Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e32322e302f32342d3234203d3e203533303136.roa
File:                     3137372e37342e32322e302f32342d3234203d3e203533303136.roa (raw, json)
Hash identifier:          IT+6QtDYxvD8zAx4gizCk5S+FrRjQgoymULalw76O94=
Subject key identifier:   D8:3F:9C:F1:4F:71:8A:05:5C:90:77:3D:53:14:7B:5E:D9:F0:04:CE
Certificate issuer:       /CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
Certificate serial:       284F605F88F4E51602908AD14847657F50C979A1
Authority key identifier: 73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e32322e302f32342d3234203d3e203533303136.roa
Signing time:             Thu 19 Feb 2026 20:37:17 +0000
ROA not before:           Thu 19 Feb 2026 20:32:17 +0000
ROA not after:            Thu 18 Feb 2027 20:37:17 +0000
asID:                     53016
IP address blocks:        177.74.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl
                          rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 17:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:4f:60:5f:88:f4:e5:16:02:90:8a:d1:48:47:65:7f:50:c9:79:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
        Validity
            Not Before: Feb 19 20:32:17 2026 GMT
            Not After : Feb 18 20:37:17 2027 GMT
        Subject: CN=D83F9CF14F718A055C90773D53147B5ED9F004CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ec:96:15:aa:5b:5d:94:ce:5c:7f:06:3e:f2:
                    ab:99:23:5c:4c:d4:a3:f3:2c:8e:50:14:4b:aa:6b:
                    f5:0d:13:a1:9d:3d:a4:8b:85:1e:9e:65:45:72:c7:
                    68:6b:3d:e2:be:cd:2a:df:ca:04:7f:cc:b0:5c:95:
                    9d:be:e6:3f:59:88:3a:aa:a4:c0:7c:bf:06:58:dd:
                    ff:2f:c1:15:27:a3:fc:5c:82:a4:be:f4:07:56:f6:
                    69:d7:0e:16:7d:5a:ff:eb:d7:4f:fb:4d:6c:00:d0:
                    c0:16:3d:32:15:15:eb:41:69:c1:ab:90:43:34:0b:
                    62:1c:a4:df:ec:b7:a0:e6:e8:1b:b4:e8:cc:ef:d8:
                    ea:f3:9b:3d:b7:69:35:95:c0:3b:de:15:4b:42:c3:
                    14:a8:f7:66:51:c6:7f:03:05:23:eb:1f:9d:f0:c6:
                    0b:95:55:c4:5d:8e:78:d6:16:0f:bf:5f:5d:1e:db:
                    44:42:9b:c9:6e:e4:b2:06:a6:eb:16:04:6a:b4:34:
                    92:00:a1:ba:19:03:36:82:da:5c:47:77:72:62:0e:
                    ce:d8:06:00:fd:2d:98:03:73:c3:48:c9:bf:59:98:
                    65:9f:b4:1a:18:ba:b9:21:5d:fe:0a:e6:f5:c9:87:
                    6b:af:d8:6c:7e:3f:6f:2e:15:ce:4a:c9:b6:af:6e:
                    66:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:3F:9C:F1:4F:71:8A:05:5C:90:77:3D:53:14:7B:5E:D9:F0:04:CE
            X509v3 Authority Key Identifier:
                keyid:73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e32322e302f32342d3234203d3e203533303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:ef:80:68:96:36:35:94:99:15:2f:d0:9b:6c:96:72:30:07:
         05:0a:5e:72:08:9f:16:7e:b2:21:35:03:14:f0:96:66:35:43:
         7a:65:d4:e7:29:b7:50:5f:77:5f:08:b4:ea:29:d8:22:75:69:
         aa:4c:76:2c:12:83:9a:a3:f5:ae:c2:6b:74:a9:6f:d1:59:6d:
         00:e3:b4:8b:56:00:24:78:85:49:50:25:72:f0:30:c6:ea:cf:
         7c:4e:d5:3b:de:8b:7a:9b:85:77:9e:86:2e:d2:53:36:9b:77:
         e1:1d:45:59:3a:34:b6:c2:fd:b7:6c:93:7b:65:4f:ef:a7:2e:
         5a:39:c3:20:6f:fb:8b:be:e1:5b:b1:15:6d:a8:b7:6f:ca:bc:
         1f:d8:91:e3:ad:d8:6e:56:2b:9e:3b:bc:c6:29:a6:72:a7:50:
         3b:92:da:6b:97:65:31:60:a4:e6:16:d9:13:ba:8d:3e:15:46:
         16:28:1f:25:d6:50:36:b6:2c:f5:91:26:59:d8:87:9c:4f:6a:
         0a:e1:7d:b5:ef:e1:20:c0:81:b3:56:0c:c7:5e:55:95:ea:90:
         a8:e9:ec:7b:a3:34:0a:c9:eb:cb:b4:7f:5a:b5:6b:51:76:6a:
         8f:a7:ef:27:82:a9:89:c8:9e:e4:21:c8:61:0c:d2:9f:bc:dc:
         b7:ef:2c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:22:53 2026 by rpki-client