Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DutVSU7o9b7W5WpVai2jabeFLi1sDK35sN3KNWaUw7ef/1/3137372e31302e37362e302f32322d3234203d3e20323633353932.roa
File:                     3137372e31302e37362e302f32322d3234203d3e20323633353932.roa (raw, json)
Hash identifier:          7UC8lgM/Pqb4R1Mg2sBTls2R6Nb1UWt2lcvg3v5RiFo=
Subject key identifier:   40:F7:D1:6B:46:72:B9:78:D3:01:5E:43:96:B2:36:66:82:B4:7B:34
Certificate issuer:       /CN=922FBF2159E6A28EFC093AE51E0BFF8F351A6C53
Certificate serial:       44600A7C5A7FA3257D1926A47ABF957044770E51
Authority key identifier: 92:2F:BF:21:59:E6:A2:8E:FC:09:3A:E5:1E:0B:FF:8F:35:1A:6C:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/922FBF2159E6A28EFC093AE51E0BFF8F351A6C53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DutVSU7o9b7W5WpVai2jabeFLi1sDK35sN3KNWaUw7ef/1/3137372e31302e37362e302f32322d3234203d3e20323633353932.roa
Signing time:             Thu 05 Feb 2026 11:14:17 +0000
ROA not before:           Thu 05 Feb 2026 11:09:17 +0000
ROA not after:            Thu 04 Feb 2027 11:14:17 +0000
asID:                     263592
IP address blocks:        177.10.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DutVSU7o9b7W5WpVai2jabeFLi1sDK35sN3KNWaUw7ef/1/922FBF2159E6A28EFC093AE51E0BFF8F351A6C53.crl
                          rsync://rpki-repo.registro.br/repo/DutVSU7o9b7W5WpVai2jabeFLi1sDK35sN3KNWaUw7ef/1/922FBF2159E6A28EFC093AE51E0BFF8F351A6C53.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/922FBF2159E6A28EFC093AE51E0BFF8F351A6C53.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:20:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:60:0a:7c:5a:7f:a3:25:7d:19:26:a4:7a:bf:95:70:44:77:0e:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=922FBF2159E6A28EFC093AE51E0BFF8F351A6C53
        Validity
            Not Before: Feb  5 11:09:17 2026 GMT
            Not After : Feb  4 11:14:17 2027 GMT
        Subject: CN=40F7D16B4672B978D3015E4396B2366682B47B34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ac:31:53:02:25:8f:9f:02:c6:71:f7:e5:a4:
                    d9:dc:fd:52:bc:9a:95:a5:37:c0:79:56:ef:ce:bb:
                    29:c0:92:15:74:1a:14:23:63:c9:b8:d2:95:21:69:
                    e9:61:5f:1b:ed:40:9f:65:cd:9d:32:89:6f:22:2d:
                    9b:f8:85:a2:3b:14:68:06:7b:ce:80:75:e7:64:ff:
                    a4:20:03:31:2b:70:80:d9:9b:ed:22:7d:df:d0:d2:
                    5f:f2:c1:21:17:d3:43:08:97:4a:d0:e3:68:96:a8:
                    d8:77:0f:22:74:de:94:d3:99:4c:0a:b9:c9:ea:ec:
                    6c:7d:c1:94:5a:21:e6:0d:d2:d6:25:62:f3:5b:03:
                    6d:e5:28:74:98:dc:46:b9:e0:2e:ec:b8:28:b2:6a:
                    df:db:10:ef:79:83:a9:f6:be:c1:7b:28:6b:04:bc:
                    4e:4c:88:8a:c3:e0:45:79:a8:55:f0:72:fe:d3:e6:
                    67:bd:f0:77:47:3f:16:9a:65:b2:7c:5b:1d:80:32:
                    c0:55:83:e4:fc:ec:fc:03:57:9b:db:66:2f:9c:c8:
                    09:9e:07:cb:c6:4a:cf:2d:df:cc:98:af:78:20:2c:
                    dd:6c:08:59:bd:00:0c:bc:4b:52:a7:8f:d3:b8:80:
                    47:ab:81:19:06:a5:c6:e1:55:7f:89:48:c3:f4:6d:
                    d2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:F7:D1:6B:46:72:B9:78:D3:01:5E:43:96:B2:36:66:82:B4:7B:34
            X509v3 Authority Key Identifier:
                keyid:92:2F:BF:21:59:E6:A2:8E:FC:09:3A:E5:1E:0B:FF:8F:35:1A:6C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DutVSU7o9b7W5WpVai2jabeFLi1sDK35sN3KNWaUw7ef/1/922FBF2159E6A28EFC093AE51E0BFF8F351A6C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/922FBF2159E6A28EFC093AE51E0BFF8F351A6C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DutVSU7o9b7W5WpVai2jabeFLi1sDK35sN3KNWaUw7ef/1/3137372e31302e37362e302f32322d3234203d3e20323633353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:82:9a:e6:b0:e9:da:c5:6c:22:9b:66:b3:cc:c7:5d:c6:c5:
         e5:47:e9:9b:47:e9:9a:4a:10:db:67:60:45:10:72:8a:2e:de:
         6b:c9:f9:e1:af:ce:48:11:d8:b1:95:cc:fe:df:56:0d:a1:7e:
         fe:7e:42:22:86:36:73:76:af:5e:39:52:56:cc:fa:a9:36:21:
         c0:ee:a6:5c:3f:96:f2:43:31:c0:f6:a1:08:b2:7c:8a:54:23:
         83:9c:d7:a9:e0:ec:92:06:b4:83:07:b1:e7:af:6c:02:13:a0:
         72:36:60:09:75:c0:ff:fc:04:6a:e7:3b:e9:50:a8:17:05:fc:
         0a:93:5f:83:62:92:13:4e:aa:8f:92:ae:a0:f3:fb:68:0a:da:
         83:e9:11:65:8d:55:29:aa:76:70:3b:4d:9f:59:bd:e5:ce:60:
         cb:35:78:24:18:c8:93:32:88:6d:19:80:52:34:05:06:f3:cb:
         f5:b6:76:ac:39:0d:63:0f:8c:4c:d1:52:be:2c:0c:27:57:26:
         a0:d4:5c:c3:97:83:ad:b5:cb:41:15:09:04:4f:c0:b2:75:10:
         a0:12:0e:b1:59:65:9a:23:ae:cd:d5:b8:0f:64:8b:2a:8b:df:
         14:96:04:34:ef:7b:0f:02:98:4a:f1:f1:e2:d7:f1:97:16:c0:
         14:ba:ea:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:08:00 2026 by rpki-client