Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/3137372e38352e3232352e302f32342d3234203d3e20323632363136.roa
File:                     3137372e38352e3232352e302f32342d3234203d3e20323632363136.roa (raw, json)
Hash identifier:          nVRp6SyneZeNOIIH1v4Nh6rddd0EJAfhNBw4DUMaK2M=
Subject key identifier:   DE:B2:D3:B4:36:13:C9:6C:54:14:2E:26:86:9D:BC:07:9E:B6:6B:02
Certificate issuer:       /CN=5374C98AB2B76D954AA6395E4C053F6BF4A93144
Certificate serial:       676553FD9A32EA5BF79B5D3FC4223C0200CF3DEF
Authority key identifier: 53:74:C9:8A:B2:B7:6D:95:4A:A6:39:5E:4C:05:3F:6B:F4:A9:31:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/3137372e38352e3232352e302f32342d3234203d3e20323632363136.roa
Signing time:             Thu 05 Feb 2026 05:29:19 +0000
ROA not before:           Thu 05 Feb 2026 05:24:19 +0000
ROA not after:            Thu 04 Feb 2027 05:29:19 +0000
asID:                     262616
IP address blocks:        177.85.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.crl
                          rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 21:25:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:65:53:fd:9a:32:ea:5b:f7:9b:5d:3f:c4:22:3c:02:00:cf:3d:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5374C98AB2B76D954AA6395E4C053F6BF4A93144
        Validity
            Not Before: Feb  5 05:24:19 2026 GMT
            Not After : Feb  4 05:29:19 2027 GMT
        Subject: CN=DEB2D3B43613C96C54142E26869DBC079EB66B02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d5:ca:22:56:6d:79:7b:3f:dd:fe:24:32:6f:
                    a0:bc:60:b7:8d:f2:8d:cc:b4:70:a4:58:49:f2:96:
                    a8:d1:10:31:6f:6d:5d:4a:ff:b4:c3:62:8a:28:0a:
                    73:fd:b1:42:72:25:42:77:7e:62:14:c8:49:70:5a:
                    94:d6:db:be:c9:87:c7:dc:30:62:3c:75:d2:ca:86:
                    8b:3b:0a:08:0f:ff:fb:64:f8:ef:85:63:f5:87:48:
                    04:66:91:c2:9d:82:a4:ee:c1:b8:84:a9:b6:c1:3c:
                    2c:71:b7:b8:bb:d4:21:60:42:c9:c4:35:7c:53:e4:
                    6b:d5:72:e4:d5:eb:01:16:0e:00:68:a0:96:f1:f1:
                    fc:89:0e:5c:59:6e:6c:5c:ed:f6:89:c1:61:a4:d3:
                    4d:a2:cc:76:87:eb:be:ac:00:d0:4e:b4:32:fc:0d:
                    92:ed:ba:d7:30:03:c9:07:3b:11:ef:35:d3:45:31:
                    d1:3f:91:dd:5a:9b:33:02:e0:f7:c7:b9:49:dd:b6:
                    82:f1:56:52:9f:e6:fc:ef:8a:35:84:7a:76:0a:70:
                    06:20:4f:ed:1a:33:c6:e4:29:65:6e:30:9e:11:7d:
                    f4:eb:51:05:5c:ef:81:0d:9f:a0:e6:5f:73:84:a7:
                    d7:76:8f:d4:3b:98:cd:e6:e9:da:1c:ca:c3:8f:2b:
                    5a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B2:D3:B4:36:13:C9:6C:54:14:2E:26:86:9D:BC:07:9E:B6:6B:02
            X509v3 Authority Key Identifier:
                keyid:53:74:C9:8A:B2:B7:6D:95:4A:A6:39:5E:4C:05:3F:6B:F4:A9:31:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/3137372e38352e3232352e302f32342d3234203d3e20323632363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:ee:15:b1:0a:47:77:a6:f3:22:c2:ff:69:9c:13:14:4a:79:
         82:9d:df:70:db:4b:cd:a7:fb:54:a0:3b:fb:5e:eb:18:a6:a5:
         44:38:19:a2:73:ba:e1:69:9f:85:b1:a9:29:c8:c0:bc:9a:43:
         ac:3b:db:6d:f4:40:55:d5:9d:f4:47:5d:0d:bd:94:63:87:6e:
         26:b4:c1:90:81:94:9c:53:9b:98:57:e8:c9:87:69:2b:e2:d5:
         a4:4c:ef:3d:dc:3d:42:d5:43:70:a9:cb:5c:e1:b6:1c:fb:09:
         92:e3:ff:ba:2b:29:27:11:aa:50:7e:4a:c1:52:2a:68:10:61:
         f3:33:8d:79:09:70:4a:4a:ea:7c:3c:22:13:5d:39:60:b5:bc:
         eb:95:4a:9c:4e:83:c3:31:b7:7d:64:58:7f:5c:ac:f5:74:23:
         ca:ef:02:86:31:17:39:db:37:bf:2f:d9:52:d5:ee:65:1e:53:
         37:20:81:64:7a:a7:1d:63:86:72:28:b9:f2:ea:ca:9f:66:8d:
         51:48:3b:f9:0b:a7:d3:bb:86:22:16:50:80:5c:9f:ad:9c:e2:
         c6:37:6b:05:e9:09:7c:98:33:c7:c2:22:ed:5f:54:f7:a5:57:
         e7:fc:e4:14:c4:0a:19:26:b1:60:83:37:0b:a6:64:1f:5f:76:
         3d:f0:d3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:20:30 2026 by rpki-client