Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3137372e35352e37392e302f32342d3234203d3e20323634343936.roa
File:                     3137372e35352e37392e302f32342d3234203d3e20323634343936.roa (raw, json)
Hash identifier:          wTs2cu+W5pwTIOfgfcU8fOPs5+GKxMpxwdnhq3WX3iE=
Subject key identifier:   AA:59:72:93:B2:40:2A:DF:13:9A:E8:DC:02:57:08:85:41:E8:2A:A4
Certificate issuer:       /CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
Certificate serial:       4E7D77EAC2054F54A543C54F8812CABB9B1D759C
Authority key identifier: 97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3137372e35352e37392e302f32342d3234203d3e20323634343936.roa
Signing time:             Wed 28 Jan 2026 17:12:34 +0000
ROA not before:           Wed 28 Jan 2026 17:07:34 +0000
ROA not after:            Wed 27 Jan 2027 17:12:34 +0000
asID:                     264496
IP address blocks:        177.55.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl
                          rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 00:15:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:7d:77:ea:c2:05:4f:54:a5:43:c5:4f:88:12:ca:bb:9b:1d:75:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
        Validity
            Not Before: Jan 28 17:07:34 2026 GMT
            Not After : Jan 27 17:12:34 2027 GMT
        Subject: CN=AA597293B2402ADF139AE8DC0257088541E82AA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b8:3d:44:65:d7:92:e4:4e:bb:65:c9:7f:d5:
                    15:15:de:b0:ec:59:0e:d0:6c:80:e4:2e:db:68:af:
                    e7:88:8e:b2:72:e4:1b:c2:3e:d7:82:2b:29:c0:dc:
                    1f:c6:ae:fc:ca:8a:13:43:1a:48:2f:f3:7e:7b:46:
                    f0:00:98:51:57:c8:56:fd:a9:99:09:e8:bd:7b:03:
                    2c:97:ea:34:12:1a:f2:c6:61:44:5c:8e:b0:2e:91:
                    d9:ee:c6:ff:03:44:5c:da:a9:15:64:98:5d:af:9c:
                    24:52:cd:09:10:dc:81:8e:20:69:4e:ba:59:17:55:
                    24:ed:54:d9:27:07:55:54:bb:fb:1c:f5:fa:f5:ba:
                    79:c2:71:22:25:7f:32:64:3c:c0:df:65:87:4e:17:
                    a4:7c:be:be:83:a0:68:7f:de:33:51:ac:59:d1:5c:
                    f2:7a:84:f7:95:d1:4f:e7:fd:c0:4c:6b:3e:6e:b7:
                    f7:44:e8:ba:93:d9:d8:42:5b:61:7f:f2:b2:6e:69:
                    43:d3:6e:a6:a3:a4:e5:a2:6d:6a:bc:34:98:ba:86:
                    71:9c:90:85:8a:96:75:c1:4b:a0:41:3b:3f:9c:1a:
                    dd:40:a5:6c:86:b0:52:6b:1f:e9:f6:7e:dd:0f:eb:
                    a2:68:e0:cc:a9:6a:69:20:58:6a:c7:33:af:37:ae:
                    77:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:59:72:93:B2:40:2A:DF:13:9A:E8:DC:02:57:08:85:41:E8:2A:A4
            X509v3 Authority Key Identifier:
                keyid:97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3137372e35352e37392e302f32342d3234203d3e20323634343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:08:79:da:fe:07:72:a7:a0:16:30:77:50:04:5e:8a:1a:50:
         2a:40:10:02:b8:09:0c:4f:d3:17:18:64:d7:bd:b2:99:eb:50:
         62:c2:84:a0:5e:05:51:de:39:7f:68:3c:ca:3d:06:d6:a2:39:
         a3:f7:a1:20:25:8c:85:1d:f4:b1:b7:da:d6:a4:86:b3:00:51:
         8f:c3:91:9a:8b:ca:d8:33:eb:f2:17:22:85:d3:17:e6:f4:aa:
         6e:58:7c:0a:81:7c:64:b7:54:50:36:77:8b:5f:f7:f1:fa:51:
         89:f8:a8:d5:d7:53:5c:67:e3:03:f4:5b:7d:01:9f:06:33:0a:
         8e:32:e3:12:14:48:df:a8:0d:ea:ea:a1:47:43:1b:1b:d7:09:
         1c:53:d9:2f:29:26:c3:f4:a8:bb:04:4e:c2:60:1a:b4:b2:56:
         d1:3f:ab:e6:d0:b0:bc:1e:4a:9b:9e:32:82:19:f4:ea:84:78:
         7d:46:3b:74:9f:7b:f5:32:92:69:4f:c9:82:14:38:2c:47:01:
         e4:24:8d:f1:53:ea:20:e2:58:40:72:ac:d0:1b:06:ae:9e:0a:
         ea:97:12:0e:01:91:28:55:c7:cf:d7:92:44:0a:18:95:e0:3d:
         30:e8:1c:50:05:7f:8d:aa:78:3d:7a:86:56:60:ba:1d:5d:cc:
         92:61:80:75
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTn136sIFT1SlQ8VPiBLKu5sddZwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTcwQ0MyNkREMEMzNTNDMjQ0RjcyRjVCNjJBRTRCNUIw
RUU1QUU3QzAeFw0yNjAxMjgxNzA3MzRaFw0yNzAxMjcxNzEyMzRaMDMxMTAvBgNV
BAMTKEFBNTk3MjkzQjI0MDJBREYxMzlBRThEQzAyNTcwODg1NDFFODJBQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwuD1EZdeS5E67Zcl/1RUV3rDs
WQ7QbIDkLttor+eIjrJy5BvCPteCKynA3B/GrvzKihNDGkgv8357RvAAmFFXyFb9
qZkJ6L17AyyX6jQSGvLGYURcjrAukdnuxv8DRFzaqRVkmF2vnCRSzQkQ3IGOIGlO
ulkXVSTtVNknB1VUu/sc9fr1unnCcSIlfzJkPMDfZYdOF6R8vr6DoGh/3jNRrFnR
XPJ6hPeV0U/n/cBMaz5ut/dE6LqT2dhCW2F/8rJuaUPTbqajpOWibWq8NJi6hnGc
kIWKlnXBS6BBOz+cGt1ApWyGsFJrH+n2ft0P66Jo4MypamkgWGrHM683rnfRAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUqllyk7JAKt8TmujcAlcIhUHoKqQwHwYDVR0j
BBgwFoAUlwzCbdDDU8JE9y9bYq5LWw7lrnwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR25SYmp4Y2h1RDZySFB1Znc1SzdicVR3MUR3ZmtTUTRLWGFOZURTSlZa
bmcvMC85NzBDQzI2REQwQzM1M0MyNDRGNzJGNUI2MkFFNEI1QjBFRTVBRTdDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk3MENDMjZERDBDMzUzQzI0
NEY3MkY1QjYyQUU0QjVCMEVFNUFFN0MuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0duUmJqeGNodUQ2ckhQdWZ3NUs3YnFUdzFEd2ZrU1E0S1hhTmVEU0pWWm5nLzAv
MzEzNzM3MmUzNTM1MmUzNzM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM0
MzQzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsTdPMA0GCSqGSIb3DQEBCwUAA4IBAQB5CHna/gdy
p6AWMHdQBF6KGlAqQBACuAkMT9MXGGTXvbKZ61BiwoSgXgVR3jl/aDzKPQbWojmj
96EgJYyFHfSxt9rWpIazAFGPw5Gai8rYM+vyFyKF0xfm9KpuWHwKgXxkt1RQNneL
X/fx+lGJ+KjV11NcZ+MD9Ft9AZ8GMwqOMuMSFEjfqA3q6qFHQxsb1wkcU9kvKSbD
9Ki7BE7CYBq0slbRP6vm0LC8HkqbnjKCGfTqhHh9Rjt0n3v1MpJpT8mCFDgsRwHk
JI3xU+og4lhAcqzQGwaungrqlxIOAZEoVcfP15JEChiV4D0w6BxQBX+Nqng9eoZW
YLodXcySYYB1
-----END CERTIFICATE-----
Generated at Mon Feb 23 07:01:57 2026 by rpki-client