Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3137372e33362e37362e302f32332d3233203d3e20323731323136.roa
File:                     3137372e33362e37362e302f32332d3233203d3e20323731323136.roa (raw, json)
Hash identifier:          1O+rv6XlvbPZca5WvayM1LDM2sBBx6xsJcsb7KU/kII=
Subject key identifier:   83:27:A8:40:C6:7F:59:8D:88:5A:49:C9:D6:C7:1D:76:93:46:D3:E7
Certificate issuer:       /CN=3668F23708FFBF0EE157A9A924E8295BA896F33D
Certificate serial:       0254F8999523BE9E8F1AAF2A20E7572D8BD359B8
Authority key identifier: 36:68:F2:37:08:FF:BF:0E:E1:57:A9:A9:24:E8:29:5B:A8:96:F3:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3668F23708FFBF0EE157A9A924E8295BA896F33D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3137372e33362e37362e302f32332d3233203d3e20323731323136.roa
Signing time:             Mon 26 Jan 2026 19:09:26 +0000
ROA not before:           Mon 26 Jan 2026 19:04:26 +0000
ROA not after:            Mon 25 Jan 2027 19:09:26 +0000
asID:                     271216
IP address blocks:        177.36.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3668F23708FFBF0EE157A9A924E8295BA896F33D.crl
                          rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3668F23708FFBF0EE157A9A924E8295BA896F33D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3668F23708FFBF0EE157A9A924E8295BA896F33D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 22:03:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:54:f8:99:95:23:be:9e:8f:1a:af:2a:20:e7:57:2d:8b:d3:59:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3668F23708FFBF0EE157A9A924E8295BA896F33D
        Validity
            Not Before: Jan 26 19:04:26 2026 GMT
            Not After : Jan 25 19:09:26 2027 GMT
        Subject: CN=8327A840C67F598D885A49C9D6C71D769346D3E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:56:95:db:4c:71:2f:a6:07:3f:83:f9:f3:0f:
                    d9:c9:05:b3:bf:40:e5:08:f5:ee:f9:16:eb:56:49:
                    59:99:a0:51:6a:a9:a8:bc:26:98:5d:26:fc:f7:c3:
                    c4:b1:1a:50:f6:cf:89:1c:0e:f9:13:52:22:15:e5:
                    8f:00:ab:ee:f0:40:89:be:11:13:fb:34:85:3e:10:
                    12:13:33:86:0f:cd:93:93:d0:47:f3:ee:21:88:ca:
                    c1:b8:d9:0b:fc:cd:b5:58:90:43:d3:21:cf:5b:69:
                    31:e5:e9:af:68:68:37:5d:01:fb:a3:da:75:a8:2e:
                    a1:70:32:4b:77:2e:76:83:56:b0:c2:c6:97:3a:32:
                    3d:91:9f:f2:35:e3:d5:14:a9:91:b3:7e:fc:e3:39:
                    e7:a4:45:d5:c7:e0:d4:05:cf:93:05:44:90:bf:3b:
                    29:18:28:b3:d8:b4:51:7b:ae:a3:5f:94:d0:1c:f3:
                    5e:95:4c:1f:2f:66:a6:d8:e9:ad:ee:2c:e1:2f:eb:
                    96:ea:7d:0a:bc:4c:3c:00:2a:07:42:7d:4c:ff:fa:
                    59:44:06:4f:29:e3:1c:41:42:5b:07:3a:3f:94:18:
                    ce:37:57:a0:ee:61:e5:0a:45:43:b0:39:a2:aa:bb:
                    ab:9f:ff:30:de:d0:8f:6b:f6:17:04:19:b9:30:48:
                    f5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:27:A8:40:C6:7F:59:8D:88:5A:49:C9:D6:C7:1D:76:93:46:D3:E7
            X509v3 Authority Key Identifier:
                keyid:36:68:F2:37:08:FF:BF:0E:E1:57:A9:A9:24:E8:29:5B:A8:96:F3:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3668F23708FFBF0EE157A9A924E8295BA896F33D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3668F23708FFBF0EE157A9A924E8295BA896F33D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3137372e33362e37362e302f32332d3233203d3e20323731323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d2:1b:c0:8c:71:8a:e5:37:2b:11:2d:78:90:46:ea:85:1a:6e:
         1a:7c:2e:3b:8a:a3:89:70:0e:ce:2b:b6:44:e8:21:16:d8:e9:
         ba:b0:90:fa:08:4d:16:ae:d4:cf:2a:34:80:6a:03:02:69:b1:
         51:3c:1f:4b:6f:0e:8b:c0:f3:82:41:23:de:4f:d0:58:1e:bc:
         1c:10:1e:eb:26:75:ef:f8:09:ac:7f:25:f2:fd:96:ef:14:9d:
         48:c5:d0:00:2e:9a:87:7a:b9:a9:3b:07:02:a0:51:a7:06:6e:
         21:d4:ce:97:e4:e6:ea:df:91:53:31:26:d4:22:6d:f0:eb:ac:
         82:1b:7c:5e:41:52:dd:41:65:19:17:9a:f3:2b:6b:09:d4:6a:
         83:63:ba:2f:0f:5c:ea:31:28:aa:f7:65:6d:e7:b7:5a:cd:77:
         60:c4:da:1c:98:c8:0d:97:78:db:29:de:7c:ef:8e:2d:ec:13:
         1c:6c:d2:78:d9:df:28:eb:b1:c8:f8:71:fe:78:76:5e:65:65:
         d5:03:9a:98:d9:3f:34:4c:c0:44:a4:0d:17:81:d6:6a:90:b8:
         ed:88:59:4e:ee:17:4c:83:c3:b7:78:1b:9c:08:f5:71:67:03:
         4b:25:b1:c3:bd:49:12:cd:3a:08:fc:4f:5f:91:ac:f1:7a:1a:
         ee:68:b2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 06:44:22 2026 by rpki-client