Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/3137372e3230302e3133362e302f32322d3332203d3e20323730393137.roa
File:                     3137372e3230302e3133362e302f32322d3332203d3e20323730393137.roa (raw, json)
Hash identifier:          l4EqwZflA7YDtCIdCXKIiu/mMA2yn1oiluYKckWQs68=
Subject key identifier:   91:F5:74:2C:E9:35:41:E7:D5:AB:25:19:D5:96:80:31:BA:C8:70:51
Certificate issuer:       /CN=F5A50CCC294040F07C9C735FE2A2A8031034D7F3
Certificate serial:       2FD31650EC2429965EB4C8E8CE6E5A43A22377E0
Authority key identifier: F5:A5:0C:CC:29:40:40:F0:7C:9C:73:5F:E2:A2:A8:03:10:34:D7:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A50CCC294040F07C9C735FE2A2A8031034D7F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/3137372e3230302e3133362e302f32322d3332203d3e20323730393137.roa
Signing time:             Sat 31 Jan 2026 13:42:19 +0000
ROA not before:           Sat 31 Jan 2026 13:37:19 +0000
ROA not after:            Sat 30 Jan 2027 13:42:19 +0000
asID:                     270917
IP address blocks:        177.200.136.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/F5A50CCC294040F07C9C735FE2A2A8031034D7F3.crl
                          rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/F5A50CCC294040F07C9C735FE2A2A8031034D7F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A50CCC294040F07C9C735FE2A2A8031034D7F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 10:16:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:d3:16:50:ec:24:29:96:5e:b4:c8:e8:ce:6e:5a:43:a2:23:77:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5A50CCC294040F07C9C735FE2A2A8031034D7F3
        Validity
            Not Before: Jan 31 13:37:19 2026 GMT
            Not After : Jan 30 13:42:19 2027 GMT
        Subject: CN=91F5742CE93541E7D5AB2519D5968031BAC87051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e5:06:35:e2:a3:7b:f9:d3:0c:38:70:7a:f8:
                    29:e7:e7:44:1d:78:55:24:c1:2b:85:2c:49:51:6d:
                    93:f6:6b:6e:09:fd:c3:32:e6:de:76:c5:81:35:55:
                    a1:a7:10:d2:1c:e4:00:d6:3b:7b:87:31:05:3a:14:
                    f3:77:84:b3:a1:74:5b:1c:b7:74:34:59:bd:f7:58:
                    bc:2d:0c:21:ba:bb:e0:33:5b:02:43:17:8e:16:42:
                    ce:d2:dc:a3:71:52:53:22:58:58:1e:17:b0:76:39:
                    12:08:b6:0d:9a:9c:1a:c8:6c:94:55:1d:47:9b:24:
                    f0:28:f6:2e:1a:53:4b:35:7e:70:b5:e7:95:22:a6:
                    b3:95:95:d2:3e:3b:a0:83:18:2f:5a:96:6b:38:6f:
                    88:c4:5e:4a:cf:f4:c9:61:e9:46:f2:84:a9:21:38:
                    6a:de:1f:5b:14:19:86:c8:70:7b:49:4b:4f:ed:72:
                    97:b4:73:ee:f3:cf:77:57:90:31:c0:32:c2:33:93:
                    55:a1:8b:a4:ae:84:4d:00:bd:04:83:76:27:1e:2b:
                    b0:c8:4b:0b:03:c8:81:3d:48:62:82:07:72:ac:7d:
                    04:17:3c:82:d8:4b:9e:55:7b:1b:d0:e6:32:93:0a:
                    80:89:57:0a:f6:cb:c9:61:af:a1:02:ae:71:c2:21:
                    82:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F5:74:2C:E9:35:41:E7:D5:AB:25:19:D5:96:80:31:BA:C8:70:51
            X509v3 Authority Key Identifier:
                keyid:F5:A5:0C:CC:29:40:40:F0:7C:9C:73:5F:E2:A2:A8:03:10:34:D7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/F5A50CCC294040F07C9C735FE2A2A8031034D7F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A50CCC294040F07C9C735FE2A2A8031034D7F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/3137372e3230302e3133362e302f32322d3332203d3e20323730393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:a9:a7:e1:67:db:e6:b5:83:57:22:a6:3b:ea:5f:77:32:c0:
         1a:24:09:da:f7:18:01:13:0c:97:11:33:9c:7c:06:8a:a4:08:
         19:79:a6:ac:e9:a4:28:7b:29:eb:65:d6:d8:c9:8b:ea:ce:47:
         fb:ee:4c:83:53:21:fe:fd:03:19:cc:31:32:d0:ae:5a:d9:9e:
         6c:50:94:62:73:75:4e:f3:7c:9f:34:b3:7e:ab:7e:69:f1:9e:
         8a:9c:25:e4:f7:d5:47:c1:a3:d6:0d:a8:82:45:90:33:c3:dc:
         9e:73:27:36:2f:16:3b:a2:a7:95:c2:3e:ca:38:e0:15:32:e7:
         2c:7f:37:e5:15:f2:b3:40:92:80:73:2b:f5:06:e6:7e:9e:81:
         15:b1:d0:f0:02:3e:d6:6f:de:af:1e:69:50:64:e1:8f:4b:aa:
         28:ed:e1:a0:9b:93:cc:9e:26:4b:31:a2:4f:99:0d:41:82:b5:
         f4:40:27:ff:a5:29:41:4d:fd:22:64:df:3c:b4:95:6c:42:40:
         37:6c:e0:f2:dd:d3:5c:80:6c:8a:39:b4:ce:58:5c:03:71:42:
         71:e9:cb:c6:21:ef:5a:26:11:b5:f8:13:ff:a2:69:6a:2e:38:
         8e:06:52:01:04:64:21:17:2b:e5:b5:1c:b1:78:7b:e7:c5:b2:
         d5:73:f3:5e
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUL9MWUOwkKZZetMjozm5aQ6Ijd+AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjVBNTBDQ0MyOTQwNDBGMDdDOUM3MzVGRTJBMkE4MDMx
MDM0RDdGMzAeFw0yNjAxMzExMzM3MTlaFw0yNzAxMzAxMzQyMTlaMDMxMTAvBgNV
BAMTKDkxRjU3NDJDRTkzNTQxRTdENUFCMjUxOUQ1OTY4MDMxQkFDODcwNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC85QY14qN7+dMMOHB6+Cnn50Qd
eFUkwSuFLElRbZP2a24J/cMy5t52xYE1VaGnENIc5ADWO3uHMQU6FPN3hLOhdFsc
t3Q0Wb33WLwtDCG6u+AzWwJDF44WQs7S3KNxUlMiWFgeF7B2ORIItg2anBrIbJRV
HUebJPAo9i4aU0s1fnC155UiprOVldI+O6CDGC9alms4b4jEXkrP9Mlh6UbyhKkh
OGreH1sUGYbIcHtJS0/tcpe0c+7zz3dXkDHAMsIzk1Whi6SuhE0AvQSDdiceK7DI
SwsDyIE9SGKCB3KsfQQXPILYS55VexvQ5jKTCoCJVwr2y8lhr6ECrnHCIYIRAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUkfV0LOk1QefVqyUZ1ZaAMbrIcFEwHwYDVR0j
BBgwFoAU9aUMzClAQPB8nHNf4qKoAxA01/MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRW10dldwVGluVlVvR3paY0Nud2dpMUp2aHBoeDRMdDJSanV6Wmg2SlNX
QlkvMC9GNUE1MENDQzI5NDA0MEYwN0M5QzczNUZFMkEyQTgwMzEwMzREN0YzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y1QTUwQ0NDMjk0MDQwRjA3
QzlDNzM1RkUyQTJBODAzMTAzNEQ3RjMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VtdHZXcFRpblZVb0d6WmNDbndnaTFKdmhwaHg0THQyUmp1elpoNkpTV0JZLzAv
MzEzNzM3MmUzMjMwMzAyZTMxMzMzNjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzczMDM5MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArHIiDANBgkqhkiG9w0BAQsFAAOCAQEAgqmn
4Wfb5rWDVyKmO+pfdzLAGiQJ2vcYARMMlxEznHwGiqQIGXmmrOmkKHsp62XW2MmL
6s5H++5Mg1Mh/v0DGcwxMtCuWtmebFCUYnN1TvN8nzSzfqt+afGeipwl5PfVR8Gj
1g2ogkWQM8PcnnMnNi8WO6KnlcI+yjjgFTLnLH835RXys0CSgHMr9Qbmfp6BFbHQ
8AI+1m/erx5pUGThj0uqKO3hoJuTzJ4mSzGiT5kNQYK19EAn/6UpQU39ImTfPLSV
bEJAN2zg8t3TXIBsijm0zlhcA3FCcenLxiHvWiYRtfgT/6Jpai44jgZSAQRkIRcr
5bUcsXh758Wy1XPzXg==
-----END CERTIFICATE-----
Generated at Thu Feb 19 19:03:50 2026 by rpki-client