Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/3137372e3135332e302e302f31362d3332203d3e203237373135.roa
File:                     3137372e3135332e302e302f31362d3332203d3e203237373135.roa (raw, json)
Hash identifier:          5xyVsay+M76Zd/o3Ba3Bccl+z/dIh4J3otFbgtxVAN4=
Subject key identifier:   90:9A:6F:D7:3A:76:65:9D:BE:EC:09:6F:EC:A2:D9:CB:D1:9E:98:EF
Certificate issuer:       /CN=F5A757E49A3EE62BEE5F32163DBC154299BDFBA6
Certificate serial:       35C93CF32F00DA3E3CA5B1894E158498E4A9F9A8
Authority key identifier: F5:A7:57:E4:9A:3E:E6:2B:EE:5F:32:16:3D:BC:15:42:99:BD:FB:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/3137372e3135332e302e302f31362d3332203d3e203237373135.roa
Signing time:             Thu 05 Feb 2026 02:21:38 +0000
ROA not before:           Thu 05 Feb 2026 02:16:38 +0000
ROA not after:            Thu 04 Feb 2027 02:21:38 +0000
asID:                     27715
IP address blocks:        177.153.0.0/16 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.crl
                          rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 05:14:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:c9:3c:f3:2f:00:da:3e:3c:a5:b1:89:4e:15:84:98:e4:a9:f9:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5A757E49A3EE62BEE5F32163DBC154299BDFBA6
        Validity
            Not Before: Feb  5 02:16:38 2026 GMT
            Not After : Feb  4 02:21:38 2027 GMT
        Subject: CN=909A6FD73A76659DBEEC096FECA2D9CBD19E98EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:16:8e:36:c2:2d:c2:94:87:60:82:d0:da:3d:
                    16:29:39:41:a5:31:c4:53:35:de:34:e9:69:40:4b:
                    69:be:45:90:3e:b7:20:c2:ff:2d:80:8c:89:31:6d:
                    1d:28:fe:4f:8e:7a:71:4c:05:a8:b2:bc:51:8a:37:
                    28:fe:2d:1f:fb:5b:e3:48:d5:3e:64:70:e9:77:56:
                    e5:69:67:d8:3b:0a:4e:04:63:84:44:e2:b2:f9:23:
                    94:2f:1e:37:d5:66:90:11:58:f7:d6:44:e4:d9:78:
                    98:ef:75:39:e5:5b:b7:18:fa:d8:82:cd:2a:0d:9f:
                    3f:61:46:07:a9:09:7e:dc:08:e5:3e:e3:e5:5f:97:
                    95:48:ec:3f:35:13:14:3a:49:aa:76:a9:7d:c4:42:
                    55:b4:d5:b9:aa:cb:e6:8f:19:d5:da:15:a6:12:5c:
                    77:32:d2:62:4b:76:2f:aa:9e:14:f1:06:ee:40:e4:
                    8a:6c:2e:32:eb:ac:ab:70:9e:6c:2b:3e:6f:ec:a1:
                    b5:e5:0a:f0:65:29:cc:97:60:19:61:b7:8a:ed:e7:
                    c5:48:fa:23:b6:63:99:e4:7a:56:4c:0d:b9:bb:31:
                    f6:5d:69:d4:82:b2:1f:2a:a0:c0:83:9e:f1:8b:d0:
                    4b:97:5f:e2:6e:69:06:dd:4b:19:b4:a1:c9:df:b4:
                    56:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:9A:6F:D7:3A:76:65:9D:BE:EC:09:6F:EC:A2:D9:CB:D1:9E:98:EF
            X509v3 Authority Key Identifier:
                keyid:F5:A7:57:E4:9A:3E:E6:2B:EE:5F:32:16:3D:BC:15:42:99:BD:FB:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/3137372e3135332e302e302f31362d3332203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.153.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         52:35:35:fe:7e:37:b2:45:94:bc:87:85:7b:da:82:09:2c:65:
         7f:80:58:cd:a8:37:d4:3e:be:cb:47:4f:d8:95:3d:9e:81:db:
         4d:99:a3:ad:7f:e8:33:c9:d2:5d:1b:50:4d:0c:e8:dc:14:9c:
         ed:d1:f6:7f:12:21:14:93:fe:59:a7:f9:5e:b9:c8:c5:5b:b3:
         12:34:2d:fa:c7:e2:f8:b0:dc:f4:46:59:6a:73:ef:48:3e:ab:
         bb:c5:97:26:4e:3c:0c:21:df:e2:de:16:5c:e5:88:ea:9d:f0:
         17:f9:5a:2a:a0:ef:67:91:5a:23:c2:ef:9b:21:6b:cc:f8:c8:
         29:33:d1:41:0e:fa:77:a1:c5:56:cc:80:5d:4a:2d:3f:b4:c9:
         c4:9e:7b:4f:07:57:da:b9:db:2c:97:0e:57:d4:de:ba:b8:d7:
         bd:3b:89:42:18:38:dc:aa:f9:14:0e:fd:8d:fa:ae:4a:71:98:
         f6:07:34:39:22:6f:bf:cc:c7:0f:b0:59:ca:83:b7:9a:78:87:
         59:3a:c3:9c:dd:be:a9:fe:ae:e1:92:c7:a1:71:b3:97:40:d1:
         85:80:3c:d3:a3:46:d8:4d:b2:8a:37:c0:42:07:ad:03:91:0b:
         c0:39:1a:ae:94:a3:83:66:cf:6c:cb:35:b1:d0:a6:59:f9:8e:
         ad:db:64:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:29:09 2026 by rpki-client