Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/3137372e33362e36352e302f32342d3234203d3e20323730393630.roa
File:                     3137372e33362e36352e302f32342d3234203d3e20323730393630.roa (raw, json)
Hash identifier:          UBxGtTYMaMccc/VPSIjoExcbODpWWWs3+QTcecheMKc=
Subject key identifier:   BE:4C:51:4F:DC:87:68:E3:5E:E4:F5:5B:68:D2:18:B2:11:48:C7:7B
Certificate issuer:       /CN=869C4BCAFE918920C9C1F12D6D940F5B1B9883AC
Certificate serial:       583ED04D9526618E51A670DA6B05463D2C7BE926
Authority key identifier: 86:9C:4B:CA:FE:91:89:20:C9:C1:F1:2D:6D:94:0F:5B:1B:98:83:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/869C4BCAFE918920C9C1F12D6D940F5B1B9883AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/3137372e33362e36352e302f32342d3234203d3e20323730393630.roa
Signing time:             Wed 18 Feb 2026 13:39:50 +0000
ROA not before:           Wed 18 Feb 2026 13:34:50 +0000
ROA not after:            Wed 17 Feb 2027 13:39:50 +0000
asID:                     270960
IP address blocks:        177.36.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/869C4BCAFE918920C9C1F12D6D940F5B1B9883AC.crl
                          rsync://rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/869C4BCAFE918920C9C1F12D6D940F5B1B9883AC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/869C4BCAFE918920C9C1F12D6D940F5B1B9883AC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 11:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:3e:d0:4d:95:26:61:8e:51:a6:70:da:6b:05:46:3d:2c:7b:e9:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=869C4BCAFE918920C9C1F12D6D940F5B1B9883AC
        Validity
            Not Before: Feb 18 13:34:50 2026 GMT
            Not After : Feb 17 13:39:50 2027 GMT
        Subject: CN=BE4C514FDC8768E35EE4F55B68D218B21148C77B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6d:30:30:8c:cf:aa:d2:d9:b0:35:08:4c:73:
                    ea:5d:fd:b8:f4:bf:f2:83:52:aa:4e:de:5c:d0:1e:
                    de:fc:27:08:79:33:d1:cb:d9:1c:2c:c4:84:02:cb:
                    b4:63:0e:42:9b:78:aa:b3:81:2d:6a:4a:8a:db:5b:
                    c3:a7:82:ef:63:bd:6f:dc:0f:75:0c:76:24:5e:1d:
                    ec:f8:73:fb:31:11:a2:e0:51:5d:0c:4b:da:58:ac:
                    1e:54:ac:62:93:4a:42:57:b1:8a:91:90:3c:cd:ba:
                    da:c9:f8:e0:a3:ac:08:11:b7:44:30:bc:a3:4c:a0:
                    a0:ea:23:42:ce:e0:4b:0b:81:4f:04:26:72:b2:92:
                    a0:f1:6d:09:16:8b:cc:8d:b3:00:36:aa:80:15:38:
                    b7:e6:17:f6:b9:9d:d7:46:ba:a9:b7:73:26:3b:bf:
                    65:ee:d2:94:6e:40:20:56:1f:00:3a:42:9b:63:c5:
                    3a:81:6c:d6:4a:96:89:bf:8d:9e:2a:ee:e2:cb:7c:
                    17:cd:f3:97:bb:3d:f6:57:c4:2e:62:df:39:a4:fc:
                    38:fb:ee:75:a5:ec:67:68:80:31:ee:f9:04:4f:a5:
                    b3:48:01:1a:d9:7b:71:e6:90:6b:ff:6f:00:bf:ba:
                    47:62:ff:30:f0:a8:54:8a:04:9a:c2:df:03:a6:75:
                    ec:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:4C:51:4F:DC:87:68:E3:5E:E4:F5:5B:68:D2:18:B2:11:48:C7:7B
            X509v3 Authority Key Identifier:
                keyid:86:9C:4B:CA:FE:91:89:20:C9:C1:F1:2D:6D:94:0F:5B:1B:98:83:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/869C4BCAFE918920C9C1F12D6D940F5B1B9883AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/869C4BCAFE918920C9C1F12D6D940F5B1B9883AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/3137372e33362e36352e302f32342d3234203d3e20323730393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:97:e4:8f:13:90:02:66:7b:22:51:c0:39:eb:cb:8d:cd:94:
         4d:87:45:b6:16:41:d4:a7:78:83:7e:48:cf:b6:32:3c:98:c6:
         3c:9c:bd:59:48:1a:99:6a:b1:f6:5f:77:77:13:f5:c0:cd:11:
         35:84:84:38:b3:0b:00:d9:28:2b:db:26:79:85:72:82:cf:38:
         91:aa:bc:c2:ee:3a:77:89:e0:c2:44:30:fd:9a:6f:83:c4:75:
         81:d8:63:f7:16:50:89:27:a9:d4:a2:52:55:de:68:a4:18:93:
         c0:de:30:6e:34:ca:51:56:61:38:85:1f:63:6b:30:23:b8:c0:
         a5:b1:e0:99:05:7c:70:5e:d7:f9:09:46:d9:7f:9a:9f:58:9e:
         7b:38:a6:27:81:f1:4c:7c:1f:7d:aa:16:38:12:78:d1:0a:7b:
         c1:29:83:a9:d1:77:14:ae:2f:c9:26:bf:51:10:9d:66:8c:7c:
         f9:1b:c5:36:42:63:37:ff:bc:90:e2:06:9d:7f:8f:06:6e:28:
         a3:f9:28:1f:c3:d6:c0:31:31:dd:5f:5a:2a:54:90:91:7d:c9:
         f1:35:6d:e1:bb:31:f3:62:fe:2f:f7:2c:27:50:fe:ca:60:7a:
         75:0a:be:11:06:a2:ca:1c:65:33:f6:62:ad:ef:86:01:51:41:
         ed:89:ba:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:30:37 2026 by rpki-client