Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AhTtcTiwonURnAN8DweXJPWMTzESrjLXLJJdxribnfMt/0/3137372e35332e3139362e302f32322d3332203d3e203532383333.roa
File:                     3137372e35332e3139362e302f32322d3332203d3e203532383333.roa (raw, json)
Hash identifier:          4bI1Th4xmt358Zw2MtQ9l+6OIoWl8zIWEeXMNxFB+SM=
Subject key identifier:   09:C0:91:E8:4D:66:B4:1E:41:4B:04:AE:35:4C:2B:A3:FE:AF:D3:1C
Certificate issuer:       /CN=E7D27D2743375FBA828F3F59043A0CD785B91CE0
Certificate serial:       3D8026F11780FDFA43A4331333CA09285549CF32
Authority key identifier: E7:D2:7D:27:43:37:5F:BA:82:8F:3F:59:04:3A:0C:D7:85:B9:1C:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D27D2743375FBA828F3F59043A0CD785B91CE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AhTtcTiwonURnAN8DweXJPWMTzESrjLXLJJdxribnfMt/0/3137372e35332e3139362e302f32322d3332203d3e203532383333.roa
Signing time:             Mon 02 Feb 2026 21:49:49 +0000
ROA not before:           Mon 02 Feb 2026 21:44:49 +0000
ROA not after:            Mon 01 Feb 2027 21:49:49 +0000
asID:                     52833
IP address blocks:        177.53.196.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AhTtcTiwonURnAN8DweXJPWMTzESrjLXLJJdxribnfMt/0/E7D27D2743375FBA828F3F59043A0CD785B91CE0.crl
                          rsync://rpki-repo.registro.br/repo/AhTtcTiwonURnAN8DweXJPWMTzESrjLXLJJdxribnfMt/0/E7D27D2743375FBA828F3F59043A0CD785B91CE0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D27D2743375FBA828F3F59043A0CD785B91CE0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 13:58:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:80:26:f1:17:80:fd:fa:43:a4:33:13:33:ca:09:28:55:49:cf:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7D27D2743375FBA828F3F59043A0CD785B91CE0
        Validity
            Not Before: Feb  2 21:44:49 2026 GMT
            Not After : Feb  1 21:49:49 2027 GMT
        Subject: CN=09C091E84D66B41E414B04AE354C2BA3FEAFD31C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b8:eb:3d:0f:ce:99:ca:72:57:89:b3:a5:c9:
                    26:fe:c6:82:1f:2c:3c:29:ca:91:15:2c:77:91:a8:
                    a2:ff:68:dc:31:d9:96:39:4c:ba:9a:6c:de:be:39:
                    dc:f0:b6:74:74:37:bc:08:92:8c:ca:0a:95:4e:78:
                    09:7a:df:ec:9b:a6:0a:30:d8:ef:0f:85:50:39:50:
                    ef:1d:fe:99:eb:49:d6:60:2c:d1:67:39:73:9d:4c:
                    ac:15:61:3b:dc:c6:15:65:8f:78:26:3e:6c:20:be:
                    57:88:ad:dc:99:3f:a9:06:f3:be:25:90:bd:7f:d3:
                    bb:4f:52:3d:fc:8f:af:47:bf:23:54:67:ad:25:16:
                    74:48:62:cd:5c:f7:1d:64:08:cf:c4:66:0f:a7:5d:
                    01:ee:e2:94:5e:51:0b:b6:d2:be:19:38:0a:ac:22:
                    c5:ba:5f:46:23:62:d8:81:05:54:36:ed:46:98:de:
                    ce:f1:77:17:34:d2:63:55:d8:b1:0e:6e:d6:f3:09:
                    50:3a:3e:79:c6:f6:66:af:b8:a9:0f:be:06:32:72:
                    ae:f4:1b:46:80:c9:06:1f:5a:ff:4c:e3:66:c4:35:
                    24:34:b9:43:fd:f4:2b:c0:55:c5:b0:68:72:4e:b3:
                    a2:e5:fe:1b:94:b7:4d:5b:5f:24:33:94:f0:94:f0:
                    ce:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C0:91:E8:4D:66:B4:1E:41:4B:04:AE:35:4C:2B:A3:FE:AF:D3:1C
            X509v3 Authority Key Identifier:
                keyid:E7:D2:7D:27:43:37:5F:BA:82:8F:3F:59:04:3A:0C:D7:85:B9:1C:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AhTtcTiwonURnAN8DweXJPWMTzESrjLXLJJdxribnfMt/0/E7D27D2743375FBA828F3F59043A0CD785B91CE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D27D2743375FBA828F3F59043A0CD785B91CE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AhTtcTiwonURnAN8DweXJPWMTzESrjLXLJJdxribnfMt/0/3137372e35332e3139362e302f32322d3332203d3e203532383333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:55:63:ba:10:c7:da:61:eb:62:00:0b:92:1b:5f:8f:ff:f8:
         73:31:71:bc:ec:96:00:33:97:f5:27:2c:3f:76:40:d9:51:e2:
         ef:8e:cc:aa:b5:38:0c:05:f9:28:a4:6b:a5:ed:2a:82:20:ec:
         43:eb:4c:01:08:ff:5a:81:ed:8a:4b:dc:db:50:49:05:90:42:
         07:e4:94:94:a0:cd:99:c5:d3:9f:bf:7a:f8:04:c7:4e:dc:bc:
         27:73:68:e5:76:13:bb:53:21:1e:89:2d:a4:4e:26:da:b8:5a:
         af:4d:d6:75:57:70:e4:97:bd:4b:af:53:a5:08:07:ff:75:0c:
         74:e9:13:8e:e9:9d:6c:97:fd:ec:bd:f2:38:7e:fb:2c:8b:ea:
         b5:38:31:de:bf:fe:37:9a:6a:6a:16:38:74:06:52:67:90:89:
         a6:f7:7f:ae:9b:10:18:17:b6:d6:9b:79:c2:51:f9:38:64:dd:
         32:b4:29:11:b8:f3:ad:df:62:53:55:d7:28:c8:8d:58:9d:01:
         bc:fa:60:7b:d9:89:80:6b:87:12:00:29:1f:f2:f0:97:01:b5:
         7d:32:3f:95:9b:9a:02:d5:ed:a5:30:8c:f7:c9:fa:0a:54:b8:
         00:3d:40:e9:49:67:2a:7f:dc:20:24:a5:1c:a8:92:11:10:ae:
         6f:d3:b2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:03:52 2026 by rpki-client