Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3133312e3130382e3130302e302f32322d3232203d3e203631363732.roa
File:                     3133312e3130382e3130302e302f32322d3232203d3e203631363732.roa (raw, json)
Hash identifier:          n0AEL022JpfEDoF33dUqOP3PhfoZR34ZU7rUTH23RBM=
Subject key identifier:   17:C2:45:16:66:72:6C:CE:64:3D:6A:31:1C:55:A9:88:C1:0B:DC:04
Certificate issuer:       /CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
Certificate serial:       1FBDC9A48BF74852993FB72694B317BA63E51BAC
Authority key identifier: 19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3133312e3130382e3130302e302f32322d3232203d3e203631363732.roa
Signing time:             Thu 05 Feb 2026 19:00:36 +0000
ROA not before:           Thu 05 Feb 2026 18:55:36 +0000
ROA not after:            Thu 04 Feb 2027 19:00:36 +0000
asID:                     61672
IP address blocks:        131.108.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl
                          rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 14:21:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:bd:c9:a4:8b:f7:48:52:99:3f:b7:26:94:b3:17:ba:63:e5:1b:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
        Validity
            Not Before: Feb  5 18:55:36 2026 GMT
            Not After : Feb  4 19:00:36 2027 GMT
        Subject: CN=17C2451666726CCE643D6A311C55A988C10BDC04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ec:7b:af:7b:15:47:70:b4:a2:ba:f6:4b:0c:
                    33:1f:10:6d:25:74:0d:0f:76:de:6b:35:b1:9f:6f:
                    99:aa:35:d4:57:77:4c:8f:5c:82:63:4c:99:3c:de:
                    aa:bd:19:33:0c:db:80:be:19:92:1b:29:a3:74:4b:
                    c9:dc:a8:bf:a0:a8:8a:47:9e:cd:96:b7:86:ed:37:
                    6f:b5:4d:ae:87:9d:d3:08:ca:c1:e4:33:ba:9c:13:
                    71:56:f1:4f:87:9b:0c:e9:f9:1d:83:3b:bd:12:d5:
                    14:40:da:15:15:43:d7:d0:9c:a1:80:14:57:36:30:
                    ec:31:b9:b2:3e:f5:c3:77:98:8a:f3:1a:70:32:b2:
                    74:28:ac:20:8f:81:5a:d9:75:00:81:b0:8a:ae:47:
                    0e:40:e4:d3:d1:ca:ed:a1:a4:4b:02:91:55:d1:58:
                    1f:85:7a:29:de:1d:a0:3c:56:8c:93:ef:4d:ea:83:
                    c6:b2:fa:60:47:ff:25:57:cc:7b:58:96:72:c2:30:
                    76:1c:98:e1:7c:90:a9:bb:99:68:98:cc:24:6a:8e:
                    7f:6a:79:57:9e:6a:39:5d:df:77:f0:df:fe:02:a9:
                    6a:bc:23:ae:c1:ba:51:3f:0d:9f:12:77:62:ef:91:
                    f8:2c:9a:16:11:a5:1f:51:81:e7:56:d8:68:8d:8d:
                    d1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C2:45:16:66:72:6C:CE:64:3D:6A:31:1C:55:A9:88:C1:0B:DC:04
            X509v3 Authority Key Identifier:
                keyid:19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3133312e3130382e3130302e302f32322d3232203d3e203631363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:fc:59:db:b7:68:88:7c:cc:18:3c:1a:3f:fe:3d:d6:8c:c2:
         51:52:28:cd:6e:f0:fe:fe:bd:bc:90:68:d0:91:85:7e:ac:27:
         c4:9c:91:b0:ab:ad:ec:9b:bd:46:62:b2:75:5d:5c:ec:8f:31:
         7f:17:d9:0f:b5:ff:0a:25:d9:18:57:35:72:fe:97:ed:59:77:
         38:52:2a:0d:94:d8:9d:6e:30:40:8b:f1:e7:3d:dd:36:b8:a1:
         4b:a8:48:29:50:35:c8:16:8b:8c:5d:62:cf:dd:ed:61:9c:2b:
         0b:b2:64:5c:46:73:d2:8c:3c:93:dd:e4:05:20:ae:71:e3:f8:
         bb:fe:61:e1:a7:42:2e:78:94:11:40:4d:84:92:05:6c:f4:98:
         bb:07:b3:67:d0:66:01:b9:49:94:78:44:4c:84:34:38:cc:95:
         ec:bd:d4:ad:c3:6c:0b:64:74:62:0e:0b:c2:52:39:73:db:a9:
         3f:05:2a:bb:d4:f9:7c:ef:77:f6:53:a1:f4:6b:87:b0:25:26:
         16:30:c9:22:4d:44:07:91:c1:72:0b:84:56:54:3e:52:9e:6c:
         a6:00:df:fd:98:41:8c:81:32:35:3d:8a:d5:e4:b7:5e:15:43:
         d7:b9:18:b4:9f:2d:f9:e1:ef:7b:4a:53:78:be:a5:df:79:17:
         c3:e1:6c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 05:52:17 2026 by rpki-client