Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3137372e36362e3134382e302f32322d3332203d3e203532383437.roa
File:                     3137372e36362e3134382e302f32322d3332203d3e203532383437.roa (raw, json)
Hash identifier:          RmplN4gP0rfEH49EGPOjX6lPM+6EM+VZfi1Fjdb3I/8=
Subject key identifier:   B5:5B:74:D7:7C:A6:1B:7A:12:49:8A:3A:A4:49:E4:D7:3C:E2:4D:94
Certificate issuer:       /CN=3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8
Certificate serial:       4FAFE16BED683199BF3A6A186C2233C7A7552698
Authority key identifier: 3A:FA:C4:1D:B1:2E:69:24:E2:22:CD:6C:84:07:E7:F6:04:E6:DE:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3137372e36362e3134382e302f32322d3332203d3e203532383437.roa
Signing time:             Tue 17 Feb 2026 01:16:39 +0000
ROA not before:           Tue 17 Feb 2026 01:11:39 +0000
ROA not after:            Tue 16 Feb 2027 01:16:39 +0000
asID:                     52847
IP address blocks:        177.66.148.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.crl
                          rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 00:52:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:af:e1:6b:ed:68:31:99:bf:3a:6a:18:6c:22:33:c7:a7:55:26:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8
        Validity
            Not Before: Feb 17 01:11:39 2026 GMT
            Not After : Feb 16 01:16:39 2027 GMT
        Subject: CN=B55B74D77CA61B7A12498A3AA449E4D73CE24D94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:20:35:f1:c8:71:41:7b:bb:07:1d:98:58:c6:
                    59:02:77:ef:7b:d2:7d:dc:18:42:09:58:04:b3:9a:
                    fc:a0:ae:61:3c:62:e5:37:9a:98:a7:af:5b:46:3a:
                    b6:da:0f:11:6a:26:34:15:67:57:66:bb:78:5e:09:
                    bb:d4:ff:22:f5:e3:8b:10:74:c3:23:1a:46:5b:06:
                    7d:7f:2b:60:7e:99:13:62:c8:f9:a7:4e:22:c4:21:
                    0a:94:4f:7e:10:39:12:7c:25:cf:dc:3d:b4:7f:66:
                    6c:43:6a:87:a8:c1:85:37:af:9c:28:c7:e4:6d:29:
                    3e:9a:67:5d:ce:2d:84:00:a3:31:87:b6:d4:44:ee:
                    7a:97:85:6d:4d:f0:0a:71:f1:1f:e9:de:d5:15:4b:
                    e0:f1:10:26:65:3e:6a:ce:20:91:bc:6f:dd:65:08:
                    03:b7:84:a1:7b:e8:a2:0e:11:2c:ec:bf:e2:a7:1d:
                    55:1b:69:31:9a:c2:35:73:bf:5f:8a:3a:ab:90:c7:
                    4f:c9:33:9e:a8:42:48:8b:27:f3:a6:27:96:63:f3:
                    9e:a8:37:eb:87:3f:b5:9c:b4:25:4a:4b:fa:a4:37:
                    83:71:73:b5:3d:a1:9c:c0:37:88:d2:c9:8a:0e:41:
                    90:63:ef:c7:e7:f0:da:58:9a:5b:0c:1e:d0:77:97:
                    b4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:5B:74:D7:7C:A6:1B:7A:12:49:8A:3A:A4:49:E4:D7:3C:E2:4D:94
            X509v3 Authority Key Identifier:
                keyid:3A:FA:C4:1D:B1:2E:69:24:E2:22:CD:6C:84:07:E7:F6:04:E6:DE:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3137372e36362e3134382e302f32322d3332203d3e203532383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:b6:5a:35:7d:48:d5:94:06:23:09:2c:f8:00:85:3b:bc:83:
         b6:72:76:81:d6:f8:44:2f:6d:3b:0c:03:66:19:3c:58:ce:9d:
         46:f6:b0:e0:b0:64:b7:c1:ec:65:f8:3e:ca:53:28:b5:dd:d0:
         30:57:0d:4e:f1:6a:de:f3:0a:2b:e6:74:72:9f:66:ad:48:a7:
         c3:93:e5:28:88:00:28:a2:4d:e2:7d:36:9d:a6:b5:ff:b9:0d:
         fe:1e:a7:3b:6b:41:9d:01:7f:0d:8e:4b:81:bf:19:4a:e1:bc:
         e2:28:a4:4d:38:e0:0a:51:4a:30:1f:62:0b:3e:9e:f8:c4:3e:
         55:43:9f:a2:f1:40:38:17:27:1c:e0:ae:92:34:fe:15:80:30:
         9d:95:68:60:b4:fe:15:3d:61:4e:90:cd:79:f7:82:19:03:90:
         ce:24:2c:42:f5:c6:35:36:9a:dd:4a:d4:c8:57:4b:32:43:2d:
         72:ea:ec:e5:20:9e:44:87:4a:5a:fb:e8:74:9d:12:ff:f1:9b:
         01:db:a9:83:3d:af:ed:80:0a:e8:93:5c:80:4b:fb:a3:24:0e:
         46:52:39:b0:f1:57:62:da:53:9f:d2:90:a7:4e:a4:40:1a:15:
         11:15:b8:92:9d:69:fa:ea:ac:e7:22:00:a2:79:35:20:58:e5:
         46:4a:0a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:02:40 2026 by rpki-client