Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/3137372e33362e36342e302f32322d3232203d3e20323730393630.roa
File:                     3137372e33362e36342e302f32322d3232203d3e20323730393630.roa (raw, json)
Hash identifier:          RKYE6GU95YAxOfC2Ky4p8c69o04zWqGF52cfa1sIAiU=
Subject key identifier:   4B:6A:73:73:C5:2C:31:84:F2:24:B9:BE:FB:CB:A5:83:BE:BD:BE:3F
Certificate issuer:       /CN=869C4BCAFE918920C9C1F12D6D940F5B1B9883AC
Certificate serial:       5C08C9E2D279CC3504A0E1BA8F0D4ECD5BA1A3D7
Authority key identifier: 86:9C:4B:CA:FE:91:89:20:C9:C1:F1:2D:6D:94:0F:5B:1B:98:83:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/869C4BCAFE918920C9C1F12D6D940F5B1B9883AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/3137372e33362e36342e302f32322d3232203d3e20323730393630.roa
Signing time:             Wed 18 Feb 2026 13:39:51 +0000
ROA not before:           Wed 18 Feb 2026 13:34:51 +0000
ROA not after:            Wed 17 Feb 2027 13:39:51 +0000
asID:                     270960
IP address blocks:        177.36.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/869C4BCAFE918920C9C1F12D6D940F5B1B9883AC.crl
                          rsync://rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/869C4BCAFE918920C9C1F12D6D940F5B1B9883AC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/869C4BCAFE918920C9C1F12D6D940F5B1B9883AC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 11:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:08:c9:e2:d2:79:cc:35:04:a0:e1:ba:8f:0d:4e:cd:5b:a1:a3:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=869C4BCAFE918920C9C1F12D6D940F5B1B9883AC
        Validity
            Not Before: Feb 18 13:34:51 2026 GMT
            Not After : Feb 17 13:39:51 2027 GMT
        Subject: CN=4B6A7373C52C3184F224B9BEFBCBA583BEBDBE3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f2:1a:ee:69:78:2e:dd:95:19:be:f8:8c:6d:
                    95:a1:c7:cf:d5:e9:e1:18:33:da:b6:22:61:e5:e7:
                    f9:33:70:18:61:c5:61:e9:11:ee:e5:08:e0:d2:a9:
                    3c:1c:64:37:57:c2:9e:93:ad:d1:0b:59:eb:88:41:
                    5a:da:8b:53:99:6f:e8:46:c0:30:98:6f:e9:6d:57:
                    6a:6d:e1:fc:c3:28:5f:05:bb:91:b3:74:e3:84:05:
                    a3:11:c4:8e:e9:b8:28:ba:cb:d4:20:9b:71:a9:f1:
                    3c:27:a4:1d:c2:32:9d:83:d5:0f:83:62:e7:e0:4b:
                    be:a0:b6:fa:3a:09:af:4b:1f:8f:8d:63:96:f5:41:
                    3b:d3:4c:83:c0:35:a1:8e:cf:bf:37:b2:36:6d:42:
                    ec:51:35:2c:c0:0c:ee:99:5d:92:ba:b6:b5:d3:f3:
                    2a:3c:58:34:72:65:e7:57:49:bc:e5:28:01:68:6c:
                    f6:54:aa:c8:03:96:c7:63:d6:96:0c:8c:da:b5:3e:
                    a7:76:7d:1c:1b:26:cd:1f:2b:5e:e6:ee:f1:7e:c0:
                    a6:3f:9e:98:d7:89:e6:96:9f:a8:64:b8:ba:9f:4c:
                    12:8c:48:3f:45:9e:1b:25:77:59:5b:c2:f0:a7:71:
                    11:38:ee:64:bf:ae:b7:5c:e1:c5:a5:62:6d:76:2b:
                    ca:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:6A:73:73:C5:2C:31:84:F2:24:B9:BE:FB:CB:A5:83:BE:BD:BE:3F
            X509v3 Authority Key Identifier:
                keyid:86:9C:4B:CA:FE:91:89:20:C9:C1:F1:2D:6D:94:0F:5B:1B:98:83:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/869C4BCAFE918920C9C1F12D6D940F5B1B9883AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/869C4BCAFE918920C9C1F12D6D940F5B1B9883AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/3137372e33362e36342e302f32322d3232203d3e20323730393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:d2:d5:f2:6b:8a:fc:43:84:04:49:8a:69:72:53:64:11:84:
         d4:eb:64:34:e3:dd:23:70:b6:e3:87:84:7a:c2:d3:3a:db:e1:
         20:67:25:44:a1:10:fe:67:3f:5d:81:b5:a0:06:ea:fd:e4:b4:
         43:3e:57:a4:a3:60:b1:b2:f0:e8:b7:2a:e9:34:fb:b5:00:da:
         aa:e9:08:ed:42:af:76:93:53:74:f6:4d:b5:dc:19:13:63:11:
         c2:16:0f:f5:aa:dd:08:11:c7:82:68:23:82:83:07:95:ee:03:
         4a:59:d4:c4:87:e2:4b:bc:be:36:0f:00:d9:4d:3b:d1:66:68:
         38:37:d0:2e:e8:4f:d6:51:96:a8:d6:e2:e0:04:cf:1d:64:11:
         2b:c2:4f:55:24:f6:62:19:62:71:1f:11:71:22:67:53:89:d2:
         e8:b2:8f:3e:64:a9:26:85:f4:fd:31:32:1b:f7:49:ac:77:86:
         07:c0:c5:40:94:3b:ff:41:9d:ad:ca:d6:70:16:ff:64:99:dd:
         f4:45:81:00:9c:8c:23:95:c4:e1:ee:ac:e9:57:8f:26:7e:a1:
         55:75:72:6d:20:2b:56:5d:fe:2d:42:26:3b:6e:27:62:76:c0:
         69:db:f8:a9:f4:20:f8:af:bd:bb:4d:7a:0f:71:bc:50:14:68:
         de:93:2d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:30:38 2026 by rpki-client