Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/3137372e3233342e3134342e302f32302d3234203d3e203533303535.roa
File:                     3137372e3233342e3134342e302f32302d3234203d3e203533303535.roa (raw, json)
Hash identifier:          HmORMUUzK3CCbD9F3ImCWmPnfZeD47Iy6KDvW31ohFE=
Subject key identifier:   CC:31:C5:F8:26:74:6E:AD:66:23:BB:0E:09:F0:B2:5F:DE:7A:3E:57
Certificate issuer:       /CN=A7ACFB4517623B0EA29CFE21AED99E020EC43239
Certificate serial:       15638C3617FB47C787BAB14871089EAF2FADE34D
Authority key identifier: A7:AC:FB:45:17:62:3B:0E:A2:9C:FE:21:AE:D9:9E:02:0E:C4:32:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/3137372e3233342e3134342e302f32302d3234203d3e203533303535.roa
Signing time:             Wed 04 Feb 2026 21:00:00 +0000
ROA not before:           Wed 04 Feb 2026 20:55:00 +0000
ROA not after:            Wed 03 Feb 2027 21:00:00 +0000
asID:                     53055
IP address blocks:        177.234.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.crl
                          rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 12:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:63:8c:36:17:fb:47:c7:87:ba:b1:48:71:08:9e:af:2f:ad:e3:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7ACFB4517623B0EA29CFE21AED99E020EC43239
        Validity
            Not Before: Feb  4 20:55:00 2026 GMT
            Not After : Feb  3 21:00:00 2027 GMT
        Subject: CN=CC31C5F826746EAD6623BB0E09F0B25FDE7A3E57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b8:c1:4a:37:96:a4:f8:cf:64:48:f8:d0:a3:
                    9e:eb:c2:bd:6f:70:47:7c:38:12:eb:4a:42:c2:11:
                    a7:b9:2a:6f:f8:e3:16:af:97:8a:d1:98:2c:dd:bd:
                    e4:73:77:5a:1b:ff:6a:d7:5b:57:84:f5:d1:80:40:
                    f9:39:23:fb:b1:a1:ed:20:a0:85:f4:83:37:8d:c7:
                    18:86:01:be:5b:49:4e:5b:79:c6:e8:4a:26:81:7d:
                    c6:19:02:40:90:74:ab:00:61:08:16:65:2a:82:95:
                    22:74:ac:00:ae:32:a3:31:e6:a5:cc:b4:cb:75:b1:
                    a0:bc:31:90:21:0b:44:bc:4a:68:c4:8b:5b:3c:ae:
                    ba:6c:59:3b:b6:0c:18:3c:e4:b5:20:81:23:b4:e8:
                    02:21:97:71:65:f7:b5:fd:70:42:7b:e6:3e:f3:94:
                    da:09:d2:e2:42:c1:f5:14:0c:6b:c7:03:47:d2:1e:
                    87:ce:5e:a9:a1:55:89:53:f1:4b:f9:4a:57:2c:e7:
                    24:4c:a4:7c:1e:b0:30:03:66:49:b1:4a:20:84:64:
                    29:aa:c7:af:f6:86:63:94:34:58:db:2e:4f:89:77:
                    88:4b:fe:5b:f2:dc:2c:1a:71:dc:07:45:cd:30:e1:
                    41:3a:8f:4a:83:5d:53:af:86:19:72:28:78:5b:7d:
                    4c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:31:C5:F8:26:74:6E:AD:66:23:BB:0E:09:F0:B2:5F:DE:7A:3E:57
            X509v3 Authority Key Identifier:
                keyid:A7:AC:FB:45:17:62:3B:0E:A2:9C:FE:21:AE:D9:9E:02:0E:C4:32:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/3137372e3233342e3134342e302f32302d3234203d3e203533303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.234.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         77:56:95:0d:9f:be:75:e7:3d:a0:46:bb:e6:3b:6a:2d:f7:33:
         19:d4:bf:62:64:6e:0f:f6:aa:80:d5:77:9d:fb:af:4d:79:df:
         a8:a5:dc:bf:f0:e6:91:c4:ca:34:78:c9:07:9e:07:d1:ed:91:
         98:72:42:3f:ca:82:5c:f9:7d:db:2f:3e:37:38:b8:25:89:46:
         f3:06:a3:ec:86:44:9e:96:f8:06:86:cc:f2:95:e3:28:50:f6:
         95:f5:01:23:e5:16:5e:dd:72:3b:10:7b:f7:d4:ab:ca:dc:fb:
         1b:a8:0b:eb:9d:9c:d9:da:0c:00:c2:b0:7f:5b:ae:fd:db:a2:
         09:e5:f2:44:05:b9:fe:09:10:f5:b1:e0:4f:ae:40:1d:29:f3:
         04:61:a1:a4:09:6b:1f:11:21:a8:dd:30:1b:25:9d:97:b1:14:
         ec:b9:0a:ad:f2:c0:26:a3:bb:4b:94:f3:1e:42:09:b3:eb:ec:
         3a:e5:f3:17:41:23:87:82:11:22:b9:7f:e1:cc:ea:59:10:2b:
         dc:81:64:15:00:3c:9d:d2:f8:07:78:25:9d:53:0b:5c:63:99:
         bf:ac:be:53:46:ba:ef:8d:46:9e:f3:1d:83:74:a9:50:74:bd:
         b1:da:d9:4b:fd:dc:1e:1b:1f:e4:b1:24:23:4d:5d:9c:76:0d:
         82:4c:78:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 12:55:05 2026 by rpki-client