhsvFUzlFWLgbngx9dBasP/sHVT7yVaSMUQHXOfu
QIM7CgZRnlI9XcnBKCS2yBH0v8yVNQB22cr9cHxoPPqJ4I4lVxKVl5GvFyT7XOoW
cdzpIrHWC2632277VjfIMpDFNdlW/45AscVRlnQPp11x9ipWempc7wK/I0mEQ++K
JRD6ZuIpuDmO6sUjGAR7TIzX7iaOHb1qU6rtPK2W9x4uI7pUyRWknj4fMO5xba+Y
QBCLqz+xDA==
-----END CERTIFICATE-----
Generated at Thu Feb 19 08:52:28 2026 by rpki-client