Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3137372e35332e37362e302f32322d3234203d3e20323632343630.roa
File:                     3137372e35332e37362e302f32322d3234203d3e20323632343630.roa (raw, json)
Hash identifier:          +k2j8HkdT8sHNisFDREX2flt9oLev8Iz7Z1Si1tazFA=
Subject key identifier:   71:DD:C9:89:E0:96:1C:F1:93:2D:7B:80:FC:33:D4:8C:43:6D:56:19
Certificate issuer:       /CN=9F9264BED48A2C59AB950B4AF92F9DFDE272F864
Certificate serial:       76ED8C6B928734DE5C3825351AFF05D473D7C4A0
Authority key identifier: 9F:92:64:BE:D4:8A:2C:59:AB:95:0B:4A:F9:2F:9D:FD:E2:72:F8:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3137372e35332e37362e302f32322d3234203d3e20323632343630.roa
Signing time:             Tue 10 Feb 2026 11:33:28 +0000
ROA not before:           Tue 10 Feb 2026 11:28:28 +0000
ROA not after:            Tue 09 Feb 2027 11:33:28 +0000
asID:                     262460
IP address blocks:        177.53.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.crl
                          rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 01:38:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:ed:8c:6b:92:87:34:de:5c:38:25:35:1a:ff:05:d4:73:d7:c4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F9264BED48A2C59AB950B4AF92F9DFDE272F864
        Validity
            Not Before: Feb 10 11:28:28 2026 GMT
            Not After : Feb  9 11:33:28 2027 GMT
        Subject: CN=71DDC989E0961CF1932D7B80FC33D48C436D5619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8f:51:f5:71:12:3d:7e:d3:ff:c2:c9:f8:f0:
                    a1:fe:9a:58:b2:68:ff:bf:5f:c6:a3:11:d9:af:af:
                    87:a3:38:85:f5:a2:5d:7f:99:0b:78:0f:78:27:9c:
                    d3:e0:4a:67:a7:dc:4d:47:5d:d2:41:c1:7d:3c:4d:
                    52:97:7c:a5:2f:4d:30:f2:ea:fd:1a:5e:2d:42:20:
                    39:97:8e:af:e5:95:91:57:6b:06:e6:a8:fa:16:2d:
                    dc:70:ee:9a:48:5b:9e:eb:35:62:f5:58:fe:9d:e9:
                    e5:4a:a8:ec:2d:b3:f9:f3:fd:b7:cd:ea:0b:13:a8:
                    ec:54:f2:85:7f:ce:5a:8f:b4:02:97:ff:d2:a1:ea:
                    16:88:f9:5f:89:9b:f7:b6:10:63:ee:f3:af:2e:b3:
                    7d:e7:d3:2e:94:5c:02:69:eb:66:85:96:7d:79:5b:
                    5f:35:11:05:3a:23:0a:ce:3f:67:35:63:a5:1f:9d:
                    ea:22:07:ce:3a:9b:f4:56:7e:dc:08:b3:a1:36:5b:
                    9e:0c:e7:6e:f2:8c:58:a0:72:ea:d0:38:9b:13:bc:
                    af:8f:d0:f2:72:a2:5f:4e:95:41:e6:a0:09:a6:d4:
                    ae:97:67:ce:d8:f4:61:4c:67:d9:f7:a9:c9:24:72:
                    85:2d:d7:c2:26:53:4d:8c:4f:c2:62:31:3f:2e:9f:
                    25:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:DD:C9:89:E0:96:1C:F1:93:2D:7B:80:FC:33:D4:8C:43:6D:56:19
            X509v3 Authority Key Identifier:
                keyid:9F:92:64:BE:D4:8A:2C:59:AB:95:0B:4A:F9:2F:9D:FD:E2:72:F8:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3137372e35332e37362e302f32322d3234203d3e20323632343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:7f:d9:ca:84:71:48:6c:a5:cd:1b:42:89:0e:b6:e4:09:d7:
         ee:d5:bc:d0:46:bf:f7:82:f3:a5:8b:c5:bd:b2:07:91:81:24:
         34:32:a7:bd:98:59:61:fc:c1:99:c7:27:25:f4:e2:62:94:40:
         b5:e4:43:d3:e7:9b:2f:52:25:9d:56:46:c6:9a:10:ec:24:3e:
         ac:fa:db:4a:31:1b:52:0a:31:34:43:96:9a:eb:01:54:0f:3b:
         ad:7c:09:52:8c:e9:24:2e:a7:6e:9f:d4:52:64:43:54:0f:6a:
         02:72:fd:e6:04:01:fa:6c:34:24:e4:7b:e3:75:46:48:91:81:
         66:66:e1:b6:2a:0b:70:95:50:e8:69:bd:ae:5a:a4:10:22:b4:
         c8:d8:ef:6e:35:15:ed:f0:b1:34:2b:04:e6:7a:e6:6e:5d:51:
         f9:76:cd:54:c8:c7:b0:0c:d9:57:d5:05:4d:7a:68:3d:91:78:
         7b:a0:65:be:ab:bf:cc:38:24:98:75:c5:16:32:2f:fa:65:6d:
         af:fa:aa:e8:aa:bf:ea:51:df:78:eb:1f:14:c5:87:c4:b3:37:
         f0:c1:42:f5:de:e9:25:4b:1e:43:12:07:25:ea:b7:68:59:b3:
         a9:dd:34:4d:5e:95:7e:ef:3c:82:d4:9a:d7:2f:f4:09:03:26:
         d2:ba:00:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:54:59 2026 by rpki-client