Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7RHZhR3jv8TF9jD95qhzkr1RuWt42vZDr9jeEY5TdG/1/3230312e3133312e39322e302f32322d3235203d3e203631393434.roa
File:                     3230312e3133312e39322e302f32322d3235203d3e203631393434.roa (raw, json)
Hash identifier:          5DeBKy7YU0AWi5WTSbuHnP+5w5/joBWiWsF63Q6Wz7Y=
Subject key identifier:   A3:C8:C9:9F:61:BC:D4:2E:7C:B7:D3:0D:33:C4:71:3A:C7:43:E6:F6
Certificate issuer:       /CN=1798EFBE5D1BCAD0E943F8010C795C1294AC2647
Certificate serial:       6C19BECC08D86CD557C233E6AAE82EB41EED0678
Authority key identifier: 17:98:EF:BE:5D:1B:CA:D0:E9:43:F8:01:0C:79:5C:12:94:AC:26:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1798EFBE5D1BCAD0E943F8010C795C1294AC2647.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7RHZhR3jv8TF9jD95qhzkr1RuWt42vZDr9jeEY5TdG/1/3230312e3133312e39322e302f32322d3235203d3e203631393434.roa
Signing time:             Thu 05 Feb 2026 12:01:07 +0000
ROA not before:           Thu 05 Feb 2026 11:56:07 +0000
ROA not after:            Thu 04 Feb 2027 12:01:07 +0000
asID:                     61944
IP address blocks:        201.131.92.0/22 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7N7RHZhR3jv8TF9jD95qhzkr1RuWt42vZDr9jeEY5TdG/1/1798EFBE5D1BCAD0E943F8010C795C1294AC2647.crl
                          rsync://rpki-repo.registro.br/repo/7N7RHZhR3jv8TF9jD95qhzkr1RuWt42vZDr9jeEY5TdG/1/1798EFBE5D1BCAD0E943F8010C795C1294AC2647.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1798EFBE5D1BCAD0E943F8010C795C1294AC2647.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 05:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:19:be:cc:08:d8:6c:d5:57:c2:33:e6:aa:e8:2e:b4:1e:ed:06:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1798EFBE5D1BCAD0E943F8010C795C1294AC2647
        Validity
            Not Before: Feb  5 11:56:07 2026 GMT
            Not After : Feb  4 12:01:07 2027 GMT
        Subject: CN=A3C8C99F61BCD42E7CB7D30D33C4713AC743E6F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8d:6c:df:56:86:b0:51:86:c8:8e:1d:8f:e9:
                    e3:e9:8a:59:19:b2:a4:d1:ea:d2:ea:34:82:1b:59:
                    65:63:47:c3:a2:c4:bd:dd:92:16:f3:d5:75:dd:5f:
                    c3:e9:7e:69:74:70:0c:28:db:a0:db:44:91:51:c3:
                    56:d6:91:dd:32:90:50:2a:26:01:d7:9f:ae:3d:87:
                    b5:51:f0:2b:0b:b4:85:8d:c8:90:a9:8e:e9:26:e2:
                    e1:f8:9b:2a:b0:f2:eb:34:15:74:ee:ee:bf:28:ad:
                    8a:7c:00:d9:bb:d6:5f:01:62:71:5f:80:f8:0e:d0:
                    22:38:43:fd:b5:89:61:1d:40:63:c8:16:20:00:98:
                    41:70:b4:df:34:3c:df:24:1b:c9:57:7f:08:62:42:
                    f4:11:0e:64:b5:13:f5:5a:02:33:14:cf:74:bc:ea:
                    fd:d7:c4:81:57:53:8d:16:26:9d:84:fa:ec:b3:1d:
                    89:d0:a1:cb:91:5a:1d:63:7e:e4:34:7a:ac:77:fc:
                    39:59:6b:27:f8:4b:c1:4e:e8:62:fb:d1:0d:6e:fa:
                    f7:a8:78:13:36:73:e0:88:85:b8:2f:33:81:89:58:
                    53:56:f2:09:d5:d9:c5:0e:b5:ca:c1:b3:29:18:e8:
                    6e:7c:a8:ba:ed:9c:2c:9f:45:a6:8a:0e:e3:d1:96:
                    07:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C8:C9:9F:61:BC:D4:2E:7C:B7:D3:0D:33:C4:71:3A:C7:43:E6:F6
            X509v3 Authority Key Identifier:
                keyid:17:98:EF:BE:5D:1B:CA:D0:E9:43:F8:01:0C:79:5C:12:94:AC:26:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7RHZhR3jv8TF9jD95qhzkr1RuWt42vZDr9jeEY5TdG/1/1798EFBE5D1BCAD0E943F8010C795C1294AC2647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1798EFBE5D1BCAD0E943F8010C795C1294AC2647.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7RHZhR3jv8TF9jD95qhzkr1RuWt42vZDr9jeEY5TdG/1/3230312e3133312e39322e302f32322d3235203d3e203631393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:ee:41:e7:21:25:4d:9d:0b:21:ad:2b:44:75:48:b8:04:4b:
         5e:d2:41:f2:4c:39:e2:3d:4f:5c:2f:1a:89:ae:d3:ac:05:f9:
         6d:a4:1e:49:1e:e1:e1:44:a0:50:b4:39:fe:a7:21:d4:fd:ce:
         26:b6:d6:2d:7c:4d:64:28:18:4b:7e:bc:08:cf:3e:3b:70:60:
         2b:95:9d:7a:ae:fb:21:28:61:00:81:c3:42:a2:ba:36:ed:8c:
         e5:80:20:10:0c:d9:93:10:9c:01:fe:45:36:bd:4d:d2:2e:01:
         d2:79:5b:1f:41:49:f8:3f:be:dc:72:ca:33:7b:04:6d:e6:d1:
         09:01:b1:58:b9:14:74:06:40:d4:f8:21:85:19:fb:91:f3:2d:
         97:9d:66:27:9b:c2:ba:ff:53:6b:ce:1a:31:bc:51:0d:52:f5:
         22:f6:43:4f:cc:6f:21:6d:d7:65:e7:84:ed:b6:20:47:6b:98:
         43:ef:41:6d:b7:97:74:36:e8:40:52:1a:f6:17:e8:d2:ab:91:
         47:77:e5:77:4d:2e:42:98:ef:9c:fe:32:c9:e4:66:5e:01:b8:
         fc:4b:4c:cb:9a:f7:6d:ec:8f:cc:38:d8:a0:ce:5e:ad:92:e7:
         92:fb:03:82:47:fa:5e:b2:95:f5:23:9a:6a:7d:0f:59:46:4f:
         24:85:fb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:17:28 2026 by rpki-client