Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/3137372e33372e32392e302f32342d3234203d3e20323730353934.roa
File:                     3137372e33372e32392e302f32342d3234203d3e20323730353934.roa (raw, json)
Hash identifier:          PBQb5e/OUUbiEN8NcqtDwOt+y5xXqkyaH1k755ZhBRo=
Subject key identifier:   AF:FB:9F:B1:DE:4A:C6:6A:76:B8:B2:1F:B3:13:70:15:09:DD:7F:B8
Certificate issuer:       /CN=10BF39CEE477C23BE60BA999BA7B70171BFB2C10
Certificate serial:       6116D9B55A114292CF4AE9A334A6DA21D79B5AD0
Authority key identifier: 10:BF:39:CE:E4:77:C2:3B:E6:0B:A9:99:BA:7B:70:17:1B:FB:2C:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/3137372e33372e32392e302f32342d3234203d3e20323730353934.roa
Signing time:             Wed 04 Feb 2026 21:28:52 +0000
ROA not before:           Wed 04 Feb 2026 21:23:52 +0000
ROA not after:            Wed 03 Feb 2027 21:28:52 +0000
asID:                     270594
IP address blocks:        177.37.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.crl
                          rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:32:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:16:d9:b5:5a:11:42:92:cf:4a:e9:a3:34:a6:da:21:d7:9b:5a:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10BF39CEE477C23BE60BA999BA7B70171BFB2C10
        Validity
            Not Before: Feb  4 21:23:52 2026 GMT
            Not After : Feb  3 21:28:52 2027 GMT
        Subject: CN=AFFB9FB1DE4AC66A76B8B21FB313701509DD7FB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f7:89:30:37:ad:5d:ce:90:f0:00:c5:07:68:
                    44:f0:66:1b:33:66:6a:2d:ef:7d:d3:4a:cd:ae:fc:
                    b2:7d:1f:c4:95:cc:72:65:19:25:9b:aa:89:4c:d0:
                    78:fe:eb:7a:33:7b:a9:1c:89:8c:29:16:e7:d6:a5:
                    76:e6:27:28:9e:05:68:c1:8c:4c:30:b9:9e:11:c3:
                    f7:7c:ef:00:82:3d:96:fd:36:51:b3:de:0f:3c:ee:
                    5c:91:0c:88:d0:24:0d:3f:12:ba:b6:39:c0:40:69:
                    f8:f9:b0:8d:cd:a3:ba:74:5d:a8:9e:63:02:51:b1:
                    8b:22:ef:a4:8b:72:94:01:03:c3:f6:d8:27:65:fe:
                    23:45:13:9f:fa:59:fc:98:b9:1b:f5:0d:ad:e2:60:
                    74:14:19:9b:6c:10:6b:c9:3d:9a:27:29:2d:43:a5:
                    50:7a:3b:f3:e1:b0:51:91:df:c2:1f:bf:bf:9e:24:
                    e7:6e:8f:43:23:bc:af:ac:14:38:dd:38:c4:f1:c7:
                    d8:66:de:d5:9a:51:95:1b:90:04:4a:c7:65:51:11:
                    ab:10:ad:51:50:37:63:83:71:8c:65:9f:5b:be:54:
                    e4:df:35:9e:40:51:b2:70:b8:70:02:cb:08:91:aa:
                    9c:3f:9d:6b:4a:cb:9f:bb:ad:4d:fe:e3:e5:1f:22:
                    c0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:FB:9F:B1:DE:4A:C6:6A:76:B8:B2:1F:B3:13:70:15:09:DD:7F:B8
            X509v3 Authority Key Identifier:
                keyid:10:BF:39:CE:E4:77:C2:3B:E6:0B:A9:99:BA:7B:70:17:1B:FB:2C:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/3137372e33372e32392e302f32342d3234203d3e20323730353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:f5:a6:60:04:02:82:89:5a:48:bc:4b:47:ef:75:f0:78:0a:
         fe:9d:68:01:2c:fc:c8:cb:e9:b3:1a:fb:b2:4c:18:d6:52:e4:
         c3:f5:a1:73:c3:48:db:2a:83:0a:35:7d:21:55:19:33:14:b8:
         27:4b:b4:cb:c7:40:27:28:c9:9e:cd:81:b9:3b:2c:28:ee:5b:
         64:ec:99:b5:0d:aa:af:b5:54:c0:50:61:fd:ef:a6:a5:d9:42:
         82:79:37:a8:8d:ab:9a:64:68:59:d2:e0:69:c5:db:76:89:bb:
         c2:55:19:87:ee:10:08:a5:21:45:77:e2:79:d3:fb:09:4b:a6:
         28:a8:3c:aa:c4:85:d5:f3:ed:1a:8a:c9:f0:0b:40:72:af:11:
         c3:51:cd:d1:f7:ec:f4:91:27:81:df:a6:48:c8:50:eb:89:be:
         a2:a2:bb:fa:7e:eb:33:03:03:70:77:e3:4b:30:a4:37:98:4d:
         b4:0d:ba:f8:7b:09:72:2e:52:a2:f7:61:12:f4:d8:77:f0:35:
         09:3d:62:03:3e:75:3d:2b:3a:f5:ba:1d:87:04:f0:78:fa:f1:
         0b:51:05:be:7f:f0:94:59:fa:14:cc:e9:57:b9:a0:89:b0:f2:
         be:b2:a6:06:1d:e7:42:d9:dc:c7:68:c9:2c:f8:e4:f9:6b:12:
         b2:8d:52:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:27:45 2026 by rpki-client