Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/3137372e3133362e37322e302f32342d3234203d3e20323633363036.roa
File:                     3137372e3133362e37322e302f32342d3234203d3e20323633363036.roa (raw, json)
Hash identifier:          0p5oJNW1u7sbcdTmM4zJyxU4ZM7NUKqBR1aXh8tF8Ps=
Subject key identifier:   CC:F6:A1:BD:DA:38:90:58:A3:F1:57:AD:B6:A5:CC:6A:86:F3:C8:BD
Certificate issuer:       /CN=561575F60242E48030BC35A771871EB47C6EFF55
Certificate serial:       3FDAF6350BFB414D60C7214318968E6EEA966123
Authority key identifier: 56:15:75:F6:02:42:E4:80:30:BC:35:A7:71:87:1E:B4:7C:6E:FF:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/561575F60242E48030BC35A771871EB47C6EFF55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/3137372e3133362e37322e302f32342d3234203d3e20323633363036.roa
Signing time:             Sat 27 Dec 2025 14:56:34 +0000
ROA not before:           Sat 27 Dec 2025 14:51:34 +0000
ROA not after:            Sat 26 Dec 2026 14:56:34 +0000
asID:                     263606
IP address blocks:        177.136.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/561575F60242E48030BC35A771871EB47C6EFF55.crl
                          rsync://rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/561575F60242E48030BC35A771871EB47C6EFF55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/561575F60242E48030BC35A771871EB47C6EFF55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 11:17:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:da:f6:35:0b:fb:41:4d:60:c7:21:43:18:96:8e:6e:ea:96:61:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=561575F60242E48030BC35A771871EB47C6EFF55
        Validity
            Not Before: Dec 27 14:51:34 2025 GMT
            Not After : Dec 26 14:56:34 2026 GMT
        Subject: CN=CCF6A1BDDA389058A3F157ADB6A5CC6A86F3C8BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:52:0e:dc:a2:e5:e9:c4:67:2b:27:2b:00:3a:
                    50:0a:2f:a6:58:33:de:9d:ad:3a:97:15:10:d6:29:
                    09:5d:a4:a3:fa:08:6e:c1:ac:18:62:4f:8c:ec:21:
                    e4:a1:23:6f:b8:09:93:85:87:a6:64:f5:68:c7:b1:
                    31:01:c0:a6:ab:d1:ba:81:c7:45:6f:ec:c7:89:3b:
                    f4:25:e8:e7:11:c9:59:f4:7a:d4:40:54:8b:36:73:
                    6d:1d:64:a3:55:67:85:50:43:74:76:12:e0:53:f4:
                    66:2c:c7:70:07:3b:2d:e7:a9:9f:2b:ce:7c:de:bd:
                    2f:1c:ec:72:56:ac:c2:c2:d0:27:4b:08:2a:38:4a:
                    3a:03:14:25:61:7d:6d:31:1f:a8:6b:b5:0e:80:92:
                    19:1d:ab:5a:8c:e6:fb:11:24:c8:3f:94:d6:ca:61:
                    1a:ad:9d:c0:d8:ac:14:44:0d:0c:5c:8a:9b:85:47:
                    b3:3d:b6:4a:49:2b:9f:57:b7:ef:21:77:55:c9:c3:
                    c3:e2:da:60:43:7e:52:dd:ce:89:66:c4:9f:d9:6d:
                    41:50:07:27:95:42:73:d2:b2:09:30:3a:b4:41:a4:
                    60:7d:41:1f:44:da:4d:cc:c7:4c:59:40:be:0b:44:
                    35:48:03:d2:9e:a5:16:ee:39:ee:6c:37:4e:a5:77:
                    05:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F6:A1:BD:DA:38:90:58:A3:F1:57:AD:B6:A5:CC:6A:86:F3:C8:BD
            X509v3 Authority Key Identifier:
                keyid:56:15:75:F6:02:42:E4:80:30:BC:35:A7:71:87:1E:B4:7C:6E:FF:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/561575F60242E48030BC35A771871EB47C6EFF55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/561575F60242E48030BC35A771871EB47C6EFF55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/3137372e3133362e37322e302f32342d3234203d3e20323633363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:bb:ad:4c:26:2f:c4:af:21:94:4e:d4:76:eb:58:e6:0b:7a:
         51:4d:f5:8e:24:f6:c9:86:4e:36:3e:ed:9a:e3:69:3f:4e:ee:
         e4:c7:44:09:bc:79:2a:55:8c:71:3a:e2:65:ea:85:63:40:e6:
         e0:99:3b:7b:99:3b:b2:1f:fd:2b:80:e1:05:0d:6b:e2:a7:fb:
         83:7f:ed:a4:47:17:07:4e:ee:8e:49:bf:e0:8f:95:3c:d9:17:
         da:83:e7:1e:d2:ea:c4:1b:73:55:e9:6e:f8:b0:72:83:12:21:
         ef:07:ad:a4:c0:02:03:65:29:aa:ec:da:8d:b9:02:86:d8:60:
         d0:cc:9a:30:97:c3:16:99:dc:92:63:a1:15:67:34:bf:85:65:
         b1:9f:c0:dd:13:d3:53:2f:dd:b8:a3:d6:dc:f7:7c:fe:fa:91:
         58:90:dc:21:ac:4f:d9:77:bd:1c:0a:7f:5e:f2:68:e5:39:99:
         f8:51:14:c0:8c:b2:a5:e8:ff:99:c4:7e:87:e1:eb:e8:ae:10:
         86:16:e9:27:cd:75:f0:70:91:93:1a:1f:2d:43:3a:21:ff:96:
         2f:f5:d5:74:b8:c3:34:dc:8f:37:04:c6:fe:78:4e:71:56:77:
         e8:dd:9d:c5:96:10:56:38:b2:1a:6d:37:24:b5:1a:90:5b:ac:
         dd:2b:c0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:23:57 2026 by rpki-client