Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/iQMcW3n7AW99XdjWkQiMSV4UYgBnRZZzjbovJ42zmf6/1/3137372e38372e3234382e302f32332d3234203d3e20323731313535.roa
File:                     3137372e38372e3234382e302f32332d3234203d3e20323731313535.roa (raw, json)
Hash identifier:          zc1hPvVO1r2xUt2muWjmQCuAKEZxzL8PHusNzLlofe0=
Subject key identifier:   DA:8E:A4:AD:C8:35:17:76:CB:27:E7:D0:51:BC:84:8D:41:13:46:0D
Certificate issuer:       /CN=7AB6FD2F3C7AC526DEFF47DE8402EE747A952074
Certificate serial:       06CE52093613109DE92276AC41E808C6B688B667
Authority key identifier: 7A:B6:FD:2F:3C:7A:C5:26:DE:FF:47:DE:84:02:EE:74:7A:95:20:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB6FD2F3C7AC526DEFF47DE8402EE747A952074.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/iQMcW3n7AW99XdjWkQiMSV4UYgBnRZZzjbovJ42zmf6/1/3137372e38372e3234382e302f32332d3234203d3e20323731313535.roa
Signing time:             Thu 05 Feb 2026 09:29:13 +0000
ROA not before:           Thu 05 Feb 2026 09:24:13 +0000
ROA not after:            Thu 04 Feb 2027 09:29:13 +0000
asID:                     271155
IP address blocks:        177.87.248.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/iQMcW3n7AW99XdjWkQiMSV4UYgBnRZZzjbovJ42zmf6/1/7AB6FD2F3C7AC526DEFF47DE8402EE747A952074.crl
                          rsync://rpki-repo.registro.br/repo/iQMcW3n7AW99XdjWkQiMSV4UYgBnRZZzjbovJ42zmf6/1/7AB6FD2F3C7AC526DEFF47DE8402EE747A952074.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB6FD2F3C7AC526DEFF47DE8402EE747A952074.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ce:52:09:36:13:10:9d:e9:22:76:ac:41:e8:08:c6:b6:88:b6:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AB6FD2F3C7AC526DEFF47DE8402EE747A952074
        Validity
            Not Before: Feb  5 09:24:13 2026 GMT
            Not After : Feb  4 09:29:13 2027 GMT
        Subject: CN=DA8EA4ADC8351776CB27E7D051BC848D4113460D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:8f:54:66:74:a7:92:b8:a1:dc:cf:c7:1a:9b:
                    21:ff:2b:f3:3b:88:d3:2c:b5:46:96:06:37:0a:ee:
                    a3:b1:35:be:3a:9f:a0:cb:96:15:36:60:a8:e5:52:
                    9a:11:b4:10:7c:de:f5:fe:96:18:bd:ac:3c:db:5d:
                    00:9f:c1:82:8d:71:0f:79:8c:60:48:ea:df:d1:48:
                    85:24:92:9f:e7:61:d9:0f:45:9c:b2:55:e2:f9:9a:
                    0b:94:01:bb:d3:1a:84:e5:f0:42:f0:55:5a:54:a9:
                    9f:36:0f:e6:be:7c:ab:6d:3f:74:69:5d:52:9f:29:
                    11:aa:5e:50:a9:69:7e:94:5f:12:46:b0:40:cf:f0:
                    a5:96:57:53:a6:79:9c:7b:0d:84:de:a6:32:99:41:
                    0e:66:01:6b:e8:8d:a9:f0:9f:3a:60:05:d4:c8:4b:
                    ed:96:76:57:58:ff:64:de:1b:13:78:21:0d:32:cf:
                    93:eb:5e:03:ab:24:b9:66:0e:0a:f3:0d:dd:54:cd:
                    88:42:11:d9:0c:b4:e9:46:f1:93:13:af:11:a9:25:
                    e5:68:02:c4:1f:b8:8f:55:b9:f4:0d:5b:8a:31:51:
                    a3:dc:fc:04:db:3f:75:ea:61:6d:69:bf:9a:2b:4e:
                    e1:1d:df:5b:bf:c7:1c:99:0e:82:d5:8a:ab:1a:af:
                    ea:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:8E:A4:AD:C8:35:17:76:CB:27:E7:D0:51:BC:84:8D:41:13:46:0D
            X509v3 Authority Key Identifier:
                keyid:7A:B6:FD:2F:3C:7A:C5:26:DE:FF:47:DE:84:02:EE:74:7A:95:20:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/iQMcW3n7AW99XdjWkQiMSV4UYgBnRZZzjbovJ42zmf6/1/7AB6FD2F3C7AC526DEFF47DE8402EE747A952074.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB6FD2F3C7AC526DEFF47DE8402EE747A952074.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/iQMcW3n7AW99XdjWkQiMSV4UYgBnRZZzjbovJ42zmf6/1/3137372e38372e3234382e302f32332d3234203d3e20323731313535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:e2:a4:e1:1f:ab:67:cf:67:f9:e1:de:cc:60:45:9b:6f:ee:
         d3:3f:73:66:b5:04:5b:82:26:9d:f4:c2:9f:7d:a9:4a:c2:42:
         2a:c3:c4:9e:82:c3:3c:ef:54:55:4c:49:0d:1c:0d:ac:5f:68:
         1b:ce:6b:d5:02:99:eb:59:8f:cf:2d:3d:7d:0a:24:16:14:67:
         5b:69:ae:36:63:1e:21:81:fa:e3:ac:0e:05:f1:9e:49:db:71:
         1b:6a:d1:27:ea:ba:be:3f:4e:db:3a:b4:32:04:9c:7f:fa:7d:
         c1:68:bd:da:35:bb:1d:80:7b:b4:70:85:06:0e:ef:6e:10:3d:
         84:a1:12:ec:6e:fa:1f:23:c1:0c:2d:50:e0:37:1d:e9:32:32:
         7a:79:09:f6:67:76:c0:6d:d5:13:c2:a0:24:f2:4f:eb:4f:b4:
         da:2a:21:55:90:44:5a:5b:dd:9d:06:11:9d:71:e6:94:5b:ac:
         73:ac:6e:09:a0:37:a1:21:1a:93:15:3c:6f:cf:2b:fb:ac:9e:
         77:9a:a9:17:04:ba:41:c4:7f:5a:e1:47:17:d2:20:90:a9:fe:
         01:81:2e:71:8c:99:62:12:09:83:d1:d0:06:22:f4:09:6f:02:
         58:46:7d:95:e6:7b:82:44:04:7d:ba:bb:d2:ac:64:c4:4d:ca:
         2e:b3:b1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 07:43:25 2026 by rpki-client