Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3137372e37302e3234302e302f32322d3234203d3e203532393734.roa
File:                     3137372e37302e3234302e302f32322d3234203d3e203532393734.roa (raw, json)
Hash identifier:          3FGiQNocxmRB5mu+t5x6eJBiF1iT1QKEzxoA803OKQc=
Subject key identifier:   63:F7:7A:98:FE:04:12:13:61:7F:D4:F8:80:A6:1A:16:30:32:C7:F7
Certificate issuer:       /CN=E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68
Certificate serial:       50A2880C5E8741715D6F392A30DD75861D363124
Authority key identifier: E0:B7:8B:98:B4:09:4A:86:E5:8E:4F:A9:EA:D0:06:4F:2A:8C:CF:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3137372e37302e3234302e302f32322d3234203d3e203532393734.roa
Signing time:             Fri 13 Feb 2026 14:40:03 +0000
ROA not before:           Fri 13 Feb 2026 14:35:03 +0000
ROA not after:            Fri 12 Feb 2027 14:40:03 +0000
asID:                     52974
IP address blocks:        177.70.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.crl
                          rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 18:34:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:a2:88:0c:5e:87:41:71:5d:6f:39:2a:30:dd:75:86:1d:36:31:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68
        Validity
            Not Before: Feb 13 14:35:03 2026 GMT
            Not After : Feb 12 14:40:03 2027 GMT
        Subject: CN=63F77A98FE041213617FD4F880A61A163032C7F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d3:cc:f5:6d:8c:2c:64:5f:1f:53:f3:a3:9c:
                    ef:32:9b:e2:f3:03:d7:44:23:a5:4e:55:a3:bf:87:
                    52:69:10:c1:46:ce:79:45:c5:cd:64:2e:25:da:f8:
                    3f:b1:d2:36:99:64:6a:86:5c:a8:c9:ad:5f:03:f5:
                    b5:e5:ee:83:88:8d:c9:61:64:e6:e3:af:b6:a3:6e:
                    23:d4:82:09:9e:d0:f8:52:45:f5:ac:d4:41:55:4d:
                    ef:3e:bc:46:3b:13:db:df:d3:e5:89:10:bd:8e:bf:
                    32:d7:ad:f0:6d:c1:27:d0:3f:af:02:73:5d:23:02:
                    64:40:31:84:96:e9:db:79:74:41:d2:e8:45:87:f1:
                    f2:66:09:bd:5e:86:0d:9d:00:ab:af:ce:65:ad:70:
                    a3:0b:6a:60:41:da:7a:7a:b9:f1:42:9f:97:fd:e8:
                    fb:82:a2:e0:0e:ed:5e:10:d9:c2:30:65:c7:9f:bd:
                    42:c0:74:ab:e3:db:a9:e0:c5:87:28:bc:77:78:2b:
                    43:1d:26:d4:20:51:b2:02:38:6e:c9:71:63:b5:b5:
                    b0:7f:33:fc:71:96:ff:87:bd:0b:74:36:21:f5:7f:
                    b7:63:20:95:2a:09:76:0b:bb:c4:ce:45:9b:5f:bd:
                    15:2f:93:1b:c8:60:95:ac:f8:4b:74:d1:dc:77:5a:
                    7c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F7:7A:98:FE:04:12:13:61:7F:D4:F8:80:A6:1A:16:30:32:C7:F7
            X509v3 Authority Key Identifier:
                keyid:E0:B7:8B:98:B4:09:4A:86:E5:8E:4F:A9:EA:D0:06:4F:2A:8C:CF:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3137372e37302e3234302e302f32322d3234203d3e203532393734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:5d:5b:0a:c3:ef:58:36:ba:5e:10:ab:30:b7:4f:58:c0:8e:
         73:e2:b3:c6:23:8a:36:09:db:2a:15:af:d0:2d:d9:93:6e:54:
         22:83:f1:aa:6b:08:bd:07:0a:bc:24:c9:d3:32:0f:b7:ee:00:
         64:02:58:72:16:09:5a:70:42:bd:87:e8:2a:f4:39:b3:75:29:
         79:29:0f:b1:36:1b:5f:34:6c:cd:64:e1:c3:9f:83:e3:e6:5f:
         7f:a4:da:54:fb:a8:ad:e1:ec:8b:d1:98:4a:3b:49:00:a1:81:
         82:ce:3f:3a:fb:4d:26:3e:e3:66:fb:e8:11:4e:77:eb:02:4d:
         dc:78:23:94:0e:02:91:8d:0c:54:88:ee:cb:80:92:17:67:f5:
         71:0c:31:2c:8e:fe:2b:e5:b4:15:06:ce:c9:6f:01:46:05:51:
         66:35:63:67:eb:8c:a9:49:d4:7f:96:6d:66:df:bd:e4:eb:3a:
         8b:33:de:a6:d6:74:ec:fc:7f:7d:83:cc:74:77:2d:dd:3c:35:
         46:a7:ba:8f:9e:97:c3:3a:ad:73:96:2f:1f:2a:ca:db:37:be:
         57:2f:a4:cf:43:75:35:43:87:e4:d8:2b:25:30:02:06:5f:4e:
         11:a3:e9:21:3d:8e:30:10:88:05:bf:5c:8a:f1:ea:45:f5:d5:
         54:4e:35:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:38:15 2026 by rpki-client