Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bbpc1vd3miVgntuWLocQMD5bxXEhqioafigy6tLZb2B/0/3137372e39332e3133382e302f32332d3234203d3e203238333636.roa
File:                     3137372e39332e3133382e302f32332d3234203d3e203238333636.roa (raw, json)
Hash identifier:          zLwBJpk7PxU9epKFpdsAXABdm2GUxZHYDIYSnNww48k=
Subject key identifier:   A9:E9:8F:54:D1:90:F4:ED:7C:4C:32:80:76:11:3B:05:F4:2C:5B:0A
Certificate issuer:       /CN=E608E42463C3A9603E3AD30D10A74366181F80B1
Certificate serial:       617B608BEFDB9269BDD9D36E207B5E4015E989F2
Authority key identifier: E6:08:E4:24:63:C3:A9:60:3E:3A:D3:0D:10:A7:43:66:18:1F:80:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E608E42463C3A9603E3AD30D10A74366181F80B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bbpc1vd3miVgntuWLocQMD5bxXEhqioafigy6tLZb2B/0/3137372e39332e3133382e302f32332d3234203d3e203238333636.roa
Signing time:             Wed 04 Feb 2026 20:57:37 +0000
ROA not before:           Wed 04 Feb 2026 20:52:37 +0000
ROA not after:            Wed 03 Feb 2027 20:57:37 +0000
asID:                     28366
IP address blocks:        177.93.138.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bbpc1vd3miVgntuWLocQMD5bxXEhqioafigy6tLZb2B/0/E608E42463C3A9603E3AD30D10A74366181F80B1.crl
                          rsync://rpki-repo.registro.br/repo/9bbpc1vd3miVgntuWLocQMD5bxXEhqioafigy6tLZb2B/0/E608E42463C3A9603E3AD30D10A74366181F80B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E608E42463C3A9603E3AD30D10A74366181F80B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 21:42:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:7b:60:8b:ef:db:92:69:bd:d9:d3:6e:20:7b:5e:40:15:e9:89:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E608E42463C3A9603E3AD30D10A74366181F80B1
        Validity
            Not Before: Feb  4 20:52:37 2026 GMT
            Not After : Feb  3 20:57:37 2027 GMT
        Subject: CN=A9E98F54D190F4ED7C4C328076113B05F42C5B0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:30:ba:89:c2:b7:53:15:66:2b:7b:11:bb:01:
                    0b:95:48:de:12:29:12:f8:54:b8:9e:3d:7a:c4:69:
                    f0:2f:42:03:a8:7c:f4:06:1a:f1:9a:86:67:40:9c:
                    58:e0:8d:75:d2:86:2a:64:1d:8e:af:aa:85:93:f4:
                    09:15:a4:f5:ef:19:e3:3c:e8:d0:69:c4:61:0b:49:
                    ff:12:9a:6a:23:51:b1:18:56:37:e9:cc:19:26:e4:
                    be:15:c9:08:71:e2:f3:bf:9c:d3:02:cf:78:c8:b4:
                    3b:76:a0:c2:36:88:b2:10:fe:bd:8b:49:fe:08:65:
                    2e:d6:35:aa:45:de:4d:9d:57:71:11:60:da:8c:c4:
                    44:af:69:67:df:d5:21:93:85:4a:60:3b:4a:69:71:
                    63:a1:43:a2:5d:b3:c5:fb:54:e6:2c:f5:ba:65:e2:
                    08:d9:8b:ad:d9:81:b2:b9:8f:c4:9e:75:20:3a:39:
                    da:ce:a7:13:27:f6:3c:e3:9a:09:97:9f:95:b6:b0:
                    ba:10:b3:eb:ae:33:f9:a3:e1:84:a6:16:bc:54:09:
                    ce:58:3c:64:17:62:89:f5:67:63:1a:6f:a8:f6:cb:
                    f7:67:36:a0:08:2f:67:fe:47:d4:b8:81:57:6c:b7:
                    c6:74:42:61:41:03:45:76:03:5f:92:2a:ee:53:f7:
                    b4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E9:8F:54:D1:90:F4:ED:7C:4C:32:80:76:11:3B:05:F4:2C:5B:0A
            X509v3 Authority Key Identifier:
                keyid:E6:08:E4:24:63:C3:A9:60:3E:3A:D3:0D:10:A7:43:66:18:1F:80:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bbpc1vd3miVgntuWLocQMD5bxXEhqioafigy6tLZb2B/0/E608E42463C3A9603E3AD30D10A74366181F80B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E608E42463C3A9603E3AD30D10A74366181F80B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bbpc1vd3miVgntuWLocQMD5bxXEhqioafigy6tLZb2B/0/3137372e39332e3133382e302f32332d3234203d3e203238333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:be:bb:4c:93:90:08:41:0b:d6:0c:1f:9f:a8:a3:78:43:df:
         78:f7:4a:7b:c9:a8:04:d2:50:3e:2a:78:a7:e7:ee:af:c0:70:
         b1:99:0f:00:a0:70:20:76:7c:51:cc:e7:a2:c5:cb:6d:b1:21:
         c0:48:8e:ae:91:45:23:aa:b9:54:60:a9:1c:a6:cf:88:d9:80:
         fe:03:f7:ea:14:15:17:78:8b:96:5c:4c:02:51:95:86:aa:5a:
         af:ac:86:b5:d5:df:30:b6:37:c8:bd:cf:79:12:e1:1f:c9:4a:
         f8:62:73:9c:b8:75:74:6e:4d:ef:94:17:0b:21:33:62:fe:f9:
         1c:6c:95:4f:6d:5f:8e:bb:b2:8d:27:04:b9:9f:23:92:7c:da:
         cd:8d:06:ff:cb:87:2c:a7:d0:fe:50:c0:b1:91:75:6d:ab:88:
         c2:12:da:83:d6:d5:92:00:c2:ee:a1:b1:88:df:64:8c:b1:6a:
         03:0a:6a:2f:7f:56:7d:e6:47:b1:0d:0f:54:77:9d:56:da:85:
         56:81:cb:c0:45:bc:0b:70:d8:77:ce:87:39:af:f6:e2:b2:70:
         b8:fb:e7:4a:56:f2:73:de:1e:a6:c3:c3:ec:5a:d4:96:39:d7:
         63:ca:56:d4:fc:c4:1a:f1:a7:da:c2:90:30:c9:f1:f1:b8:31:
         25:6e:e5:c1
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUYXtgi+/bkmm92dNuIHteQBXpifIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTYwOEU0MjQ2M0MzQTk2MDNFM0FEMzBEMTBBNzQzNjYx
ODFGODBCMTAeFw0yNjAyMDQyMDUyMzdaFw0yNzAyMDMyMDU3MzdaMDMxMTAvBgNV
BAMTKEE5RTk4RjU0RDE5MEY0RUQ3QzRDMzI4MDc2MTEzQjA1RjQyQzVCMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNMLqJwrdTFWYrexG7AQuVSN4S
KRL4VLiePXrEafAvQgOofPQGGvGahmdAnFjgjXXShipkHY6vqoWT9AkVpPXvGeM8
6NBpxGELSf8SmmojUbEYVjfpzBkm5L4VyQhx4vO/nNMCz3jItDt2oMI2iLIQ/r2L
Sf4IZS7WNapF3k2dV3ERYNqMxESvaWff1SGThUpgO0ppcWOhQ6Jds8X7VOYs9bpl
4gjZi63ZgbK5j8SedSA6OdrOpxMn9jzjmgmXn5W2sLoQs+uuM/mj4YSmFrxUCc5Y
PGQXYon1Z2Mab6j2y/dnNqAIL2f+R9S4gVdst8Z0QmFBA0V2A1+SKu5T97SvAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUqemPVNGQ9O18TDKAdhE7BfQsWwowHwYDVR0j
BBgwFoAU5gjkJGPDqWA+OtMNEKdDZhgfgLEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWJicGMxdmQzbWlWZ250dVdMb2NRTUQ1YnhYRWhxaW9hZmlneTZ0TFpi
MkIvMC9FNjA4RTQyNDYzQzNBOTYwM0UzQUQzMEQxMEE3NDM2NjE4MUY4MEIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U2MDhFNDI0NjNDM0E5NjAz
RTNBRDMwRDEwQTc0MzY2MTgxRjgwQjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzliYnBjMXZkM21pVmdudHVXTG9jUU1ENWJ4WEVocWlvYWZpZ3k2dExaYjJCLzAv
MzEzNzM3MmUzOTMzMmUzMTMzMzgyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM4
MzMzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsV2KMA0GCSqGSIb3DQEBCwUAA4IBAQAXvrtMk5AI
QQvWDB+fqKN4Q99490p7yagE0lA+Knin5+6vwHCxmQ8AoHAgdnxRzOeixcttsSHA
SI6ukUUjqrlUYKkcps+I2YD+A/fqFBUXeIuWXEwCUZWGqlqvrIa11d8wtjfIvc95
EuEfyUr4YnOcuHV0bk3vlBcLITNi/vkcbJVPbV+Ou7KNJwS5nyOSfNrNjQb/y4cs
p9D+UMCxkXVtq4jCEtqD1tWSAMLuobGI32SMsWoDCmovf1Z95kexDQ9Ud51W2oVW
gcvARbwLcNh3zoc5r/bisnC4++dKVvJz3h6mw8PsWtSWOddjylbU/MQa8afawpAw
yfHxuDElbuXB
-----END CERTIFICATE-----
Generated at Mon Feb 23 04:22:21 2026 by rpki-client