Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/3137372e3132362e3232312e302f32342d3234203d3e20323633353232.roa
File:                     3137372e3132362e3232312e302f32342d3234203d3e20323633353232.roa (raw, json)
Hash identifier:          UWRt2BzMrSbpAeWtjHdl6M0enG04Q/Kuws7i0k1+F3g=
Subject key identifier:   20:EE:24:DE:98:D7:1C:91:8E:9C:C8:D8:F0:38:DD:68:E9:06:F3:3B
Certificate issuer:       /CN=ADE62729B7C2F675CBB616815CBA292A798BEB4B
Certificate serial:       74C92FC8D25F7AAAB3B44863D0687BA5D78896A9
Authority key identifier: AD:E6:27:29:B7:C2:F6:75:CB:B6:16:81:5C:BA:29:2A:79:8B:EB:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/3137372e3132362e3232312e302f32342d3234203d3e20323633353232.roa
Signing time:             Thu 05 Feb 2026 16:50:19 +0000
ROA not before:           Thu 05 Feb 2026 16:45:19 +0000
ROA not after:            Thu 04 Feb 2027 16:50:19 +0000
asID:                     263522
IP address blocks:        177.126.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.crl
                          rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 17:12:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:c9:2f:c8:d2:5f:7a:aa:b3:b4:48:63:d0:68:7b:a5:d7:88:96:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADE62729B7C2F675CBB616815CBA292A798BEB4B
        Validity
            Not Before: Feb  5 16:45:19 2026 GMT
            Not After : Feb  4 16:50:19 2027 GMT
        Subject: CN=20EE24DE98D71C918E9CC8D8F038DD68E906F33B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:38:2a:d2:d7:ba:bb:54:59:10:d3:ab:35:f0:
                    9d:71:00:c3:48:cd:97:35:a0:20:d0:7b:92:40:f5:
                    43:cf:12:9d:ef:0b:86:81:31:a7:cf:21:57:2f:ab:
                    8b:34:99:d4:1d:f9:7d:5e:dc:93:ef:4c:55:ee:70:
                    74:1e:bb:0f:40:50:e7:ac:55:6e:4a:b7:4a:52:2f:
                    37:07:d6:a3:c7:f3:94:72:b3:4d:06:5d:e8:4a:dd:
                    0b:65:ac:9d:03:7d:4d:22:05:f7:76:f3:46:78:f3:
                    79:a1:9d:58:39:be:57:8c:4f:e5:24:d2:ad:9e:a8:
                    7a:86:74:25:f2:ef:9b:30:0c:e8:87:7b:97:1c:a6:
                    9b:3b:f2:d3:a4:35:8d:f6:de:95:1e:85:c4:0b:78:
                    9a:67:cb:b4:c0:91:7e:9d:70:74:e1:d9:1d:34:aa:
                    75:22:a3:47:b6:85:93:5b:73:dd:cf:3b:ae:0f:08:
                    29:4b:c5:7d:81:95:7c:68:72:9c:39:8d:48:08:2f:
                    f5:47:77:73:10:eb:99:44:41:f5:d1:a7:c3:fe:52:
                    2e:37:f9:f8:c0:ed:c5:56:f8:b8:60:d6:07:54:f5:
                    42:dd:97:9f:67:f5:b1:aa:43:ef:c7:a3:82:e1:a3:
                    29:b9:ea:82:c1:27:8c:95:7e:1a:54:47:57:63:20:
                    12:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:EE:24:DE:98:D7:1C:91:8E:9C:C8:D8:F0:38:DD:68:E9:06:F3:3B
            X509v3 Authority Key Identifier:
                keyid:AD:E6:27:29:B7:C2:F6:75:CB:B6:16:81:5C:BA:29:2A:79:8B:EB:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/3137372e3132362e3232312e302f32342d3234203d3e20323633353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:7c:93:f5:bb:dd:65:48:01:28:fd:32:d1:eb:32:89:67:83:
         d4:fc:cd:c2:76:f4:07:c7:a7:4e:38:b4:3a:ca:6b:6d:3b:75:
         81:eb:06:ef:87:34:da:4c:76:fd:98:9c:ef:1b:d6:1a:45:a7:
         36:f9:15:3a:bd:6d:74:7f:15:b7:64:4b:56:3f:12:fc:33:d2:
         1d:2e:08:6a:35:64:99:19:3d:9e:a3:31:b8:52:b5:ba:ee:59:
         b8:11:9a:3f:36:e2:49:e1:92:6e:07:99:59:89:f6:42:e5:32:
         38:59:d9:15:27:e3:d1:06:b3:bc:75:66:27:c2:c4:c3:64:42:
         42:b0:ec:e9:b8:61:2b:2d:29:c7:28:83:d6:56:68:a9:1e:72:
         a7:5e:c7:b3:53:b5:3d:5e:c0:c6:cf:dc:a3:f1:3a:b1:f3:99:
         e6:28:38:c6:9a:38:f7:63:05:cd:a4:31:34:3f:03:56:69:1a:
         a6:a8:42:cc:c1:7a:97:63:0b:dd:a6:21:d4:d7:20:8b:51:a0:
         b2:05:59:25:eb:d0:69:20:f6:db:82:97:ee:87:54:66:47:a6:
         6d:8e:f7:2c:ef:7e:d9:cc:48:24:bf:91:86:f6:9f:f7:86:c2:
         cd:33:07:65:29:89:e9:0b:6f:ba:5f:3f:17:e2:97:1b:0e:57:
         da:20:e0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 01:36:03 2026 by rpki-client