Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3133312e3130382e3130322e302f32342d3234203d3e203631363732.roa
File:                     3133312e3130382e3130322e302f32342d3234203d3e203631363732.roa (raw, json)
Hash identifier:          QCBN50hL4Yo7JY3OsJv5Pm6vfAlg9e1tko73ADyg5TA=
Subject key identifier:   34:FF:96:82:7F:F0:F5:48:BF:3B:CF:26:13:D1:D6:35:31:3B:B2:43
Certificate issuer:       /CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
Certificate serial:       76E2F75875D82B96FF06770EEB329D8EBA7285B3
Authority key identifier: 19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3133312e3130382e3130322e302f32342d3234203d3e203631363732.roa
Signing time:             Thu 05 Feb 2026 19:00:36 +0000
ROA not before:           Thu 05 Feb 2026 18:55:36 +0000
ROA not after:            Thu 04 Feb 2027 19:00:36 +0000
asID:                     61672
IP address blocks:        131.108.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl
                          rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 07:07:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:e2:f7:58:75:d8:2b:96:ff:06:77:0e:eb:32:9d:8e:ba:72:85:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
        Validity
            Not Before: Feb  5 18:55:36 2026 GMT
            Not After : Feb  4 19:00:36 2027 GMT
        Subject: CN=34FF96827FF0F548BF3BCF2613D1D635313BB243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:01:cf:20:86:1c:49:a6:f7:7f:87:ab:98:18:
                    01:db:d3:7f:f0:b1:1f:8b:d0:94:62:92:17:dc:22:
                    55:cc:9e:78:7a:59:a5:aa:b6:5d:71:c6:1f:13:09:
                    37:0f:e9:7b:3d:ef:22:43:f2:3d:e9:40:24:d3:d3:
                    fe:ae:ed:a7:5d:90:02:75:3e:c1:7d:93:09:64:ae:
                    52:13:48:52:4e:01:aa:f9:79:e4:c7:86:50:1a:34:
                    89:7d:cd:eb:82:69:d3:81:ea:12:1d:09:be:1f:b1:
                    de:7a:f4:7b:55:ba:b9:18:73:d4:ac:91:31:79:19:
                    da:70:15:19:4b:b7:82:7c:0f:6a:12:cc:55:2d:5f:
                    c9:05:f6:cb:19:92:44:70:18:ce:c9:5d:6b:50:72:
                    c3:80:4f:4b:e3:ca:dc:1e:ec:8f:65:7f:7a:13:c3:
                    8d:1c:2a:05:d4:19:7c:fc:f5:74:b2:bd:98:b8:e1:
                    23:fb:88:8c:33:e0:d8:ae:e8:fc:09:73:5f:c3:58:
                    0a:ac:e6:d1:61:7f:99:51:0b:07:7c:af:3a:88:30:
                    10:11:2b:f8:25:7b:e5:2f:09:3b:10:45:6c:04:65:
                    30:ea:62:bd:dc:88:d3:6e:53:aa:93:3e:27:60:d5:
                    6d:a8:0b:99:0a:1d:fc:31:68:1b:18:b3:bf:26:be:
                    da:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:FF:96:82:7F:F0:F5:48:BF:3B:CF:26:13:D1:D6:35:31:3B:B2:43
            X509v3 Authority Key Identifier:
                keyid:19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3133312e3130382e3130322e302f32342d3234203d3e203631363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:ec:6f:77:61:8d:aa:89:ed:a3:7a:36:e8:fe:28:f6:f7:52:
         e7:3d:ef:a5:f0:d5:c4:63:dd:d2:af:43:85:90:f7:1c:8b:e6:
         0d:af:a2:0d:48:07:23:ad:cc:ca:32:0f:2b:84:90:f0:f3:ba:
         e0:97:46:a8:df:a7:1b:22:2b:c9:5c:54:f8:e4:ec:ab:96:b2:
         17:b1:a7:0d:33:84:c5:10:45:82:f7:dc:c9:dc:e8:c5:14:91:
         6f:3a:79:48:19:a9:73:56:31:c7:fd:c7:85:01:f6:a3:2a:1e:
         5a:25:bc:3f:3c:ba:57:a4:16:52:bc:66:bd:e3:6e:1b:07:0e:
         14:67:21:d6:eb:80:fd:c4:d8:86:f6:ec:ee:56:b9:a6:4d:84:
         54:a1:ba:4b:c7:92:bd:e8:f0:3a:8a:65:f8:22:83:eb:42:a8:
         cb:a5:a4:7b:12:30:66:7f:80:be:98:b5:f1:2e:77:d1:f2:65:
         32:1b:19:8a:47:9a:d4:ef:dd:f9:0a:78:79:34:ea:59:ed:f4:
         5e:fd:ed:91:ce:84:01:91:7c:73:2e:02:3b:7a:91:66:dc:ec:
         9c:e0:33:25:48:6d:ff:da:97:02:be:48:2a:4a:dd:46:94:e2:
         54:d1:98:8e:4d:5d:db:9e:fe:77:9d:91:a3:c0:2d:4c:48:1e:
         5a:c1:43:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 08:49:24 2026 by rpki-client