Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/3137372e33382e34382e302f32312d3234203d3e20323632393131.roa
File:                     3137372e33382e34382e302f32312d3234203d3e20323632393131.roa (raw, json)
Hash identifier:          uWJtp7uFFkg9YJC85mNu3rofW9IdXo7/5lcNXkIopVM=
Subject key identifier:   8D:A9:56:1C:F4:26:F7:C6:85:4D:13:0B:39:59:97:48:73:03:51:1B
Certificate issuer:       /CN=85E4C8B81C16A05985A229E7683A26B643583C85
Certificate serial:       6E1C88A91F0C90275C1378CB233A6DB6B7A56C93
Authority key identifier: 85:E4:C8:B8:1C:16:A0:59:85:A2:29:E7:68:3A:26:B6:43:58:3C:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85E4C8B81C16A05985A229E7683A26B643583C85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/3137372e33382e34382e302f32312d3234203d3e20323632393131.roa
Signing time:             Wed 04 Feb 2026 12:49:14 +0000
ROA not before:           Wed 04 Feb 2026 12:44:14 +0000
ROA not after:            Wed 03 Feb 2027 12:49:14 +0000
asID:                     262911
IP address blocks:        177.38.48.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/85E4C8B81C16A05985A229E7683A26B643583C85.crl
                          rsync://rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/85E4C8B81C16A05985A229E7683A26B643583C85.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85E4C8B81C16A05985A229E7683A26B643583C85.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 20:21:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:1c:88:a9:1f:0c:90:27:5c:13:78:cb:23:3a:6d:b6:b7:a5:6c:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85E4C8B81C16A05985A229E7683A26B643583C85
        Validity
            Not Before: Feb  4 12:44:14 2026 GMT
            Not After : Feb  3 12:49:14 2027 GMT
        Subject: CN=8DA9561CF426F7C6854D130B395997487303511B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fa:0c:3c:27:da:b6:17:83:25:ef:e7:e9:0c:
                    88:b2:2b:a5:ba:b3:57:50:21:34:c7:a1:bb:59:a9:
                    a6:84:73:e2:7a:3f:c0:0e:aa:d2:eb:e3:45:b6:9e:
                    87:86:c0:53:70:0d:3d:d5:5a:b3:c7:ad:57:8f:48:
                    9e:69:f9:56:05:3c:38:e1:f1:8a:45:1a:63:81:2b:
                    1c:92:b8:ce:3f:e5:4a:cc:6c:e9:f5:4c:c1:6c:34:
                    1b:4a:51:c4:12:49:d0:ae:f8:09:b1:99:ec:f1:f6:
                    6a:5c:dc:a6:48:1b:56:e1:f8:fc:39:b7:60:80:4f:
                    91:d3:d9:0b:5f:e6:81:d3:b9:12:80:44:c0:18:84:
                    4a:54:d1:e9:15:5c:35:33:2f:60:1d:a4:02:dc:4e:
                    50:58:34:35:60:d2:5a:76:b2:16:8b:cf:08:ee:42:
                    41:e5:89:f6:3a:79:91:b7:c9:10:ee:a8:99:59:d1:
                    9f:f9:df:27:04:f6:45:13:2a:92:51:1e:28:80:ad:
                    ef:51:8e:05:db:df:a9:52:c7:58:b5:8a:c9:c0:b9:
                    14:95:1e:df:20:b6:f8:a4:ff:d1:cd:75:56:f7:a4:
                    01:8a:dd:bd:33:73:7a:81:f7:17:d3:de:ed:54:91:
                    89:58:a0:94:26:e9:dc:87:e5:7c:f0:41:d4:1c:a7:
                    45:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A9:56:1C:F4:26:F7:C6:85:4D:13:0B:39:59:97:48:73:03:51:1B
            X509v3 Authority Key Identifier:
                keyid:85:E4:C8:B8:1C:16:A0:59:85:A2:29:E7:68:3A:26:B6:43:58:3C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/85E4C8B81C16A05985A229E7683A26B643583C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85E4C8B81C16A05985A229E7683A26B643583C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/3137372e33382e34382e302f32312d3234203d3e20323632393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         be:08:3b:7a:a3:97:52:ca:e3:5d:d7:99:a7:a4:a1:06:5a:49:
         f4:bd:ea:58:6c:23:5f:55:7b:74:d5:6f:b5:af:dc:75:98:f4:
         ed:e1:cd:dd:9e:e3:41:1b:59:4e:5b:e9:6c:36:03:5b:d3:b1:
         24:a9:13:42:2e:80:92:e1:79:d3:0e:56:cf:21:f7:52:d4:ee:
         0f:fe:d0:20:4e:a8:23:fa:7e:6d:db:02:23:a4:cf:7a:d1:67:
         12:13:12:9a:e5:f4:f7:48:eb:76:0e:f3:31:91:ad:0d:04:9c:
         3c:2c:0d:59:dd:59:cd:3a:04:e3:7d:11:4d:36:c3:c6:14:a7:
         6c:7f:56:39:3f:7b:59:ad:b9:72:d8:fc:f4:a4:a7:0e:ae:81:
         37:51:37:8d:72:52:54:9a:80:44:f3:46:fb:bd:3f:40:8e:c6:
         97:18:b2:03:d4:3f:03:db:75:1e:30:45:45:77:b2:e0:32:44:
         0f:10:5f:ed:65:31:47:45:c5:ea:9f:92:80:f9:df:18:40:f2:
         29:fa:7d:ac:e1:23:dc:0a:1e:85:87:6a:57:b6:25:60:f9:98:
         5f:9c:1c:05:10:fc:32:f0:ed:b0:a8:77:79:34:32:0b:71:30:
         64:65:a5:c0:07:e2:f3:18:27:a8:49:79:df:37:19:f3:08:07:
         12:ed:f3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:46:05 2026 by rpki-client