Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e35382e302f32342d3234203d3e203533303136.roa
File:                     3137372e37342e35382e302f32342d3234203d3e203533303136.roa (raw, json)
Hash identifier:          tkCPdq4xn4ripY3GKdOQQBuqse27LAvLgFSAtn7MkkA=
Subject key identifier:   F6:F2:A5:EB:88:58:0E:15:9D:47:7F:7A:1B:3A:77:B5:65:99:46:0A
Certificate issuer:       /CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
Certificate serial:       1B9CEDB252CC49357D191349BC29504274976DA2
Authority key identifier: 73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e35382e302f32342d3234203d3e203533303136.roa
Signing time:             Thu 19 Feb 2026 20:37:21 +0000
ROA not before:           Thu 19 Feb 2026 20:32:21 +0000
ROA not after:            Thu 18 Feb 2027 20:37:21 +0000
asID:                     53016
IP address blocks:        177.74.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl
                          rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 17:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:9c:ed:b2:52:cc:49:35:7d:19:13:49:bc:29:50:42:74:97:6d:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
        Validity
            Not Before: Feb 19 20:32:21 2026 GMT
            Not After : Feb 18 20:37:21 2027 GMT
        Subject: CN=F6F2A5EB88580E159D477F7A1B3A77B56599460A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6e:3a:cc:f9:f0:41:92:37:dc:3d:cf:61:76:
                    26:da:14:ff:4c:59:16:31:44:0b:a3:b0:74:52:df:
                    4a:43:e2:8a:77:91:cd:0b:76:a1:2f:2c:5f:99:95:
                    b1:2c:88:eb:fa:b3:8c:d2:8a:1f:d8:17:ef:4c:f1:
                    14:d7:e4:74:90:66:93:e5:f6:e6:3f:37:02:b7:51:
                    76:e2:65:c0:09:a4:82:b0:06:cf:bd:fd:47:27:88:
                    bc:4a:9e:44:1c:aa:82:42:62:80:ea:32:6b:f3:5b:
                    b4:76:4a:7a:56:c9:3a:56:44:ce:60:dd:22:41:73:
                    e3:41:f3:fb:b3:6f:db:28:4c:76:0c:ed:2b:e7:ad:
                    6b:cd:ee:21:79:cf:2e:7c:ca:e9:fc:b2:86:0f:a1:
                    16:91:40:70:6a:26:4a:9c:03:f9:a7:8d:5d:f0:68:
                    8c:92:8d:e9:57:6c:c0:b3:ad:5f:59:c8:ea:4d:27:
                    d6:8f:e4:47:9f:f5:9e:d3:97:3d:c2:a2:02:24:fa:
                    c2:87:23:64:5f:13:2c:08:66:25:50:38:f5:64:e2:
                    21:36:f9:54:53:f8:ce:f3:c2:b6:24:0d:3f:9c:b9:
                    93:c7:93:c5:64:ad:76:2d:00:16:7e:9b:cd:b3:b1:
                    d2:0e:2a:98:00:8a:d6:cc:b9:ad:0e:a8:63:fd:8d:
                    73:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F2:A5:EB:88:58:0E:15:9D:47:7F:7A:1B:3A:77:B5:65:99:46:0A
            X509v3 Authority Key Identifier:
                keyid:73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e35382e302f32342d3234203d3e203533303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:6f:ce:89:93:aa:05:93:9d:f4:b4:8c:3c:68:52:73:66:b7:
         ad:e6:be:7f:95:ea:97:6c:e8:f8:1e:22:a0:c9:30:c6:cb:8a:
         9e:21:5f:07:40:d2:2d:4e:5a:e5:6f:ee:7d:91:0a:ff:5d:fe:
         7f:15:f3:be:01:27:30:a9:e5:3a:a6:a5:b0:17:78:dd:7b:6e:
         a4:63:48:6b:79:c9:fd:03:22:da:18:e2:cb:3d:81:d9:70:10:
         21:ae:4d:bb:9c:b0:d8:df:ec:07:74:8c:f3:01:38:45:ca:38:
         bc:15:0f:5e:3c:1e:d1:dc:e5:85:2e:cc:50:bb:0d:45:23:30:
         a7:53:c5:7c:09:0e:df:9b:77:69:e9:85:e0:25:21:41:58:f4:
         da:14:fd:66:c5:d1:5e:9c:cd:16:dd:a4:df:fc:6a:cf:2b:e9:
         0f:8d:f9:f8:03:94:62:6d:5a:bb:c8:4f:a2:84:fe:9f:59:f8:
         48:88:97:e8:57:0b:6e:60:84:de:f0:06:f2:49:22:12:76:68:
         0e:f4:8b:17:2e:6c:2d:f2:b5:fa:fe:61:d6:d6:79:02:3e:6f:
         a6:00:19:83:e8:91:84:2d:ca:a5:ef:95:73:a4:b8:f8:81:4f:
         d9:b6:67:24:4c:15:37:9b:af:7d:31:ea:21:09:ea:39:f8:62:
         4f:8c:14:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:44:23 2026 by rpki-client