Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/3137372e3132382e38382e302f32322d3234203d3e20323637313432.roa
File:                     3137372e3132382e38382e302f32322d3234203d3e20323637313432.roa (raw, json)
Hash identifier:          b4eUJyjlF0Q0XlY/Ooz3h6sd8Zu0IgW1LvZBt+QSDf8=
Subject key identifier:   67:F7:17:DE:B1:E3:FB:35:49:9E:0D:41:7F:44:2D:D4:50:36:86:E5
Certificate issuer:       /CN=AFFAF320E60531FB95C6C685842B56D1BDFCED45
Certificate serial:       72678657162A0BF2B076676863E21DE84DF71AB3
Authority key identifier: AF:FA:F3:20:E6:05:31:FB:95:C6:C6:85:84:2B:56:D1:BD:FC:ED:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFAF320E60531FB95C6C685842B56D1BDFCED45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/3137372e3132382e38382e302f32322d3234203d3e20323637313432.roa
Signing time:             Sun 11 Jan 2026 23:23:09 +0000
ROA not before:           Sun 11 Jan 2026 23:18:09 +0000
ROA not after:            Sun 10 Jan 2027 23:23:09 +0000
asID:                     267142
IP address blocks:        177.128.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.crl
                          rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFAF320E60531FB95C6C685842B56D1BDFCED45.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 03:45:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:67:86:57:16:2a:0b:f2:b0:76:67:68:63:e2:1d:e8:4d:f7:1a:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFFAF320E60531FB95C6C685842B56D1BDFCED45
        Validity
            Not Before: Jan 11 23:18:09 2026 GMT
            Not After : Jan 10 23:23:09 2027 GMT
        Subject: CN=67F717DEB1E3FB35499E0D417F442DD4503686E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b8:fd:30:83:6a:00:f8:cf:02:cb:93:0f:aa:
                    70:9a:9a:e0:9c:3d:93:bd:ef:39:f8:16:cd:39:95:
                    34:ef:8f:f7:ca:b6:71:71:ec:1d:f0:7c:38:20:e7:
                    c9:ed:60:ac:0b:a3:1d:e4:c4:ff:57:9d:9e:e2:23:
                    fd:69:22:90:8b:60:8d:99:65:d7:62:06:06:2e:f0:
                    17:3a:30:0e:7b:c8:7c:da:47:cd:b5:a1:64:8c:b9:
                    a2:b3:ae:a8:0e:45:f9:51:a5:5a:d6:e8:77:29:bc:
                    9d:da:1c:a1:b3:cb:85:42:76:f3:e9:f0:dc:7a:dd:
                    b6:7a:06:c4:8d:73:6b:81:79:d7:ae:ec:d5:64:d0:
                    09:29:da:b9:bf:5f:86:5d:c7:03:2a:82:d8:3c:ed:
                    54:96:ad:78:fc:ba:91:d8:34:c7:3a:fb:c9:90:0a:
                    97:b3:16:6b:89:28:df:f9:a6:eb:28:82:f0:95:52:
                    e2:ad:5e:c5:c5:dd:22:de:0a:90:1e:2e:f4:4a:3d:
                    9c:24:e1:62:c9:70:a1:b5:7b:f1:d6:86:17:50:98:
                    98:fe:46:df:99:5d:a2:fb:64:31:6f:59:f8:9f:0e:
                    f6:e7:19:fc:30:21:34:19:22:71:db:fe:a0:71:b0:
                    8c:5e:d5:6e:2a:e7:1b:19:be:81:17:68:47:cd:1e:
                    1a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F7:17:DE:B1:E3:FB:35:49:9E:0D:41:7F:44:2D:D4:50:36:86:E5
            X509v3 Authority Key Identifier:
                keyid:AF:FA:F3:20:E6:05:31:FB:95:C6:C6:85:84:2B:56:D1:BD:FC:ED:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFAF320E60531FB95C6C685842B56D1BDFCED45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/3137372e3132382e38382e302f32322d3234203d3e20323637313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:ab:f8:6d:22:dd:36:5f:ae:1a:a7:d3:d8:de:eb:a0:48:87:
         24:6e:2b:8a:46:fe:6b:f8:3a:80:00:ff:8b:df:b0:89:6d:8a:
         38:90:ed:ad:71:5f:53:ac:2e:31:de:3f:e2:58:29:ce:a0:53:
         f7:8c:20:b9:a5:45:54:f5:0d:0b:62:f7:89:09:fc:f9:9c:51:
         e4:7d:60:cf:2a:32:30:d5:7c:7b:0e:cf:bf:05:d0:87:d8:d5:
         09:cd:cf:72:4c:40:07:f0:42:73:b9:7a:57:20:11:ca:51:20:
         f3:7c:b2:20:8e:bb:47:ef:34:43:62:47:19:2c:39:f6:08:57:
         96:ac:f1:d5:c8:07:82:2f:5a:bf:f8:af:c8:d0:44:e6:f3:16:
         55:f4:7e:65:f6:3e:02:47:19:43:0e:07:17:f2:92:79:b8:00:
         62:7c:9d:b2:f6:49:f9:a2:31:12:fc:43:e9:ee:bb:fe:31:92:
         47:20:72:ae:00:ab:31:08:c3:64:ee:5a:ad:4a:09:01:1c:9a:
         33:45:3d:e0:66:f7:a0:c2:c6:56:0e:ef:4a:cf:fa:bf:5a:b3:
         63:45:f3:00:bd:52:d2:26:8a:fe:1e:78:cc:dc:c7:24:f0:78:
         c1:0d:b2:7b:4f:af:68:a8:ff:f6:39:06:7c:db:30:94:89:1a:
         a2:50:91:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:43:20 2026 by rpki-client