Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3137372e33382e3138352e302f32342d3234203d3e203532373538.roa
File:                     3137372e33382e3138352e302f32342d3234203d3e203532373538.roa (raw, json)
Hash identifier:          pnZMp+/7XGxhcwUH27HR1lGtptneGu4orqWK7KISf7w=
Subject key identifier:   C4:CF:CF:91:28:34:97:70:BA:15:F1:9F:FD:B0:88:C5:3E:BB:1A:2F
Certificate issuer:       /CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
Certificate serial:       4EF5FAAC5D0594E2E4EEC97F2749D291D89CF198
Authority key identifier: B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3137372e33382e3138352e302f32342d3234203d3e203532373538.roa
Signing time:             Thu 12 Feb 2026 19:46:35 +0000
ROA not before:           Thu 12 Feb 2026 19:41:35 +0000
ROA not after:            Thu 11 Feb 2027 19:46:35 +0000
asID:                     52758
IP address blocks:        177.38.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.crl
                          rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:f5:fa:ac:5d:05:94:e2:e4:ee:c9:7f:27:49:d2:91:d8:9c:f1:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
        Validity
            Not Before: Feb 12 19:41:35 2026 GMT
            Not After : Feb 11 19:46:35 2027 GMT
        Subject: CN=C4CFCF9128349770BA15F19FFDB088C53EBB1A2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:19:a3:4b:5f:fe:5d:01:35:58:41:59:ad:ad:
                    e8:c9:5c:51:fc:e7:f8:5d:96:d6:f3:b0:66:bf:0c:
                    16:a7:6e:1d:68:77:81:19:6c:0c:ad:24:93:7f:b5:
                    c8:e4:bb:ef:e3:cc:d7:df:8c:40:74:f9:b4:6f:f5:
                    78:56:2d:3d:f4:df:fb:d5:81:09:91:7f:82:31:c3:
                    3a:c3:e9:2f:c4:32:4e:7a:3e:6b:b3:6a:b6:89:08:
                    b5:9a:0b:ad:c8:2b:e9:fd:34:0d:3e:8c:05:94:d0:
                    bb:5d:ae:c8:7c:f8:20:dd:98:26:e2:cc:5d:83:50:
                    06:92:98:fa:bf:64:ed:c6:fd:ae:79:c2:bd:5b:8d:
                    1b:70:8b:c4:02:12:a8:11:bc:c0:c3:73:b6:48:62:
                    87:b9:2d:58:83:24:a2:3c:46:8e:26:cf:1b:77:a4:
                    1f:72:48:e9:fc:ea:f7:68:0f:55:ab:57:67:7f:b9:
                    62:62:38:dc:03:2c:83:f3:0a:16:f6:35:35:40:37:
                    e3:52:19:56:6a:0a:b2:02:10:b1:4a:e1:10:bf:8b:
                    86:f6:9d:5c:bc:47:f0:a3:df:1c:22:b7:96:02:79:
                    18:2b:c0:0b:bb:67:d7:4f:b8:82:a6:52:d2:96:0c:
                    c8:25:40:f2:6a:7a:3f:94:ae:8f:61:57:f1:df:0f:
                    ed:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:CF:CF:91:28:34:97:70:BA:15:F1:9F:FD:B0:88:C5:3E:BB:1A:2F
            X509v3 Authority Key Identifier:
                keyid:B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3137372e33382e3138352e302f32342d3234203d3e203532373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:27:37:37:7e:50:ed:14:6e:82:21:20:3a:b1:53:cd:10:5e:
         50:58:ab:4a:5d:65:4c:be:6a:a6:d8:7e:fa:52:d4:0a:2c:f8:
         cd:7b:65:4b:dc:db:15:0a:14:1a:78:0f:e8:db:4a:f4:99:8c:
         bb:f4:f7:b3:c5:fa:81:41:12:1a:4d:3e:b1:70:eb:5b:11:58:
         2a:b9:56:2f:e2:f8:c6:d2:1c:dd:04:e1:20:a7:9b:cb:9a:6a:
         45:4d:a0:11:94:d1:ec:69:c7:6c:85:c6:7f:3b:47:a9:53:2a:
         fa:68:34:0d:b9:16:f9:91:8f:23:ee:85:fb:18:dc:83:f1:d1:
         9f:89:6c:03:bb:b5:a9:44:49:53:68:0c:55:1b:f3:1f:35:b4:
         e8:4f:8c:e6:31:46:38:70:77:aa:b8:c8:49:39:bb:f5:dd:ba:
         42:2f:a3:b4:eb:cf:a5:ba:94:f7:a7:6b:94:09:73:41:83:fe:
         2c:b1:4d:1e:b9:12:fb:cd:5b:d2:b5:93:a3:a0:43:0e:85:0e:
         4e:7e:3b:4c:9a:c6:1a:8e:86:12:a7:57:8f:97:de:38:5f:97:
         45:0d:79:26:e0:e1:64:90:b2:b5:54:19:71:5b:54:68:1b:06:
         a2:4b:4d:10:49:64:83:84:00:ed:a3:5f:17:a3:0f:f5:e2:74:
         96:e7:7d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:17:49 2026 by rpki-client