Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3137372e33382e3234302e302f32312d3234203d3e203532393734.roa
File:                     3137372e33382e3234302e302f32312d3234203d3e203532393734.roa (raw, json)
Hash identifier:          IOQg/1rPjxC1rnFiXdMKcxSOM7mQIofcLNLWmPcC7d0=
Subject key identifier:   AB:F5:B7:56:2C:93:44:48:3A:37:24:FB:AE:62:53:F1:B8:F7:FD:B5
Certificate issuer:       /CN=E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68
Certificate serial:       0A04459CB688EF52A52970B1F57A3E859A1997A2
Authority key identifier: E0:B7:8B:98:B4:09:4A:86:E5:8E:4F:A9:EA:D0:06:4F:2A:8C:CF:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3137372e33382e3234302e302f32312d3234203d3e203532393734.roa
Signing time:             Fri 13 Feb 2026 14:40:03 +0000
ROA not before:           Fri 13 Feb 2026 14:35:03 +0000
ROA not after:            Fri 12 Feb 2027 14:40:03 +0000
asID:                     52974
IP address blocks:        177.38.240.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.crl
                          rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 18:34:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:04:45:9c:b6:88:ef:52:a5:29:70:b1:f5:7a:3e:85:9a:19:97:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68
        Validity
            Not Before: Feb 13 14:35:03 2026 GMT
            Not After : Feb 12 14:40:03 2027 GMT
        Subject: CN=ABF5B7562C9344483A3724FBAE6253F1B8F7FDB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f8:a1:d0:64:8f:d0:d2:e2:3f:d7:c1:06:84:
                    0e:90:04:2e:d1:93:00:ec:28:f3:f8:97:7b:07:55:
                    40:3f:b5:3d:be:cb:8b:c8:44:1a:07:fb:9e:67:06:
                    f1:7e:82:c5:dc:ca:9e:ac:06:da:83:63:00:76:4f:
                    83:67:fb:96:93:8c:e6:fb:fb:fc:d2:52:33:90:c9:
                    19:e3:90:63:fe:0b:f5:09:de:40:7d:a9:34:b3:f5:
                    cf:3a:84:48:4a:6b:a5:93:18:3d:0e:05:c8:2f:dd:
                    bb:32:4a:11:32:2d:e4:13:b4:10:ab:e6:e8:f3:6f:
                    c3:88:58:c5:5e:79:69:09:80:01:16:33:20:6e:38:
                    73:65:ed:e7:81:c7:71:d6:15:04:5d:11:0c:e4:9e:
                    e1:31:5e:8f:29:10:86:f1:c4:47:da:25:92:86:4b:
                    dd:f7:b2:fd:5f:83:97:ec:6d:7c:39:52:dd:10:1a:
                    9d:59:8c:99:e3:23:2f:56:fa:ab:a3:47:19:de:c1:
                    bb:e0:bc:11:41:ba:f5:76:a2:7f:fa:e7:db:76:9b:
                    77:c2:03:ff:8b:5c:f4:f0:07:35:e3:ff:c6:4a:4b:
                    20:b1:c4:2c:71:e3:e8:dc:37:6c:af:3d:f2:51:18:
                    cf:ed:c0:43:ff:81:f5:44:29:c6:4e:cf:34:79:4b:
                    ca:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F5:B7:56:2C:93:44:48:3A:37:24:FB:AE:62:53:F1:B8:F7:FD:B5
            X509v3 Authority Key Identifier:
                keyid:E0:B7:8B:98:B4:09:4A:86:E5:8E:4F:A9:EA:D0:06:4F:2A:8C:CF:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3137372e33382e3234302e302f32312d3234203d3e203532393734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3b:8e:93:d2:20:f6:16:49:95:fa:03:58:6b:2b:f6:fe:d1:3d:
         9f:35:fd:3e:af:27:49:29:17:f2:04:4f:0e:f2:4d:f5:f0:2c:
         d2:25:4d:49:7a:71:31:57:08:59:b8:0d:ef:06:ff:58:9d:d5:
         d9:53:80:39:88:d9:04:4a:4a:dd:2c:3d:bf:82:07:0a:47:5e:
         6a:2c:c0:0e:1d:55:d9:7b:2a:01:cf:a7:ec:49:5c:42:56:f8:
         c8:e7:fa:81:03:15:bf:dd:c9:16:3d:7b:ea:ad:48:b6:71:72:
         d2:1e:97:3d:08:ca:b5:b4:f0:7a:d4:d9:65:46:73:45:cd:7a:
         f3:5d:7d:ce:89:39:e1:4a:ac:8a:ff:77:90:88:7b:8c:b0:db:
         9c:74:33:ca:01:85:81:80:f8:ac:4a:b7:42:71:77:b3:6b:e4:
         bd:0c:c0:e3:cf:3a:77:88:1a:64:04:8c:4e:e7:1c:90:9e:e3:
         8d:ab:fe:1b:fd:a6:6e:4f:40:93:5d:53:86:3c:df:b6:83:25:
         3d:56:e0:41:80:6b:7f:54:af:a3:23:b6:38:58:6a:10:3c:4e:
         94:fd:0a:30:de:de:3b:5f:ac:6a:63:1d:dd:ff:26:50:c6:82:
         b2:55:68:1c:19:ae:d9:a9:11:20:ef:c2:d3:97:41:6a:c2:3a:
         0b:f6:3f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:38:14 2026 by rpki-client