Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/3137372e39322e3232342e302f32302d3234203d3e203238323739.roa
File:                     3137372e39322e3232342e302f32302d3234203d3e203238323739.roa (raw, json)
Hash identifier:          TMDin3rnGrIeVp3qSYo7fJ1XJvh8Ex/25wlB3Azmy+E=
Subject key identifier:   82:FC:A1:05:36:A8:4F:E1:8A:32:3E:4B:A4:67:FA:23:0D:3B:27:69
Certificate issuer:       /CN=713D42750562117CA0DB7D96A623898EF91F6ADA
Certificate serial:       5FB9870D66F6B42170029800504DDB6C96B03031
Authority key identifier: 71:3D:42:75:05:62:11:7C:A0:DB:7D:96:A6:23:89:8E:F9:1F:6A:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/713D42750562117CA0DB7D96A623898EF91F6ADA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/3137372e39322e3232342e302f32302d3234203d3e203238323739.roa
Signing time:             Fri 06 Feb 2026 00:26:30 +0000
ROA not before:           Fri 06 Feb 2026 00:21:30 +0000
ROA not after:            Fri 05 Feb 2027 00:26:30 +0000
asID:                     28279
IP address blocks:        177.92.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/713D42750562117CA0DB7D96A623898EF91F6ADA.crl
                          rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/713D42750562117CA0DB7D96A623898EF91F6ADA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/713D42750562117CA0DB7D96A623898EF91F6ADA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 02:36:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:b9:87:0d:66:f6:b4:21:70:02:98:00:50:4d:db:6c:96:b0:30:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=713D42750562117CA0DB7D96A623898EF91F6ADA
        Validity
            Not Before: Feb  6 00:21:30 2026 GMT
            Not After : Feb  5 00:26:30 2027 GMT
        Subject: CN=82FCA10536A84FE18A323E4BA467FA230D3B2769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:44:9b:99:ef:33:f2:de:57:56:24:48:6f:4b:
                    5c:88:0a:50:32:d6:1b:8b:4a:37:9e:e7:df:ed:f9:
                    ae:16:dd:f5:23:53:67:89:d3:ba:62:29:05:6d:2f:
                    ca:b0:91:b5:bf:25:d7:4e:50:fc:57:f3:e3:3b:23:
                    83:51:ce:f2:44:b2:a3:70:ee:51:38:33:8e:c6:10:
                    4d:6c:db:88:2f:27:18:09:e7:17:dc:b4:1c:14:26:
                    10:51:6a:96:6b:c2:97:2b:72:04:42:6b:7c:c9:a5:
                    d3:7e:63:f1:eb:e0:3c:fc:d7:9c:7f:b3:8d:a4:57:
                    d2:c2:06:90:4f:8f:36:eb:d6:27:e8:8a:6a:b5:7c:
                    e1:2e:46:36:96:77:93:39:5f:f3:2a:e5:7e:d0:49:
                    8a:94:f8:65:5a:52:17:25:51:91:23:5a:ca:4f:7d:
                    d3:40:63:fe:a4:91:6a:67:af:cb:cf:a1:b7:f0:21:
                    1d:f6:54:45:73:b8:e2:27:91:10:4b:7f:6a:57:65:
                    54:4a:62:56:a1:a1:46:37:a2:af:60:e8:a7:d3:ab:
                    53:d3:d1:9e:33:f7:c1:42:88:1d:6b:68:7f:85:9b:
                    56:2a:a3:f1:9d:83:2b:b0:73:26:ca:ff:e2:0c:ce:
                    9c:72:26:b3:c4:be:2a:f4:b7:a9:50:c7:f6:4c:45:
                    a9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:FC:A1:05:36:A8:4F:E1:8A:32:3E:4B:A4:67:FA:23:0D:3B:27:69
            X509v3 Authority Key Identifier:
                keyid:71:3D:42:75:05:62:11:7C:A0:DB:7D:96:A6:23:89:8E:F9:1F:6A:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/713D42750562117CA0DB7D96A623898EF91F6ADA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/713D42750562117CA0DB7D96A623898EF91F6ADA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/3137372e39322e3232342e302f32302d3234203d3e203238323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.92.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         53:d4:7d:43:cd:c5:d1:48:26:62:95:43:52:91:8b:7d:46:13:
         33:f8:aa:21:7d:a2:0a:87:55:8c:56:70:96:48:a7:56:b6:22:
         92:11:02:1d:76:a4:11:2b:9f:11:20:39:39:9f:66:6c:4d:83:
         19:b1:52:ac:52:e4:bb:e1:7b:30:29:40:41:08:28:0a:28:ba:
         b1:79:f9:92:4b:7f:3c:cb:c6:38:6d:f8:57:45:18:71:c6:a4:
         c6:54:c0:e0:13:40:82:28:47:81:06:7b:11:de:f4:6c:66:23:
         3f:64:45:2e:b3:f2:ee:62:00:f2:3a:e9:10:8c:da:04:bd:58:
         da:b1:e8:dd:24:bd:0e:6d:a2:29:43:cc:e3:90:d7:80:9f:37:
         a2:b5:3c:69:e5:ee:65:86:5c:fd:50:8c:61:50:81:a6:d3:c5:
         0b:2f:4e:c6:21:75:17:17:1b:ae:b9:b4:5d:6b:24:95:a8:22:
         97:30:e4:7c:ca:d0:f5:94:cf:9b:de:1e:12:06:d0:26:9f:7d:
         25:38:e4:84:33:25:6e:90:46:c1:bf:ad:70:bb:77:16:33:df:
         13:b4:be:e1:2f:b9:94:69:bd:9a:b2:5a:90:df:96:49:6d:d3:
         da:31:49:73:8b:7b:da:d9:08:d2:79:53:29:20:5f:c6:0e:bf:
         66:d6:8e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:51:19 2026 by rpki-client