Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3137372e35352e37332e302f32342d3234203d3e20323634343936.roa
File:                     3137372e35352e37332e302f32342d3234203d3e20323634343936.roa (raw, json)
Hash identifier:          t8ZY64qxYIoFuMMe0k3vcDw3FBjS5ji9AsITc3bBywU=
Subject key identifier:   FE:65:42:DC:2B:EA:4F:00:50:69:03:9B:16:37:D3:D9:19:43:90:FE
Certificate issuer:       /CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
Certificate serial:       764865249FE297902F4E2C87565ED59DF45A1CD2
Authority key identifier: 97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3137372e35352e37332e302f32342d3234203d3e20323634343936.roa
Signing time:             Wed 28 Jan 2026 17:12:34 +0000
ROA not before:           Wed 28 Jan 2026 17:07:34 +0000
ROA not after:            Wed 27 Jan 2027 17:12:34 +0000
asID:                     264496
IP address blocks:        177.55.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl
                          rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 00:15:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:48:65:24:9f:e2:97:90:2f:4e:2c:87:56:5e:d5:9d:f4:5a:1c:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
        Validity
            Not Before: Jan 28 17:07:34 2026 GMT
            Not After : Jan 27 17:12:34 2027 GMT
        Subject: CN=FE6542DC2BEA4F005069039B1637D3D9194390FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a9:11:55:74:b6:7c:13:92:fa:dc:3c:1c:64:
                    54:33:65:0f:4a:2d:41:76:c5:99:11:7e:a4:d0:36:
                    0d:df:10:73:d1:eb:bc:4d:89:fe:82:12:07:3e:fc:
                    0c:76:4b:57:f0:16:69:76:29:ff:24:37:d8:61:42:
                    6f:a2:c8:3e:7f:ab:49:8e:0b:ed:29:ec:3b:22:6f:
                    6f:3f:79:03:54:00:83:4a:3b:02:4a:b2:91:95:c6:
                    5b:3e:8a:fa:e4:c5:38:72:9c:2f:92:d9:9f:de:5e:
                    ce:ec:be:15:a4:13:11:11:60:a8:9a:96:53:8a:67:
                    7b:b7:90:ad:13:8d:a1:43:9d:5f:08:98:b7:3d:b0:
                    b8:a9:14:dc:9b:cb:01:56:18:db:f1:2f:dc:5d:ef:
                    ff:c0:77:06:a9:28:a4:4d:df:11:76:af:70:69:fe:
                    b1:87:e5:df:59:95:06:4b:40:f5:64:3e:74:ba:7c:
                    75:81:b9:7b:34:11:b8:0a:30:55:3c:e8:57:78:71:
                    57:4a:bc:ed:93:90:49:f3:24:1d:4e:d9:6a:7a:48:
                    4b:f7:e8:c2:ba:ca:1f:53:c5:74:fc:3c:46:48:17:
                    c2:4f:25:ef:81:cd:c7:1e:fe:e1:f2:4f:29:9c:54:
                    30:fc:7b:dc:95:fc:15:88:63:3a:eb:1a:a1:61:b9:
                    aa:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:65:42:DC:2B:EA:4F:00:50:69:03:9B:16:37:D3:D9:19:43:90:FE
            X509v3 Authority Key Identifier:
                keyid:97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3137372e35352e37332e302f32342d3234203d3e20323634343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:09:b7:46:71:1f:9b:ad:a9:49:2d:89:8b:c1:85:93:2c:75:
         02:c5:c0:e2:c0:b7:ee:83:c3:15:41:25:48:ec:ca:03:fd:53:
         02:e2:0e:78:19:2c:75:2a:fc:6b:e3:35:e1:73:92:e7:7a:3e:
         e8:17:1e:56:a2:26:8f:56:2f:3b:c7:51:ec:58:97:75:83:ee:
         7e:8d:ed:ad:b6:c4:b7:d1:fd:04:1d:04:35:a4:ee:f9:ab:d2:
         c9:ff:f9:5e:de:52:6e:94:f3:08:a2:e7:12:c0:74:fd:6a:cf:
         e6:79:6c:42:d2:f6:34:c3:d4:86:74:c5:99:9e:ab:26:2c:5d:
         de:74:6e:c6:39:20:85:81:aa:14:00:83:2d:67:9c:c6:f5:62:
         08:8d:a3:9c:0c:65:78:29:df:91:33:df:be:3d:30:45:45:16:
         13:28:98:8c:72:40:7e:4a:95:4a:ee:bc:69:64:e8:a1:bd:22:
         13:ac:3e:ca:3c:b6:dd:ae:5a:0a:ad:d2:91:1d:bf:34:ba:72:
         32:2c:84:d4:35:c1:46:c6:7b:d4:f6:e9:59:a5:13:cc:b0:e7:
         a9:2c:a4:60:19:04:8b:d3:62:6c:44:d6:73:31:d8:00:c3:60:
         70:9a:de:37:be:bb:27:ab:a8:91:56:21:bb:40:8f:87:9e:ce:
         6d:a9:bb:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 07:01:29 2026 by rpki-client