Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6RgXqYhRSsfPxhizAjEoVWZtffod3YjweuLmUNm888Qs/0/3137372e38372e36382e302f32322d3234203d3e203532353931.roa
File:                     3137372e38372e36382e302f32322d3234203d3e203532353931.roa (raw, json)
Hash identifier:          31Q2y/0x14D0FuDzXlOAgytjCmGKSXE8CoGGBPUA/GM=
Subject key identifier:   CF:54:3B:FD:45:C8:44:A8:39:95:A0:F8:CE:A9:9E:D3:78:93:84:2D
Certificate issuer:       /CN=B253A5EB1FF32AC3DF9567B9626735A6DB01CE4B
Certificate serial:       6B119BEFFA02DAF03843E53E5ED3D54F85CB1E78
Authority key identifier: B2:53:A5:EB:1F:F3:2A:C3:DF:95:67:B9:62:67:35:A6:DB:01:CE:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B253A5EB1FF32AC3DF9567B9626735A6DB01CE4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6RgXqYhRSsfPxhizAjEoVWZtffod3YjweuLmUNm888Qs/0/3137372e38372e36382e302f32322d3234203d3e203532353931.roa
Signing time:             Mon 09 Feb 2026 11:54:34 +0000
ROA not before:           Mon 09 Feb 2026 11:49:34 +0000
ROA not after:            Mon 08 Feb 2027 11:54:34 +0000
asID:                     52591
IP address blocks:        177.87.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6RgXqYhRSsfPxhizAjEoVWZtffod3YjweuLmUNm888Qs/0/B253A5EB1FF32AC3DF9567B9626735A6DB01CE4B.crl
                          rsync://rpki-repo.registro.br/repo/6RgXqYhRSsfPxhizAjEoVWZtffod3YjweuLmUNm888Qs/0/B253A5EB1FF32AC3DF9567B9626735A6DB01CE4B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B253A5EB1FF32AC3DF9567B9626735A6DB01CE4B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 02:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:11:9b:ef:fa:02:da:f0:38:43:e5:3e:5e:d3:d5:4f:85:cb:1e:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B253A5EB1FF32AC3DF9567B9626735A6DB01CE4B
        Validity
            Not Before: Feb  9 11:49:34 2026 GMT
            Not After : Feb  8 11:54:34 2027 GMT
        Subject: CN=CF543BFD45C844A83995A0F8CEA99ED37893842D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:85:5b:c8:a8:4c:f8:d6:e4:24:ee:ca:6f:56:
                    0d:df:67:af:e2:bd:05:25:56:ab:52:b7:47:1e:d9:
                    92:97:32:83:bf:7f:0f:42:32:a4:28:a2:06:13:d0:
                    9b:53:06:c5:b2:30:de:9c:b3:92:7d:90:3e:b6:89:
                    10:0d:93:84:91:64:50:f5:63:9a:a1:0b:f9:d1:4f:
                    04:0d:a0:9a:ec:e6:d0:84:7a:36:dd:78:1c:58:de:
                    8b:c6:46:e8:7f:d0:f8:f1:18:85:5f:b7:d5:28:f7:
                    b8:c5:02:e0:b8:b2:a3:e3:04:8a:d3:0e:fc:2f:96:
                    bd:01:45:94:2c:92:eb:e3:90:56:fd:10:03:97:24:
                    a8:91:e5:e6:6b:47:3d:eb:f8:63:99:a3:1c:ce:e9:
                    b0:8e:ab:f6:c6:93:d4:df:27:58:31:3d:ba:52:b5:
                    82:1e:14:5c:4f:3b:d9:2b:cc:e3:44:0c:de:0c:2a:
                    ae:58:11:37:9b:61:4e:d3:d5:6d:11:55:05:5f:ba:
                    50:cd:08:b3:d9:4b:8d:af:18:48:10:f2:4a:02:76:
                    d7:80:d2:c3:01:af:e8:e8:73:e4:b5:44:47:98:9d:
                    b7:b7:59:94:b4:c2:c0:ab:54:b0:d7:32:2b:c1:49:
                    37:27:46:2d:4a:f8:1e:e1:8a:b9:a5:37:6b:c6:c8:
                    67:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:54:3B:FD:45:C8:44:A8:39:95:A0:F8:CE:A9:9E:D3:78:93:84:2D
            X509v3 Authority Key Identifier:
                keyid:B2:53:A5:EB:1F:F3:2A:C3:DF:95:67:B9:62:67:35:A6:DB:01:CE:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6RgXqYhRSsfPxhizAjEoVWZtffod3YjweuLmUNm888Qs/0/B253A5EB1FF32AC3DF9567B9626735A6DB01CE4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B253A5EB1FF32AC3DF9567B9626735A6DB01CE4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6RgXqYhRSsfPxhizAjEoVWZtffod3YjweuLmUNm888Qs/0/3137372e38372e36382e302f32322d3234203d3e203532353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:52:9c:75:ef:eb:e5:52:bf:fb:84:1d:e6:d8:66:06:cc:1e:
         58:a3:67:99:cd:03:e3:75:f1:87:80:a5:70:00:0f:20:ac:f2:
         8f:be:12:88:b2:6f:50:6d:3d:0f:20:1b:ba:7b:ca:ea:a5:29:
         be:59:70:45:b6:c7:06:8c:de:78:44:9d:ff:48:21:6e:84:4a:
         1c:1a:64:a4:e9:83:7c:25:12:f9:3b:88:07:76:27:3e:22:2b:
         10:24:06:e2:e7:a6:22:1f:35:6e:e8:9f:46:03:e0:40:20:e7:
         78:7e:3c:d2:58:ab:1f:01:ea:d0:2d:67:a2:df:52:03:a5:6d:
         ef:49:0e:a2:a6:a3:ef:fc:3c:f1:5c:92:d2:cb:0c:60:01:b6:
         d4:9d:b2:60:f5:65:87:84:66:cf:3b:37:b4:e8:17:f6:41:88:
         1e:45:bf:39:a4:57:51:7c:5b:1e:c2:7a:12:00:cc:44:4d:dd:
         42:87:7e:bf:d4:29:6a:f8:d2:b1:5d:09:c7:ed:9e:74:d3:e5:
         9c:5f:bb:85:0e:22:61:c1:ea:bc:f5:c9:a6:7b:ee:d7:c6:7d:
         1a:c5:ee:0c:88:01:07:ef:ee:07:91:7d:ec:a7:41:f2:cf:0b:
         ca:02:2e:6e:20:b8:a0:94:88:f9:b6:d7:6e:1a:5d:f8:18:5a:
         bc:66:62:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:03:54 2026 by rpki-client