Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/3137372e33372e32382e302f32332d3233203d3e20323730353934.roa
File:                     3137372e33372e32382e302f32332d3233203d3e20323730353934.roa (raw, json)
Hash identifier:          yJBbVfe9rEyP8d18l9HjcKvzz/9G0VCg0YgCxV2Qs9Q=
Subject key identifier:   4D:E9:01:8C:61:BD:1C:2C:A1:24:49:E8:92:F7:2B:35:76:92:61:7A
Certificate issuer:       /CN=10BF39CEE477C23BE60BA999BA7B70171BFB2C10
Certificate serial:       69FE6094D15241FCAE6808B74603A93858B7EEEA
Authority key identifier: 10:BF:39:CE:E4:77:C2:3B:E6:0B:A9:99:BA:7B:70:17:1B:FB:2C:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/3137372e33372e32382e302f32332d3233203d3e20323730353934.roa
Signing time:             Wed 04 Feb 2026 21:28:52 +0000
ROA not before:           Wed 04 Feb 2026 21:23:52 +0000
ROA not after:            Wed 03 Feb 2027 21:28:52 +0000
asID:                     270594
IP address blocks:        177.37.28.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.crl
                          rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:32:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:fe:60:94:d1:52:41:fc:ae:68:08:b7:46:03:a9:38:58:b7:ee:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10BF39CEE477C23BE60BA999BA7B70171BFB2C10
        Validity
            Not Before: Feb  4 21:23:52 2026 GMT
            Not After : Feb  3 21:28:52 2027 GMT
        Subject: CN=4DE9018C61BD1C2CA12449E892F72B357692617A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fb:49:a4:01:c1:a7:ba:13:18:b7:dd:68:c9:
                    7f:3a:55:5c:b9:65:c0:4a:06:eb:8f:e9:79:c1:b7:
                    68:da:6a:f9:bb:5a:46:4c:f2:1c:6a:8d:85:0d:b7:
                    ff:52:72:c6:55:41:8e:a9:8c:eb:9d:5a:9e:45:81:
                    55:b4:9e:d8:37:0d:6c:eb:cc:80:3f:69:95:24:0d:
                    18:f7:d3:0b:e2:bf:bc:3a:a4:b6:bc:a6:ac:62:f7:
                    6f:d1:dc:31:c9:e3:ed:9d:14:0a:e6:e4:ce:2d:be:
                    60:17:e4:04:9d:57:e6:8f:2f:fd:ba:67:ee:b0:cb:
                    98:69:c4:74:6a:cd:14:b7:31:fa:24:88:ba:c7:85:
                    f3:23:0c:78:1c:89:33:7e:6b:56:1d:f3:85:06:77:
                    2a:ed:a9:3c:31:b5:53:11:bb:3e:6a:c6:30:51:b7:
                    be:c3:c9:ca:30:ae:a4:79:49:be:d5:6b:41:dd:4e:
                    aa:57:c1:5e:f7:cf:45:a4:d2:2d:45:d6:f7:de:a7:
                    15:12:15:6c:0d:92:53:94:ff:87:d9:e8:dd:97:6d:
                    92:75:79:39:cd:56:49:d1:c4:45:2a:10:7e:2b:f2:
                    de:2e:f7:2f:c6:d5:a9:b8:f8:f7:b1:bd:19:07:d9:
                    da:9f:2a:77:ad:0a:25:87:f4:08:a3:5d:96:e6:01:
                    96:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E9:01:8C:61:BD:1C:2C:A1:24:49:E8:92:F7:2B:35:76:92:61:7A
            X509v3 Authority Key Identifier:
                keyid:10:BF:39:CE:E4:77:C2:3B:E6:0B:A9:99:BA:7B:70:17:1B:FB:2C:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/3137372e33372e32382e302f32332d3233203d3e20323730353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:1b:15:d4:54:87:5f:a5:ed:7a:78:29:25:5e:2d:59:17:40:
         10:b6:f1:49:d2:72:25:58:fb:e8:23:96:97:5b:3b:57:d1:5e:
         c1:be:13:58:ce:4a:a7:a2:6b:e8:f1:3a:3f:84:b6:7a:13:50:
         75:05:34:8f:59:0e:74:15:44:e4:e5:7f:82:27:ec:24:db:91:
         ce:de:f3:88:af:d1:3b:45:a8:77:68:ed:af:53:a9:58:88:ba:
         d5:43:b5:69:3a:32:90:10:50:49:11:00:82:32:c3:41:80:bd:
         1e:12:f6:64:1b:d8:40:e9:01:d5:64:c3:e2:56:35:80:8c:f9:
         4f:52:e5:85:da:1e:62:1e:ef:b4:86:79:4c:79:32:a9:94:a8:
         7d:b1:e1:1f:43:48:46:82:fc:53:84:4b:aa:1c:62:ef:e1:24:
         03:01:8c:b6:1c:e4:fe:2f:22:e6:ed:d0:7c:c9:d2:a8:fa:aa:
         70:f4:11:8f:cf:18:a2:30:1f:b7:3b:e3:92:21:bd:8b:f6:8a:
         51:26:d6:60:b2:53:a2:de:49:ec:38:bb:2d:cc:e6:3e:36:7f:
         31:a2:9f:93:d8:c3:10:6f:3e:ff:f0:fb:5d:c4:44:c2:ab:92:
         aa:72:18:5c:b2:77:27:7c:23:3c:21:fa:aa:2a:2f:4e:09:51:
         e9:ca:cc:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:53:16 2026 by rpki-client