Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/3137372e33362e36362e302f32332d3233203d3e20323730393630.roa
File:                     3137372e33362e36362e302f32332d3233203d3e20323730393630.roa (raw, json)
Hash identifier:          pVrkGh3IQXZBGsau62R+WOa1X3lZKY9iyn2cddJT4XE=
Subject key identifier:   F9:11:4D:BC:EA:E0:E4:D7:50:05:C5:FE:92:B7:81:B2:08:09:B9:C4
Certificate issuer:       /CN=869C4BCAFE918920C9C1F12D6D940F5B1B9883AC
Certificate serial:       4CEAD73919F06C94B55B3ED0076A2D5A76C2ED8A
Authority key identifier: 86:9C:4B:CA:FE:91:89:20:C9:C1:F1:2D:6D:94:0F:5B:1B:98:83:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/869C4BCAFE918920C9C1F12D6D940F5B1B9883AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/3137372e33362e36362e302f32332d3233203d3e20323730393630.roa
Signing time:             Wed 18 Feb 2026 13:39:51 +0000
ROA not before:           Wed 18 Feb 2026 13:34:51 +0000
ROA not after:            Wed 17 Feb 2027 13:39:51 +0000
asID:                     270960
IP address blocks:        177.36.66.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/869C4BCAFE918920C9C1F12D6D940F5B1B9883AC.crl
                          rsync://rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/869C4BCAFE918920C9C1F12D6D940F5B1B9883AC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/869C4BCAFE918920C9C1F12D6D940F5B1B9883AC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 03:26:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:ea:d7:39:19:f0:6c:94:b5:5b:3e:d0:07:6a:2d:5a:76:c2:ed:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=869C4BCAFE918920C9C1F12D6D940F5B1B9883AC
        Validity
            Not Before: Feb 18 13:34:51 2026 GMT
            Not After : Feb 17 13:39:51 2027 GMT
        Subject: CN=F9114DBCEAE0E4D75005C5FE92B781B20809B9C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:93:50:d9:23:b7:de:71:13:a9:b3:3f:0f:1d:
                    20:a7:b0:82:cf:ea:f2:a6:d9:15:c4:78:cc:13:d5:
                    3d:e3:e0:13:d1:62:7c:87:65:20:0d:e2:4a:47:9c:
                    e2:fa:95:9d:42:4b:a9:39:14:71:f5:aa:77:dd:4e:
                    ae:a6:43:a5:5d:38:55:3f:21:c7:28:8c:fd:3f:a5:
                    05:42:48:54:40:74:b1:c1:61:13:2d:50:d8:1f:35:
                    d3:cf:02:d1:65:37:de:cf:e5:a4:bc:1c:3e:4d:49:
                    4f:15:4b:c8:e5:6d:85:c0:15:21:ee:bb:b3:69:56:
                    2d:bf:cc:20:0a:cd:25:c2:ad:ca:f3:b2:81:b3:74:
                    05:f4:ab:6d:f8:e8:03:da:74:36:b8:16:f2:e3:50:
                    79:f4:9d:e6:79:73:2c:22:6a:bc:84:db:63:4d:9e:
                    2e:f4:e2:e3:b1:36:b5:36:a3:d0:20:13:99:53:e0:
                    3e:42:70:84:c2:16:17:b6:1d:3e:7b:14:f3:76:1e:
                    82:c5:34:2a:48:49:92:85:73:d7:72:1c:64:90:f0:
                    1a:7b:47:5a:fc:ae:95:4f:9a:3a:f0:eb:b0:e4:9c:
                    0e:13:6f:8f:a0:df:6e:3a:1b:6a:1c:03:80:20:8c:
                    a2:c6:74:76:57:5a:44:ea:05:53:6e:25:4a:dd:9b:
                    30:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:11:4D:BC:EA:E0:E4:D7:50:05:C5:FE:92:B7:81:B2:08:09:B9:C4
            X509v3 Authority Key Identifier:
                keyid:86:9C:4B:CA:FE:91:89:20:C9:C1:F1:2D:6D:94:0F:5B:1B:98:83:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/869C4BCAFE918920C9C1F12D6D940F5B1B9883AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/869C4BCAFE918920C9C1F12D6D940F5B1B9883AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/3137372e33362e36362e302f32332d3233203d3e20323730393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:db:47:ed:3e:b8:95:74:1c:ea:cb:06:33:d7:77:6a:0c:1d:
         9f:e4:02:60:d3:d5:64:08:1e:94:d1:36:0f:c8:6b:ff:29:d2:
         2a:47:ca:46:d5:01:e2:8a:4c:e4:1b:e2:39:c9:ff:e7:9d:b8:
         4d:d1:d6:68:1a:c2:7d:12:bb:55:80:4e:32:71:30:e4:f4:d5:
         77:36:75:33:60:b0:b8:97:23:5f:d9:87:48:45:0e:6d:5f:88:
         44:18:93:a1:f5:cc:e0:69:dc:c3:a1:72:61:ba:5a:0c:71:18:
         9f:d4:41:81:a8:ad:af:95:73:b2:9c:87:89:c7:50:49:7c:22:
         37:19:f4:66:5a:63:a2:b5:29:17:bf:b2:62:b1:81:5e:c3:a3:
         f8:39:14:a2:1b:0c:70:73:48:d2:aa:dd:48:b8:92:8c:97:f4:
         11:8d:5a:3d:5c:66:c9:24:08:ea:2a:1f:ad:68:c4:4d:eb:c4:
         34:86:bd:1c:92:b8:44:8b:91:52:e8:be:2d:fa:7c:ed:a1:16:
         32:fb:14:32:3f:ca:39:64:55:be:9c:74:d7:a5:87:06:46:f7:
         78:0d:5a:be:3e:2f:8d:1e:7f:80:f0:ed:e2:e1:ff:e4:16:ab:
         23:ef:f8:bb:81:85:57:44:13:58:3c:26:71:4d:2f:29:46:36:
         65:9e:ab:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:30:37 2026 by rpki-client