Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/3137372e3132342e3132342e302f32322d3234203d3e203532363034.roa
File:                     3137372e3132342e3132342e302f32322d3234203d3e203532363034.roa (raw, json)
Hash identifier:          BmiWfD2U9hz3Fgu/4XgGxy/Ldk3v6o+mLYNxopAZOkw=
Subject key identifier:   FF:91:28:FE:04:57:C5:34:0F:9E:38:28:C4:01:33:F3:A1:9A:29:F0
Certificate issuer:       /CN=7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5
Certificate serial:       64EEA405912CF8046FC68157C9ECFD9F7D021163
Authority key identifier: 7C:81:B1:F6:0B:10:4D:DE:21:C5:3A:DB:4E:ED:B1:CF:37:D9:E3:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/3137372e3132342e3132342e302f32322d3234203d3e203532363034.roa
Signing time:             Wed 04 Feb 2026 20:00:00 +0000
ROA not before:           Wed 04 Feb 2026 19:55:00 +0000
ROA not after:            Wed 03 Feb 2027 20:00:00 +0000
asID:                     52604
IP address blocks:        177.124.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.crl
                          rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 07:37:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:ee:a4:05:91:2c:f8:04:6f:c6:81:57:c9:ec:fd:9f:7d:02:11:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5
        Validity
            Not Before: Feb  4 19:55:00 2026 GMT
            Not After : Feb  3 20:00:00 2027 GMT
        Subject: CN=FF9128FE0457C5340F9E3828C40133F3A19A29F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:63:77:0f:dc:f1:d3:a4:b7:c8:a7:f1:16:c0:
                    06:fc:97:34:cb:11:12:f8:7c:6d:78:e1:47:bb:16:
                    05:6b:fc:9c:f3:4c:5b:aa:f1:09:00:79:38:95:06:
                    bf:ae:dd:94:fc:17:74:4c:ea:f3:4e:33:18:0e:65:
                    1b:5a:97:f9:3d:14:16:ea:65:c8:d3:f7:a0:86:d8:
                    76:99:fa:a9:4c:2b:b0:42:c3:27:99:05:80:28:60:
                    84:71:e0:9c:46:50:af:16:56:91:3a:80:82:04:aa:
                    db:c4:1b:7e:85:3d:e4:55:a7:52:89:6a:8b:b5:ae:
                    8a:b3:6a:24:08:5b:ab:86:f8:f5:10:be:15:31:e5:
                    50:0f:3c:fe:77:62:76:a8:95:0b:7a:ef:78:44:a5:
                    8d:04:4c:50:86:84:d1:2c:d2:54:e4:68:f2:41:97:
                    a8:0b:77:58:93:32:d7:5c:5a:62:59:37:6e:e5:6c:
                    f2:e7:17:c9:40:d2:45:63:70:bc:99:7e:8f:3d:44:
                    d6:1a:92:10:3c:1e:7d:53:a2:24:76:f3:c8:e4:68:
                    94:3a:e1:4f:89:c9:71:cc:d9:d5:05:79:da:58:b2:
                    ad:60:66:b9:00:f1:a8:c0:6a:0a:86:54:48:f5:08:
                    b3:56:78:d2:15:34:1a:10:13:98:04:8f:e2:bc:cd:
                    3a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:91:28:FE:04:57:C5:34:0F:9E:38:28:C4:01:33:F3:A1:9A:29:F0
            X509v3 Authority Key Identifier:
                keyid:7C:81:B1:F6:0B:10:4D:DE:21:C5:3A:DB:4E:ED:B1:CF:37:D9:E3:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/3137372e3132342e3132342e302f32322d3234203d3e203532363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:78:2b:a0:96:d7:47:cf:4b:9e:43:5d:45:d0:e5:c4:72:1a:
         2a:6c:69:ec:0e:43:65:c1:09:69:cd:af:78:8c:de:48:ba:ba:
         59:d1:14:7d:2e:33:52:ac:b8:92:b2:71:08:08:74:7b:96:35:
         6c:84:9a:9c:ca:61:b7:ed:3f:8e:9b:a3:a0:68:fa:ab:21:8a:
         ce:db:fd:3a:3c:0b:bf:9e:da:20:f7:49:8e:34:fb:0b:09:43:
         7b:cc:65:fb:d0:14:6c:4b:39:a2:98:1e:78:db:1f:06:9c:1d:
         e1:2b:72:17:ac:18:63:15:e3:73:bd:96:14:48:39:12:93:f7:
         72:3c:8e:28:b9:26:af:44:df:fc:85:8e:36:e0:f0:e6:1b:6c:
         99:b3:6a:b3:36:fe:c0:b8:fb:7a:b6:50:4d:db:b3:d3:fb:bb:
         a8:3c:82:3b:9c:89:52:32:d0:c5:24:e7:43:eb:66:b2:fc:b9:
         f7:56:6f:02:d7:b0:de:6f:dc:bb:3d:3d:1f:0f:92:85:32:5b:
         68:11:fc:33:4c:f8:ed:5c:54:9b:e9:ac:73:fd:c5:3c:e8:51:
         39:0b:1b:4f:7c:d3:3c:6f:33:1f:86:df:38:2f:0a:47:bc:7d:
         76:7d:8f:5a:11:d4:75:e7:b6:48:27:01:13:47:d5:3f:42:f1:
         2b:bb:4e:ca
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZO6kBZEs+ARvxoFXyez9n30CEWMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0M4MUIxRjYwQjEwNERERTIxQzUzQURCNEVFREIxQ0Yz
N0Q5RTNFNTAeFw0yNjAyMDQxOTU1MDBaFw0yNzAyMDMyMDAwMDBaMDMxMTAvBgNV
BAMTKEZGOTEyOEZFMDQ1N0M1MzQwRjlFMzgyOEM0MDEzM0YzQTE5QTI5RjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfY3cP3PHTpLfIp/EWwAb8lzTL
ERL4fG144Ue7FgVr/JzzTFuq8QkAeTiVBr+u3ZT8F3RM6vNOMxgOZRtal/k9FBbq
ZcjT96CG2HaZ+qlMK7BCwyeZBYAoYIRx4JxGUK8WVpE6gIIEqtvEG36FPeRVp1KJ
aou1roqzaiQIW6uG+PUQvhUx5VAPPP53YnaolQt673hEpY0ETFCGhNEs0lTkaPJB
l6gLd1iTMtdcWmJZN27lbPLnF8lA0kVjcLyZfo89RNYakhA8Hn1ToiR288jkaJQ6
4U+JyXHM2dUFedpYsq1gZrkA8ajAagqGVEj1CLNWeNIVNBoQE5gEj+K8zTpDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU/5Eo/gRXxTQPnjgoxAEz86GaKfAwHwYDVR0j
BBgwFoAUfIGx9gsQTd4hxTrbTu2xzzfZ4+UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUtEWVRFNk5UWnFKVFhFWGVkaXZMc0ZmZnVRa2g4M1luNWR0Ynh5bUto
SjgvMS83QzgxQjFGNjBCMTA0RERFMjFDNTNBREI0RUVEQjFDRjM3RDlFM0U1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDODFCMUY2MEIxMDREREUy
MUM1M0FEQjRFRURCMUNGMzdEOUUzRTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VLRFlURTZOVFpxSlRYRVhlZGl2THNGZmZ1UWtoODNZbjVkdGJ4eW1LaEo4LzEv
MzEzNzM3MmUzMTMyMzQyZTMxMzIzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM1
MzIzNjMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxfHwwDQYJKoZIhvcNAQELBQADggEBAIx4K6CW
10fPS55DXUXQ5cRyGipsaewOQ2XBCWnNr3iM3ki6ulnRFH0uM1KsuJKycQgIdHuW
NWyEmpzKYbftP46bo6Bo+qshis7b/To8C7+e2iD3SY40+wsJQ3vMZfvQFGxLOaKY
HnjbHwacHeErchesGGMV43O9lhRIORKT93I8jii5Jq9E3/yFjjbg8OYbbJmzarM2
/sC4+3q2UE3bs9P7u6g8gjuciVIy0MUk50PrZrL8ufdWbwLXsN5v3Ls9PR8PkoUy
W2gR/DNM+O1cVJvprHP9xTzoUTkLG0980zxvMx+G3zgvCke8fXZ9j1oR1HXntkgn
ARNH1T9C8Su7Tso=
-----END CERTIFICATE-----
Generated at Thu Feb 19 11:42:43 2026 by rpki-client