Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5QsErFU4sNtG6iJxhZyx1dj42s1hkcUCG8sgMk6swPM/1/3137372e31312e36342e302f32312d3234203d3e20323632383732.roa
File:                     3137372e31312e36342e302f32312d3234203d3e20323632383732.roa (raw, json)
Hash identifier:          HOZpwTwPxqzY8KuGHIV6SGePCXoVJeR1xMhiFGU0Y8M=
Subject key identifier:   A9:34:62:D3:0B:FE:84:2F:78:C1:BA:1F:52:B0:35:5C:7A:7E:AA:CC
Certificate issuer:       /CN=87B55EA11CC3C5018472A7EF4105A798D366CC11
Certificate serial:       67CA1F89BCDE45AD5EC2C83D966C9BC17E2049E5
Authority key identifier: 87:B5:5E:A1:1C:C3:C5:01:84:72:A7:EF:41:05:A7:98:D3:66:CC:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87B55EA11CC3C5018472A7EF4105A798D366CC11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5QsErFU4sNtG6iJxhZyx1dj42s1hkcUCG8sgMk6swPM/1/3137372e31312e36342e302f32312d3234203d3e20323632383732.roa
Signing time:             Thu 05 Feb 2026 16:08:35 +0000
ROA not before:           Thu 05 Feb 2026 16:03:35 +0000
ROA not after:            Thu 04 Feb 2027 16:08:35 +0000
asID:                     262872
IP address blocks:        177.11.64.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J5QsErFU4sNtG6iJxhZyx1dj42s1hkcUCG8sgMk6swPM/1/87B55EA11CC3C5018472A7EF4105A798D366CC11.crl
                          rsync://rpki-repo.registro.br/repo/J5QsErFU4sNtG6iJxhZyx1dj42s1hkcUCG8sgMk6swPM/1/87B55EA11CC3C5018472A7EF4105A798D366CC11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87B55EA11CC3C5018472A7EF4105A798D366CC11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 11:26:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ca:1f:89:bc:de:45:ad:5e:c2:c8:3d:96:6c:9b:c1:7e:20:49:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87B55EA11CC3C5018472A7EF4105A798D366CC11
        Validity
            Not Before: Feb  5 16:03:35 2026 GMT
            Not After : Feb  4 16:08:35 2027 GMT
        Subject: CN=A93462D30BFE842F78C1BA1F52B0355C7A7EAACC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3a:0b:2c:97:b3:ca:7b:11:ec:92:85:b3:f5:
                    df:db:45:76:ad:3c:6a:97:e0:63:08:e1:22:09:6c:
                    1a:30:d8:03:17:fd:9d:03:dc:6f:5b:eb:ab:27:0c:
                    f1:9b:d4:3f:97:ab:8c:f1:b0:18:0b:84:8c:34:c5:
                    7b:37:af:8d:9f:87:91:d1:78:47:9b:69:81:37:a4:
                    60:b1:58:6c:db:3d:36:ad:7e:ab:33:12:f1:77:6a:
                    4b:ff:9f:63:13:a4:b5:c7:31:9e:89:d2:d9:76:c3:
                    f5:bf:68:02:06:8e:50:45:39:8e:d0:a9:16:dd:d5:
                    34:21:a2:75:29:5b:1e:50:00:da:14:72:74:39:72:
                    44:06:92:89:28:43:52:c5:91:b5:3a:26:20:9a:1e:
                    f8:ea:4f:92:9a:f7:6c:f2:7c:dd:fd:44:d5:c1:24:
                    0e:e6:db:8a:e3:69:8f:54:ed:3e:1a:8e:96:44:3c:
                    ba:9e:0b:7e:da:7b:94:2a:40:a5:3c:99:d0:3d:83:
                    41:77:5c:8b:33:e3:62:8d:44:21:8d:fa:bb:21:9b:
                    a5:2e:d9:c3:12:f8:3c:f6:58:69:f0:51:f7:de:f3:
                    9e:bd:b9:83:3f:69:cd:ab:37:ac:63:82:b1:8c:3b:
                    6b:6d:fb:b0:3a:de:93:35:da:2f:aa:51:40:93:02:
                    00:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:34:62:D3:0B:FE:84:2F:78:C1:BA:1F:52:B0:35:5C:7A:7E:AA:CC
            X509v3 Authority Key Identifier:
                keyid:87:B5:5E:A1:1C:C3:C5:01:84:72:A7:EF:41:05:A7:98:D3:66:CC:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5QsErFU4sNtG6iJxhZyx1dj42s1hkcUCG8sgMk6swPM/1/87B55EA11CC3C5018472A7EF4105A798D366CC11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87B55EA11CC3C5018472A7EF4105A798D366CC11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5QsErFU4sNtG6iJxhZyx1dj42s1hkcUCG8sgMk6swPM/1/3137372e31312e36342e302f32312d3234203d3e20323632383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         89:25:df:78:b4:e4:80:61:5b:78:01:da:11:14:bd:e0:cc:d3:
         80:dc:3c:a1:f2:6e:cd:d6:64:51:02:ab:96:5c:a4:91:4d:42:
         5b:36:ad:6e:56:ff:43:30:6a:fa:91:32:c8:d3:c1:2b:f5:4e:
         8c:1c:72:88:9c:97:69:12:7f:de:11:bc:a7:da:0e:2d:96:ea:
         bd:95:7b:a2:0c:8e:f6:88:57:24:b3:dc:ed:af:2c:06:29:09:
         4b:1c:5f:98:2c:2b:20:06:1a:0d:2a:cc:e8:48:e5:34:ab:1a:
         ca:4c:e0:2a:c0:76:16:73:fc:aa:5d:cc:b8:11:ca:2f:1a:ec:
         48:3b:1b:59:d2:0d:6d:d9:43:f6:ae:88:84:f4:71:84:4e:5f:
         19:bc:b9:ae:f0:0d:b6:b2:bc:45:a7:66:39:0a:4f:09:26:3b:
         49:ee:54:62:60:35:ba:5c:ec:18:ae:0f:a1:9c:1a:0d:b6:8a:
         22:9d:4a:0f:5b:0c:b5:a0:cc:22:34:8e:f1:d0:a4:19:49:bf:
         dc:69:78:ef:21:9a:d9:cd:3b:70:bc:14:d2:0c:16:72:0f:65:
         31:49:5f:62:28:0a:e1:76:b3:8d:e0:71:b5:a1:8d:ea:dc:96:
         1a:84:0c:31:15:ef:b1:0e:d2:98:47:56:81:3e:66:70:59:89:
         3f:f0:49:a6
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZ8ofibzeRa1ewsg9lmybwX4gSeUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODdCNTVFQTExQ0MzQzUwMTg0NzJBN0VGNDEwNUE3OThE
MzY2Q0MxMTAeFw0yNjAyMDUxNjAzMzVaFw0yNzAyMDQxNjA4MzVaMDMxMTAvBgNV
BAMTKEE5MzQ2MkQzMEJGRTg0MkY3OEMxQkExRjUyQjAzNTVDN0E3RUFBQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHOgssl7PKexHskoWz9d/bRXat
PGqX4GMI4SIJbBow2AMX/Z0D3G9b66snDPGb1D+Xq4zxsBgLhIw0xXs3r42fh5HR
eEebaYE3pGCxWGzbPTatfqszEvF3akv/n2MTpLXHMZ6J0tl2w/W/aAIGjlBFOY7Q
qRbd1TQhonUpWx5QANoUcnQ5ckQGkokoQ1LFkbU6JiCaHvjqT5Ka92zyfN39RNXB
JA7m24rjaY9U7T4ajpZEPLqeC37ae5QqQKU8mdA9g0F3XIsz42KNRCGN+rshm6Uu
2cMS+Dz2WGnwUffe8569uYM/ac2rN6xjgrGMO2tt+7A63pM12i+qUUCTAgAlAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUqTRi0wv+hC94wbofUrA1XHp+qswwHwYDVR0j
BBgwFoAUh7VeoRzDxQGEcqfvQQWnmNNmzBEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjVRc0VyRlU0c050RzZpSnhoWnl4MWRqNDJzMWhrY1VDRzhzZ01rNnN3
UE0vMS84N0I1NUVBMTFDQzNDNTAxODQ3MkE3RUY0MTA1QTc5OEQzNjZDQzExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3QjU1RUExMUNDM0M1MDE4
NDcyQTdFRjQxMDVBNzk4RDM2NkNDMTEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o1UXNFckZVNHNOdEc2aUp4aFp5eDFkajQyczFoa2NVQ0c4c2dNazZzd1BNLzEv
MzEzNzM3MmUzMTMxMmUzNjM0MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzNjMy
MzgzNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsQtAMA0GCSqGSIb3DQEBCwUAA4IBAQCJJd94tOSA
YVt4AdoRFL3gzNOA3Dyh8m7N1mRRAquWXKSRTUJbNq1uVv9DMGr6kTLI08Er9U6M
HHKInJdpEn/eEbyn2g4tluq9lXuiDI72iFcks9ztrywGKQlLHF+YLCsgBhoNKszo
SOU0qxrKTOAqwHYWc/yqXcy4EcovGuxIOxtZ0g1t2UP2roiE9HGETl8ZvLmu8A22
srxFp2Y5Ck8JJjtJ7lRiYDW6XOwYrg+hnBoNtooinUoPWwy1oMwiNI7x0KQZSb/c
aXjvIZrZzTtwvBTSDBZyD2UxSV9iKArhdrON4HG1oY3q3JYahAwxFe+xDtKYR1aB
PmZwWYk/8Emm
-----END CERTIFICATE-----
Generated at Thu Feb 19 14:24:27 2026 by rpki-client