Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/3133312e3130302e3133322e302f32322d3232203d3e203631363337.roa
File:                     3133312e3130302e3133322e302f32322d3232203d3e203631363337.roa (raw, json)
Hash identifier:          jS9MT5xjuplxrqTpBXZscJqD/lzyhkImPNP0KEJnih8=
Subject key identifier:   00:1A:AE:96:E4:60:C1:18:4D:AC:E1:F5:9A:F4:C1:B1:30:CA:EB:73
Certificate issuer:       /CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
Certificate serial:       16B9CD2A7AEC2E99341895C14AA685C2AFFD0A73
Authority key identifier: 31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/3133312e3130302e3133322e302f32322d3232203d3e203631363337.roa
Signing time:             Thu 05 Feb 2026 01:01:03 +0000
ROA not before:           Thu 05 Feb 2026 00:56:03 +0000
ROA not after:            Thu 04 Feb 2027 01:01:03 +0000
asID:                     61637
IP address blocks:        131.100.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl
                          rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 22:36:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b9:cd:2a:7a:ec:2e:99:34:18:95:c1:4a:a6:85:c2:af:fd:0a:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
        Validity
            Not Before: Feb  5 00:56:03 2026 GMT
            Not After : Feb  4 01:01:03 2027 GMT
        Subject: CN=001AAE96E460C1184DACE1F59AF4C1B130CAEB73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:2b:03:a2:86:32:b2:e6:29:1e:8b:54:15:9a:
                    f1:25:10:86:e8:49:4f:a1:44:85:54:b2:c9:9a:d9:
                    c7:02:99:95:1e:43:88:21:4d:82:c7:9f:80:cd:85:
                    27:13:d0:5a:a8:ae:15:e8:6f:45:7d:0f:6c:59:62:
                    a7:ef:4a:27:d4:03:44:38:be:e0:06:3c:69:15:dd:
                    37:b4:70:67:69:95:d8:88:7d:fb:9a:63:6e:12:c7:
                    7d:bd:e7:7e:7d:c4:bf:7b:8b:ab:d7:89:27:a6:53:
                    57:f0:0e:25:60:6d:2a:84:1d:0e:31:d4:61:00:7b:
                    23:5e:26:b2:e1:73:28:57:bf:e1:07:6b:4d:b2:db:
                    d1:0f:f3:90:67:a4:dc:f7:21:96:ad:db:50:45:df:
                    a0:6d:d2:bc:1e:69:be:02:04:1d:f8:05:af:e4:36:
                    90:cd:a6:51:4c:37:59:69:57:1a:5d:3e:ae:b0:51:
                    9e:6a:53:df:e1:43:5d:b2:79:fe:cf:92:8e:c4:01:
                    e1:37:29:68:f0:fb:8b:6a:c9:cf:48:ba:eb:64:5d:
                    ef:d4:39:42:66:f4:c4:cc:68:f6:a2:aa:f2:1f:26:
                    34:25:d3:91:7d:0d:75:32:43:91:0b:42:cb:d5:f0:
                    82:73:67:09:62:b0:7c:10:06:63:52:ae:de:75:6c:
                    c9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:1A:AE:96:E4:60:C1:18:4D:AC:E1:F5:9A:F4:C1:B1:30:CA:EB:73
            X509v3 Authority Key Identifier:
                keyid:31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/3133312e3130302e3133322e302f32322d3232203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:e4:ce:c4:c4:fd:ec:a2:14:f8:44:22:3b:dc:19:1a:ab:6e:
         97:c0:88:90:2d:eb:21:55:47:ef:28:bf:ef:0f:c8:2b:aa:ec:
         69:37:74:99:f8:40:83:00:f9:50:8f:42:01:c5:4c:b3:06:6a:
         2f:84:93:17:57:df:d9:f5:83:0c:d0:31:09:ad:48:0a:c6:bc:
         10:ad:21:6a:45:64:0c:92:7b:b4:50:44:a2:da:c0:e6:a0:64:
         70:85:e0:0b:25:65:20:9b:07:bb:e0:16:be:34:28:5b:9c:4b:
         09:fc:40:26:5d:57:7a:43:27:0c:5b:dc:cb:2f:b1:21:19:5b:
         99:c1:ac:b1:23:57:80:f3:34:6c:26:0a:f2:74:03:17:ca:46:
         28:7c:f6:a1:3d:c4:26:e9:e9:a5:58:5d:37:5e:59:52:15:58:
         4a:15:d9:7a:1d:a6:7a:49:fc:aa:a2:58:f0:06:62:8e:8c:47:
         6b:8d:4c:26:8f:7b:1b:21:4a:1f:e1:44:3c:67:5d:91:44:26:
         21:5d:eb:a4:f1:ea:4a:7a:c2:42:25:e3:6b:b1:9a:ec:87:8b:
         c0:be:f5:86:64:17:48:d8:1e:80:42:7a:08:94:ba:b0:fd:75:
         16:de:72:57:1c:44:54:91:f0:cd:f9:f5:0d:ba:a8:56:ac:77:
         87:e6:2f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 08:48:56 2026 by rpki-client