Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3137372e35352e36362e302f32332d3234203d3e20323634343936.roa
File:                     3137372e35352e36362e302f32332d3234203d3e20323634343936.roa (raw, json)
Hash identifier:          2pSyRk07QJVN1pPaCCKWdoZ1IQGj8bwYbAhtZMBF/yc=
Subject key identifier:   65:FC:0C:EF:C1:31:D6:43:2C:CC:52:52:79:EF:A4:0D:E5:25:B6:BB
Certificate issuer:       /CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
Certificate serial:       4BDA904F0F4E8CA0C9AD92D35A54493B9B704E46
Authority key identifier: 97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3137372e35352e36362e302f32332d3234203d3e20323634343936.roa
Signing time:             Wed 28 Jan 2026 18:12:34 +0000
ROA not before:           Wed 28 Jan 2026 18:07:34 +0000
ROA not after:            Wed 27 Jan 2027 18:12:34 +0000
asID:                     264496
IP address blocks:        177.55.66.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl
                          rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 00:15:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:da:90:4f:0f:4e:8c:a0:c9:ad:92:d3:5a:54:49:3b:9b:70:4e:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
        Validity
            Not Before: Jan 28 18:07:34 2026 GMT
            Not After : Jan 27 18:12:34 2027 GMT
        Subject: CN=65FC0CEFC131D6432CCC525279EFA40DE525B6BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1c:96:a0:94:c4:4c:55:c2:b4:e7:62:fe:6f:
                    32:b8:e7:f3:e0:24:de:ab:ef:dd:35:8d:91:f2:16:
                    0c:92:c7:d0:7a:0c:c0:2a:cf:83:f7:80:4a:9e:a1:
                    c7:e3:ac:9f:8e:70:b2:dc:16:cc:db:75:4c:38:ae:
                    a8:77:fe:2f:fe:17:06:ba:4f:50:7e:3a:23:27:05:
                    5d:80:fb:29:fa:19:8b:c4:b0:df:14:8d:65:ff:2b:
                    82:2d:b0:a3:47:8f:5b:e8:00:35:b0:ab:33:6b:c0:
                    e7:32:2a:73:21:a7:30:be:6a:92:7e:c2:5d:70:2a:
                    8d:cb:1a:f4:95:53:48:f9:86:02:09:24:be:a3:be:
                    0f:02:97:d6:9b:57:a7:86:78:00:7a:61:87:49:5c:
                    aa:d6:8b:a0:91:99:b3:bb:24:84:20:54:2d:89:a8:
                    7f:57:ba:57:fc:94:d5:3f:79:49:06:db:76:0d:48:
                    05:5e:a3:92:28:6e:25:a1:74:6d:05:f8:59:e7:85:
                    c9:a8:c1:81:4f:96:98:30:dd:75:c2:ee:8f:64:56:
                    29:d6:00:aa:8d:cd:17:6a:03:3b:20:8b:06:29:68:
                    7b:ad:4c:b5:1e:a0:72:d2:04:26:d4:35:b3:a0:47:
                    96:75:7c:40:20:ee:a7:e6:af:93:12:31:21:19:aa:
                    c0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:FC:0C:EF:C1:31:D6:43:2C:CC:52:52:79:EF:A4:0D:E5:25:B6:BB
            X509v3 Authority Key Identifier:
                keyid:97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3137372e35352e36362e302f32332d3234203d3e20323634343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:42:e6:ef:dc:08:78:14:77:32:5b:ad:5a:fd:8a:82:b2:2f:
         a8:72:c0:32:e8:f1:f6:92:5f:a6:95:cf:7d:fa:3a:29:2b:b8:
         89:76:4c:39:98:a0:74:72:e6:3b:bf:96:69:78:05:a9:6b:46:
         ef:2d:40:1c:c1:06:79:91:8b:33:d6:db:4b:6a:40:f0:01:12:
         d5:13:f4:80:d4:5e:81:11:d9:c7:c4:7e:bd:ee:99:69:ff:f8:
         1c:64:cb:b4:28:19:06:cd:48:14:b2:45:f8:7e:cf:ba:c4:5e:
         fa:88:dc:2f:0d:78:3e:2a:ae:61:41:8a:5f:1e:ae:df:d3:c6:
         17:ef:a5:d7:2e:d3:cc:e5:d3:5d:83:a3:50:c4:db:4b:45:e8:
         26:ad:e2:03:9c:d0:c4:a4:c1:88:3b:ff:42:dd:42:69:6d:57:
         5d:43:23:5d:22:51:20:70:10:30:f7:f2:b4:05:0d:f6:78:24:
         c8:70:54:9a:0a:10:f0:a2:db:90:a8:07:03:ea:d8:98:b0:f4:
         03:ce:16:c4:cf:a7:10:86:54:42:84:e0:b5:f3:99:a6:fd:1d:
         20:5c:b9:2c:27:2e:d6:e8:97:49:a8:02:9e:28:50:ea:9b:4b:
         5e:f1:3a:a0:85:8f:26:22:2f:0e:46:95:7d:52:a6:6f:b8:0b:
         84:98:da:c7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUS9qQTw9OjKDJrZLTWlRJO5twTkYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTcwQ0MyNkREMEMzNTNDMjQ0RjcyRjVCNjJBRTRCNUIw
RUU1QUU3QzAeFw0yNjAxMjgxODA3MzRaFw0yNzAxMjcxODEyMzRaMDMxMTAvBgNV
BAMTKDY1RkMwQ0VGQzEzMUQ2NDMyQ0NDNTI1Mjc5RUZBNDBERTUyNUI2QkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbHJaglMRMVcK052L+bzK45/Pg
JN6r7901jZHyFgySx9B6DMAqz4P3gEqeocfjrJ+OcLLcFszbdUw4rqh3/i/+Fwa6
T1B+OiMnBV2A+yn6GYvEsN8UjWX/K4ItsKNHj1voADWwqzNrwOcyKnMhpzC+apJ+
wl1wKo3LGvSVU0j5hgIJJL6jvg8Cl9abV6eGeAB6YYdJXKrWi6CRmbO7JIQgVC2J
qH9Xulf8lNU/eUkG23YNSAVeo5IobiWhdG0F+FnnhcmowYFPlpgw3XXC7o9kVinW
AKqNzRdqAzsgiwYpaHutTLUeoHLSBCbUNbOgR5Z1fEAg7qfmr5MSMSEZqsA1AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUZfwM78Ex1kMszFJSee+kDeUltrswHwYDVR0j
BBgwFoAUlwzCbdDDU8JE9y9bYq5LWw7lrnwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR25SYmp4Y2h1RDZySFB1Znc1SzdicVR3MUR3ZmtTUTRLWGFOZURTSlZa
bmcvMC85NzBDQzI2REQwQzM1M0MyNDRGNzJGNUI2MkFFNEI1QjBFRTVBRTdDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk3MENDMjZERDBDMzUzQzI0
NEY3MkY1QjYyQUU0QjVCMEVFNUFFN0MuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0duUmJqeGNodUQ2ckhQdWZ3NUs3YnFUdzFEd2ZrU1E0S1hhTmVEU0pWWm5nLzAv
MzEzNzM3MmUzNTM1MmUzNjM2MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjM0
MzQzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsTdCMA0GCSqGSIb3DQEBCwUAA4IBAQAGQubv3Ah4
FHcyW61a/YqCsi+ocsAy6PH2kl+mlc99+jopK7iJdkw5mKB0cuY7v5ZpeAWpa0bv
LUAcwQZ5kYsz1ttLakDwARLVE/SA1F6BEdnHxH697plp//gcZMu0KBkGzUgUskX4
fs+6xF76iNwvDXg+Kq5hQYpfHq7f08YX76XXLtPM5dNdg6NQxNtLRegmreIDnNDE
pMGIO/9C3UJpbVddQyNdIlEgcBAw9/K0BQ32eCTIcFSaChDwotuQqAcD6tiYsPQD
zhbEz6cQhlRChOC185mm/R0gXLksJy7W6JdJqAKeKFDqm0te8TqghY8mIi8ORpV9
UqZvuAuEmNrH
-----END CERTIFICATE-----
Generated at Mon Feb 23 07:01:41 2026 by rpki-client