Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HabmY9bBBucx4XSrvZMKMH3Z1iWNWoquqibYBbnqamM6/1/3137372e33372e34382e302f32302d3234203d3e203532383933.roa
File:                     3137372e33372e34382e302f32302d3234203d3e203532383933.roa (raw, json)
Hash identifier:          95gaQvagJdXFa7KrwI369rVRi8viAQ1faMAGTUydBLY=
Subject key identifier:   B3:43:14:2A:7E:8E:EF:07:20:9D:9A:21:DA:30:99:1E:7E:A8:F4:64
Certificate issuer:       /CN=EB8194E305061AD55048DBA774FC26D3BF2E65E3
Certificate serial:       37B7CC7061F4612E42059B772BB5564F99074520
Authority key identifier: EB:81:94:E3:05:06:1A:D5:50:48:DB:A7:74:FC:26:D3:BF:2E:65:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB8194E305061AD55048DBA774FC26D3BF2E65E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HabmY9bBBucx4XSrvZMKMH3Z1iWNWoquqibYBbnqamM6/1/3137372e33372e34382e302f32302d3234203d3e203532383933.roa
Signing time:             Wed 04 Feb 2026 19:00:01 +0000
ROA not before:           Wed 04 Feb 2026 18:55:01 +0000
ROA not after:            Wed 03 Feb 2027 19:00:01 +0000
asID:                     52893
IP address blocks:        177.37.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HabmY9bBBucx4XSrvZMKMH3Z1iWNWoquqibYBbnqamM6/1/EB8194E305061AD55048DBA774FC26D3BF2E65E3.crl
                          rsync://rpki-repo.registro.br/repo/HabmY9bBBucx4XSrvZMKMH3Z1iWNWoquqibYBbnqamM6/1/EB8194E305061AD55048DBA774FC26D3BF2E65E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB8194E305061AD55048DBA774FC26D3BF2E65E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 11:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:b7:cc:70:61:f4:61:2e:42:05:9b:77:2b:b5:56:4f:99:07:45:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB8194E305061AD55048DBA774FC26D3BF2E65E3
        Validity
            Not Before: Feb  4 18:55:01 2026 GMT
            Not After : Feb  3 19:00:01 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ed:7b:f3:0f:02:d0:0e:48:95:3d:f0:a8:b3:
                    61:56:f3:2e:fc:15:f1:7c:0d:ce:8e:c4:94:3a:db:
                    f2:bb:25:bf:3c:e1:93:42:1b:57:b4:29:13:df:1e:
                    08:c7:56:fd:36:30:ae:c2:15:93:a6:c4:7f:97:bc:
                    cc:80:a4:4d:72:af:b1:36:00:b7:e2:04:45:7f:bb:
                    70:4a:ef:af:48:e8:47:b2:a4:bf:dc:7a:a8:e0:4d:
                    6b:0c:f7:fc:60:ca:ae:45:05:98:d4:bd:36:39:b3:
                    7d:93:c2:0f:2f:d5:43:b8:27:ab:3b:6b:6a:68:7f:
                    74:ee:32:fc:8a:e9:02:32:6a:94:7b:23:5d:65:44:
                    39:18:f3:b7:75:d4:72:64:e2:36:3a:51:f6:65:db:
                    20:e9:4a:81:32:b2:c4:fc:6e:53:39:9c:ec:61:5e:
                    d3:a1:b9:4a:cb:b3:93:14:94:ed:21:b8:5c:3f:1a:
                    79:ad:e3:2c:9c:5e:dc:ef:31:1e:ca:a9:63:a9:c5:
                    7c:2c:a5:23:d3:a1:16:74:fb:c1:3f:04:eb:cf:5c:
                    46:44:f7:70:8a:b7:c6:fa:64:38:0e:d6:4b:aa:aa:
                    6e:07:02:3a:b4:77:f0:d2:53:e6:e7:61:df:a3:e1:
                    0f:85:3c:4f:63:3d:63:a0:9b:f1:89:99:4f:b7:65:
                    2f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:43:14:2A:7E:8E:EF:07:20:9D:9A:21:DA:30:99:1E:7E:A8:F4:64
            X509v3 Authority Key Identifier:
                keyid:EB:81:94:E3:05:06:1A:D5:50:48:DB:A7:74:FC:26:D3:BF:2E:65:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HabmY9bBBucx4XSrvZMKMH3Z1iWNWoquqibYBbnqamM6/1/EB8194E305061AD55048DBA774FC26D3BF2E65E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB8194E305061AD55048DBA774FC26D3BF2E65E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HabmY9bBBucx4XSrvZMKMH3Z1iWNWoquqibYBbnqamM6/1/3137372e33372e34382e302f32302d3234203d3e203532383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         db:79:42:7d:a5:7b:b6:83:4f:e2:15:d1:46:56:48:2e:f9:d7:
         d6:03:2c:dd:b3:5f:da:2b:fa:24:e8:dc:b7:3d:ab:50:43:52:
         e2:80:85:83:55:43:78:c0:76:99:b1:04:5e:f2:60:79:7b:b4:
         6a:70:e6:07:8f:fe:0c:cd:8a:d6:31:80:48:e9:53:80:ae:77:
         13:b2:7f:4b:bc:fa:66:c5:08:0d:b5:7c:03:51:82:66:0e:f7:
         2f:bc:8f:51:00:73:80:54:07:86:69:ed:8d:dd:f9:00:13:94:
         98:8b:8d:d2:83:a6:00:e0:0c:f7:a9:b1:ed:5b:2b:f5:3b:b9:
         52:7c:05:c8:68:f0:63:67:12:a2:13:6a:eb:77:0e:fa:63:23:
         00:ae:f2:51:97:aa:b1:43:d2:c7:98:4a:1c:8f:12:00:cd:9c:
         ba:26:27:57:2d:fe:55:45:cc:2d:12:ef:7e:af:00:b4:3b:b6:
         3d:4d:85:42:95:49:6e:5f:52:0a:ea:57:97:49:14:35:3d:83:
         9d:4f:c5:e5:2b:cb:44:0c:4d:71:46:73:da:32:be:ff:63:ff:
         70:b6:af:00:1d:14:10:0d:d4:94:74:ff:e3:34:77:95:3c:36:
         23:60:c9:58:47:7d:79:17:be:50:b8:30:94:8c:9d:05:9d:51:
         0d:a6:27:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:34:58 2026 by rpki-client