Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/3137372e32332e382e302f32312d3231203d3e203533313132.roa
File:                     3137372e32332e382e302f32312d3231203d3e203533313132.roa (raw, json)
Hash identifier:          FEwGpJCesa33gAKovlSxbJbbNtDYHIwoJARHAEX65jo=
Subject key identifier:   40:64:0A:AD:39:1D:50:73:E2:90:30:FD:3B:CD:01:FC:FC:F8:0D:84
Certificate issuer:       /CN=74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651
Certificate serial:       189DB84B46DB6190536855245D260B067380F3DE
Authority key identifier: 74:AD:EB:5B:0B:06:9D:AC:2D:94:A5:DD:C5:51:0D:9D:CC:0C:B6:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/3137372e32332e382e302f32312d3231203d3e203533313132.roa
Signing time:             Thu 05 Feb 2026 11:02:32 +0000
ROA not before:           Thu 05 Feb 2026 10:57:32 +0000
ROA not after:            Thu 04 Feb 2027 11:02:32 +0000
asID:                     53112
IP address blocks:        177.23.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.crl
                          rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:9d:b8:4b:46:db:61:90:53:68:55:24:5d:26:0b:06:73:80:f3:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651
        Validity
            Not Before: Feb  5 10:57:32 2026 GMT
            Not After : Feb  4 11:02:32 2027 GMT
        Subject: CN=40640AAD391D5073E29030FD3BCD01FCFCF80D84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:57:86:d3:07:f2:42:34:6d:a8:4d:90:a8:b6:
                    9d:59:2a:16:e0:af:30:91:d4:4f:1c:29:cf:9d:28:
                    5f:08:ef:28:47:cb:77:76:93:bf:fb:ef:0b:51:c2:
                    79:39:e5:d2:82:39:9c:73:ce:98:e9:9f:00:2c:e8:
                    d8:29:e5:1c:e5:03:12:e4:67:71:ae:d3:f0:79:ae:
                    ae:93:c7:d6:99:dd:8b:40:37:12:ce:7a:94:a8:cb:
                    ed:9f:74:61:c3:63:f5:7c:9a:d6:a5:c4:9c:db:f8:
                    59:74:c3:67:65:8a:8d:12:a0:e6:1c:bc:9d:71:c8:
                    92:01:e1:36:b8:cd:f8:05:2f:ab:f8:d5:4f:75:e1:
                    42:b3:76:36:03:42:58:e2:e8:de:df:1d:5b:be:28:
                    e0:e3:c2:72:4f:29:0e:22:48:cd:57:3c:bf:ef:a8:
                    d9:9d:7a:dc:f9:08:80:68:dc:84:85:ba:1b:3b:b0:
                    06:2a:b5:91:c1:7d:3d:3c:70:34:6a:57:e2:b6:8b:
                    96:e6:63:01:7f:32:95:9e:30:d5:25:7d:5f:a7:5a:
                    ec:c6:46:e7:89:ce:80:ed:7f:11:9e:fb:da:63:95:
                    01:08:c8:6e:a1:fa:d5:1c:2b:89:1f:31:51:50:bf:
                    a2:90:89:81:9d:ee:8c:ea:1d:e3:3d:ea:1d:7c:bb:
                    b7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:64:0A:AD:39:1D:50:73:E2:90:30:FD:3B:CD:01:FC:FC:F8:0D:84
            X509v3 Authority Key Identifier:
                keyid:74:AD:EB:5B:0B:06:9D:AC:2D:94:A5:DD:C5:51:0D:9D:CC:0C:B6:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/3137372e32332e382e302f32312d3231203d3e203533313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         80:b6:b8:b6:1a:1f:3c:6f:ed:be:49:a7:d9:28:9a:82:b0:ca:
         fa:32:0b:2e:e6:e3:25:63:ba:79:14:aa:77:60:4a:ae:4f:03:
         f5:b0:26:7e:fd:a0:71:52:9c:c1:89:7c:f1:ec:d5:14:eb:df:
         da:b4:b2:42:3c:96:ff:d0:32:44:05:bc:d0:6c:bf:a4:d3:7f:
         f7:58:5d:1f:12:e4:ed:a8:ad:67:88:f0:69:a5:ee:c6:53:8a:
         9a:cf:e0:c4:5d:38:84:0e:ff:d9:b3:2e:11:33:1a:55:4a:30:
         bb:b3:9e:b0:ea:23:22:cd:b3:d0:7c:48:1a:8b:a8:68:74:29:
         51:e2:f3:5b:8c:89:55:69:70:89:2b:0e:f0:6c:b8:04:a3:11:
         3f:51:ca:b9:f5:db:78:b8:d6:dd:6f:53:d7:cf:92:bb:24:fd:
         42:e8:b1:b1:59:cd:5a:0e:58:89:c0:11:e3:7e:ca:4b:5c:86:
         81:23:e4:28:3e:28:28:d1:98:36:82:ee:18:92:a3:61:ee:ca:
         fb:5c:31:20:6c:95:f3:32:26:37:0d:be:bf:bf:27:44:d0:c1:
         f6:ec:25:56:3c:97:84:63:dd:db:dd:f1:e0:42:17:2d:5c:d8:
         8c:1d:84:5f:d9:8a:cf:48:bb:67:ca:23:04:34:b0:04:b4:98:
         fa:d1:f0:f5
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUGJ24S0bbYZBTaFUkXSYLBnOA894wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzRBREVCNUIwQjA2OURBQzJEOTRBNUREQzU1MTBEOURD
QzBDQjY1MTAeFw0yNjAyMDUxMDU3MzJaFw0yNzAyMDQxMTAyMzJaMDMxMTAvBgNV
BAMTKDQwNjQwQUFEMzkxRDUwNzNFMjkwMzBGRDNCQ0QwMUZDRkNGODBEODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxV4bTB/JCNG2oTZCotp1ZKhbg
rzCR1E8cKc+dKF8I7yhHy3d2k7/77wtRwnk55dKCOZxzzpjpnwAs6Ngp5RzlAxLk
Z3Gu0/B5rq6Tx9aZ3YtANxLOepSoy+2fdGHDY/V8mtalxJzb+Fl0w2dlio0SoOYc
vJ1xyJIB4Ta4zfgFL6v41U914UKzdjYDQlji6N7fHVu+KODjwnJPKQ4iSM1XPL/v
qNmdetz5CIBo3ISFuhs7sAYqtZHBfT08cDRqV+K2i5bmYwF/MpWeMNUlfV+nWuzG
RueJzoDtfxGe+9pjlQEIyG6h+tUcK4kfMVFQv6KQiYGd7ozqHeM96h18u7fdAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUQGQKrTkdUHPikDD9O80B/Pz4DYQwHwYDVR0j
BBgwFoAUdK3rWwsGnawtlKXdxVENncwMtlEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjVmVEdWZkFzeTFOMzJTMmJIdG9MMlltV1hLU01Gd0hlZUhvVTJEWVFR
WjEvMS83NEFERUI1QjBCMDY5REFDMkQ5NEE1RERDNTUxMEQ5RENDMENCNjUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc0QURFQjVCMEIwNjlEQUMy
RDk0QTVEREM1NTEwRDlEQ0MwQ0I2NTEuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o1ZlRHVmZBc3kxTjMyUzJiSHRvTDJZbVdYS1NNRndIZWVIb1UyRFlRUVoxLzEv
MzEzNzM3MmUzMjMzMmUzODJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDM1MzMzMTMx
MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAOxFwgwDQYJKoZIhvcNAQELBQADggEBAIC2uLYaHzxv7b5J
p9komoKwyvoyCy7m4yVjunkUqndgSq5PA/WwJn79oHFSnMGJfPHs1RTr39q0skI8
lv/QMkQFvNBsv6TTf/dYXR8S5O2orWeI8Gml7sZTiprP4MRdOIQO/9mzLhEzGlVK
MLuznrDqIyLNs9B8SBqLqGh0KVHi81uMiVVpcIkrDvBsuASjET9Ryrn123i41t1v
U9fPkrsk/ULosbFZzVoOWInAEeN+yktchoEj5Cg+KCjRmDaC7hiSo2HuyvtcMSBs
lfMyJjcNvr+/J0TQwfbsJVY8l4Rj3dvd8eBCFy1c2IwdhF/Zis9Iu2fKIwQ0sAS0
mPrR8PU=
-----END CERTIFICATE-----
Generated at Thu Feb 19 05:53:18 2026 by rpki-client