Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/1/3137372e34342e3231362e302f32322d3234203d3e20323633353636.roa
File:                     3137372e34342e3231362e302f32322d3234203d3e20323633353636.roa (raw, json)
Hash identifier:          Nm329s5Fv3XsXYtWVbGNiFwG59MF3nmHML/oTmx0z2Y=
Subject key identifier:   C1:92:20:29:20:FE:BB:8C:24:2E:AD:85:C5:12:5D:8B:D7:66:9A:3D
Certificate issuer:       /CN=0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2
Certificate serial:       5366B9AB715F5382D6427ED0F35AF8E8CA59225C
Authority key identifier: 0F:73:AF:CF:07:9B:05:DD:A5:5B:9F:90:9C:C9:30:63:B7:D1:C1:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/1/3137372e34342e3231362e302f32322d3234203d3e20323633353636.roa
Signing time:             Thu 05 Feb 2026 03:23:03 +0000
ROA not before:           Thu 05 Feb 2026 03:18:03 +0000
ROA not after:            Thu 04 Feb 2027 03:23:03 +0000
asID:                     263566
IP address blocks:        177.44.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/1/0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.crl
                          rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/1/0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 11:27:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:66:b9:ab:71:5f:53:82:d6:42:7e:d0:f3:5a:f8:e8:ca:59:22:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2
        Validity
            Not Before: Feb  5 03:18:03 2026 GMT
            Not After : Feb  4 03:23:03 2027 GMT
        Subject: CN=C192202920FEBB8C242EAD85C5125D8BD7669A3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9d:82:da:52:f4:6d:ff:77:57:62:93:b7:c8:
                    90:34:46:e7:5f:a4:d0:76:9e:dd:3b:d1:af:ec:6b:
                    90:2d:50:a8:21:9e:02:1d:34:97:fd:1f:41:00:55:
                    69:72:50:c0:8d:c4:31:d8:e6:30:1c:fc:d6:ce:df:
                    56:97:81:c5:b2:65:e9:05:92:78:00:be:c6:e3:65:
                    3d:80:c9:4d:4b:23:19:72:63:8c:12:ab:1f:d3:ae:
                    8b:c9:3b:c5:56:32:7d:dd:55:d4:d1:d2:26:0a:34:
                    9a:2b:da:dc:de:0e:20:b0:43:6e:d1:74:6f:7d:90:
                    55:8d:3a:d6:ef:24:1a:1f:5c:19:44:1e:3c:a6:26:
                    c5:2e:fc:fc:48:25:39:83:85:28:58:8c:e7:c5:9c:
                    98:44:a5:18:0a:a1:47:66:e8:25:1a:04:c6:64:6a:
                    ed:7c:71:ee:a3:d9:93:5e:f4:7b:f7:3c:57:de:c4:
                    16:d4:e7:d0:81:fc:e9:70:f7:a2:be:d0:32:4d:c5:
                    7a:6f:05:74:7e:69:fc:7b:5d:47:35:3a:ff:fe:b7:
                    cd:0f:64:df:2f:5e:f5:a5:2b:cd:3f:48:21:cd:5d:
                    ee:01:72:f1:ca:bb:20:82:3c:9c:70:98:4c:60:0b:
                    04:68:71:17:50:18:15:fe:51:99:2f:ca:41:df:3b:
                    ae:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:92:20:29:20:FE:BB:8C:24:2E:AD:85:C5:12:5D:8B:D7:66:9A:3D
            X509v3 Authority Key Identifier:
                keyid:0F:73:AF:CF:07:9B:05:DD:A5:5B:9F:90:9C:C9:30:63:B7:D1:C1:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/1/0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/1/3137372e34342e3231362e302f32322d3234203d3e20323633353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:b9:a0:2f:38:ab:be:74:84:e4:82:41:87:ab:d4:c7:d3:ca:
         9e:7a:d3:a3:98:3c:d8:03:d8:ff:c8:0d:e8:49:cd:e3:d5:80:
         47:d7:e6:e0:91:ef:4b:6f:e0:a3:b3:38:05:0e:c1:4b:72:37:
         16:90:56:40:a9:b8:ee:62:80:84:25:02:aa:a8:cb:4c:54:c1:
         d0:06:2e:85:b3:72:9f:1a:45:db:28:e0:72:76:15:8e:c1:a6:
         52:ca:40:5c:59:54:da:aa:ed:00:e2:ea:5d:c6:7e:db:ee:67:
         a8:07:b9:36:64:b6:18:90:91:05:30:b0:8a:d4:ed:c8:84:e0:
         15:bb:78:81:14:27:d0:0a:78:25:5a:e5:09:70:99:bf:cf:76:
         3d:e4:45:22:bd:c4:21:aa:ec:b1:8f:97:4f:19:39:5e:f7:f8:
         16:f1:04:08:19:ec:25:7c:f3:a5:3a:a8:2b:3f:9b:b6:97:ce:
         c8:69:38:c3:b4:42:54:a1:0c:e7:2a:46:67:3e:7f:53:7d:14:
         5b:16:5c:61:a3:24:81:bf:49:f0:f7:13:60:8b:08:4d:81:a2:
         1e:14:97:76:06:34:ad:38:04:da:24:64:b0:44:73:1d:6b:a0:
         fc:5f:cd:5f:3f:3b:b9:2f:d7:5d:40:34:79:16:db:94:62:94:
         4b:0e:29:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:53:59 2026 by rpki-client