Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3137372e33382e3138382e302f32332d3234203d3e203532373538.roa
File:                     3137372e33382e3138382e302f32332d3234203d3e203532373538.roa (raw, json)
Hash identifier:          C68VwUz2iDtnFvJoVYlU+mPOj8YtSA6XcuCGIjEpExk=
Subject key identifier:   64:4C:AB:56:3D:58:8C:78:1C:9A:02:05:4E:DE:14:EC:94:D1:E3:11
Certificate issuer:       /CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
Certificate serial:       2B4CC0CC09757296C164B386853300B34D0C11A4
Authority key identifier: B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3137372e33382e3138382e302f32332d3234203d3e203532373538.roa
Signing time:             Fri 06 Feb 2026 14:46:32 +0000
ROA not before:           Fri 06 Feb 2026 14:41:32 +0000
ROA not after:            Fri 05 Feb 2027 14:46:32 +0000
asID:                     52758
IP address blocks:        177.38.188.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.crl
                          rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:4c:c0:cc:09:75:72:96:c1:64:b3:86:85:33:00:b3:4d:0c:11:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
        Validity
            Not Before: Feb  6 14:41:32 2026 GMT
            Not After : Feb  5 14:46:32 2027 GMT
        Subject: CN=644CAB563D588C781C9A02054EDE14EC94D1E311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0d:6f:f8:20:96:ba:85:fa:55:e7:2a:8c:52:
                    2d:0e:5e:cf:cf:69:7c:e9:aa:a0:b7:c4:d0:c4:e7:
                    ef:2e:ad:94:e0:ed:64:4a:c1:15:05:92:b4:99:ff:
                    fe:b6:4b:d0:40:35:bc:0e:39:f4:84:09:61:a1:22:
                    67:cc:ea:23:e1:57:69:54:38:87:f6:97:b8:48:e2:
                    0e:33:be:4a:be:d3:55:17:8e:49:53:3e:2a:2c:12:
                    b0:31:a5:d6:5e:53:db:4a:54:0f:c1:61:c5:2f:49:
                    e6:7d:9e:ce:cf:09:1d:05:82:5e:54:85:f5:30:c7:
                    d8:69:9d:3e:42:1c:fd:68:55:d5:a7:4b:1a:64:64:
                    68:a2:79:7e:0f:70:7c:bd:38:87:88:d0:39:1c:a1:
                    e6:e4:86:df:91:a9:07:03:cb:2c:f7:59:33:1c:98:
                    e8:37:6c:bb:21:01:3a:b3:8a:f2:b8:85:68:22:55:
                    8f:4b:60:17:56:dd:ff:aa:aa:aa:71:6f:4d:c7:af:
                    34:22:cb:f8:0e:ea:61:67:43:ed:eb:1d:9e:e4:57:
                    47:8d:9a:4f:2e:ea:a0:33:09:8c:be:2c:cc:92:30:
                    b5:23:17:3e:e4:fa:45:6b:a2:4b:fb:6e:b0:5a:cb:
                    14:08:4a:41:f8:35:86:65:c9:f6:ec:18:96:16:38:
                    b9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:4C:AB:56:3D:58:8C:78:1C:9A:02:05:4E:DE:14:EC:94:D1:E3:11
            X509v3 Authority Key Identifier:
                keyid:B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3137372e33382e3138382e302f32332d3234203d3e203532373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:27:80:f0:f8:6e:72:21:84:70:d2:e0:f3:f6:4f:d8:bb:99:
         bf:38:22:24:51:dc:a7:07:ca:64:b0:33:0b:63:51:88:43:7f:
         c1:48:60:1b:00:97:eb:e4:cc:55:39:6d:69:b6:6d:3f:13:63:
         07:92:6a:e1:75:f7:56:52:13:47:99:50:c9:fd:93:df:39:bc:
         69:9d:d3:92:24:e6:1b:b4:85:54:26:e0:1c:61:cc:6f:e8:ce:
         46:0d:2b:1c:42:01:02:51:69:63:05:d6:71:06:5d:1c:c5:10:
         e9:57:b7:60:0c:ef:2e:1b:6c:41:71:53:77:0f:67:16:55:9e:
         c4:05:85:42:90:60:7d:2b:00:dc:56:c7:1c:c9:45:c3:ae:62:
         a6:44:18:f4:e3:1d:3f:c0:aa:40:0d:3f:c9:dc:76:33:71:48:
         e4:aa:fb:85:7c:1d:ef:28:ab:87:e9:03:27:74:7a:0c:48:4f:
         31:d4:98:d0:6f:83:80:89:c3:d6:db:20:bb:a3:2e:80:4b:72:
         88:88:c2:e6:e7:2f:c7:2a:b6:be:dd:49:ba:ef:81:27:fe:e8:
         2f:cd:b5:41:ff:4f:74:b3:fe:07:06:01:7a:19:5c:78:27:a5:
         ae:2e:13:64:aa:5e:98:4b:1a:f7:81:67:b6:98:43:37:14:cb:
         35:a6:ae:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:17:48 2026 by rpki-client