Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3137372e33382e3138362e302f32342d3234203d3e203532373538.roa
File:                     3137372e33382e3138362e302f32342d3234203d3e203532373538.roa (raw, json)
Hash identifier:          kSGC3ce4ODwoHDk63jxpNj7jSLETYoRZ5aQjSrsMrNY=
Subject key identifier:   F3:2B:50:BE:A8:AA:4D:BC:CA:61:8C:EF:FF:AF:32:A2:73:9F:08:02
Certificate issuer:       /CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
Certificate serial:       02B43C0E7D4B0426FB7D7E35B647934A54DD1A69
Authority key identifier: B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3137372e33382e3138362e302f32342d3234203d3e203532373538.roa
Signing time:             Fri 06 Feb 2026 14:46:32 +0000
ROA not before:           Fri 06 Feb 2026 14:41:32 +0000
ROA not after:            Fri 05 Feb 2027 14:46:32 +0000
asID:                     52758
IP address blocks:        177.38.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.crl
                          rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:b4:3c:0e:7d:4b:04:26:fb:7d:7e:35:b6:47:93:4a:54:dd:1a:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
        Validity
            Not Before: Feb  6 14:41:32 2026 GMT
            Not After : Feb  5 14:46:32 2027 GMT
        Subject: CN=F32B50BEA8AA4DBCCA618CEFFFAF32A2739F0802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:84:87:fc:89:4f:5e:df:53:5c:1d:c6:c9:c0:
                    ff:23:de:f0:fb:ac:52:c3:65:7c:b7:e1:de:89:18:
                    4f:4f:63:96:f5:44:bd:a8:bd:51:f5:b5:8b:34:ff:
                    81:53:10:14:60:4c:89:fc:e2:09:26:dc:c0:3b:82:
                    fe:7d:01:76:1c:81:6b:ec:66:ba:b1:7d:64:4e:8a:
                    73:53:2b:b0:ed:e2:94:fd:99:91:36:65:f1:9a:c7:
                    03:e1:c9:40:73:74:52:07:58:8e:29:ae:7b:3b:32:
                    34:19:b4:5d:b9:53:76:6d:1b:ef:b5:7d:13:85:6a:
                    26:e0:eb:e7:2e:41:d2:da:d3:cc:46:50:13:7c:db:
                    1f:9f:6f:a3:dc:af:04:37:5d:28:50:34:05:62:d6:
                    d5:82:54:db:b8:9c:37:8a:f0:46:0b:2f:53:c7:1e:
                    f4:d9:c1:ca:ac:d0:21:80:4d:9b:c8:b9:25:b9:a8:
                    3c:80:0c:08:02:83:c7:39:00:3e:08:a1:45:af:dc:
                    3a:cf:fc:0f:09:46:e0:9e:79:9c:d9:a8:5a:7a:af:
                    a8:bd:6c:54:2f:ee:f8:49:80:f7:90:02:4d:13:1b:
                    3b:d8:24:13:e0:91:67:e7:98:b2:f8:52:03:c1:7c:
                    c1:fb:b0:c0:0b:fe:49:47:96:b3:72:cb:aa:53:c2:
                    e2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:2B:50:BE:A8:AA:4D:BC:CA:61:8C:EF:FF:AF:32:A2:73:9F:08:02
            X509v3 Authority Key Identifier:
                keyid:B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3137372e33382e3138362e302f32342d3234203d3e203532373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:45:96:ce:bc:42:e2:20:5a:7b:60:f0:ea:14:a9:6f:5f:d9:
         bb:22:cc:c1:4d:2e:3b:59:bf:a9:23:30:40:8e:50:95:68:97:
         ae:01:81:a2:03:be:1f:fa:aa:d5:56:92:5f:e5:6f:c9:c5:fa:
         7e:0b:3f:ff:fc:f4:44:cf:c0:4e:a3:bf:08:47:64:52:cd:c7:
         d1:83:b2:ab:e1:c0:4d:b0:0a:23:15:51:f6:30:d9:44:61:40:
         d1:c6:8e:fa:ed:24:89:23:83:9d:7d:13:d3:1d:8a:da:a4:6f:
         7b:43:d2:74:08:40:6b:2d:ba:e9:21:4b:c2:b0:bd:92:0f:b4:
         96:3c:ab:fb:37:d1:e7:df:0f:05:87:d7:d4:52:0b:25:9f:31:
         cf:49:11:ac:64:3e:b1:a4:09:be:90:dc:f1:20:a9:1f:02:47:
         00:73:81:12:2f:0b:84:7b:b2:96:af:42:60:30:c1:48:ba:06:
         a7:b2:33:2c:26:b6:61:1c:e5:cd:34:a4:8f:30:8a:ad:7f:bc:
         66:90:19:7e:12:71:76:b0:72:0e:0d:b7:23:97:68:c1:f8:08:
         eb:65:52:d7:ae:e0:ec:34:95:fa:83:14:26:b7:2d:e6:41:cd:
         89:65:c2:81:0f:be:34:68:18:ff:17:12:43:5d:4b:17:29:6f:
         57:03:2c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:17:44 2026 by rpki-client