Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/3133312e3130302e3133322e302f32332d3233203d3e203631363337.roa
File:                     3133312e3130302e3133322e302f32332d3233203d3e203631363337.roa (raw, json)
Hash identifier:          C4Q+52mhaDXjo3M6OoHweKzB1tFnwL0SZG2CQbDA+sM=
Subject key identifier:   E6:BE:12:85:20:ED:88:B9:C2:5D:87:84:1C:18:11:AB:94:A4:5C:D4
Certificate issuer:       /CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
Certificate serial:       381DC40A1E43C0F9F62D4C5B42278A686469BEA2
Authority key identifier: 31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/3133312e3130302e3133322e302f32332d3233203d3e203631363337.roa
Signing time:             Thu 05 Feb 2026 01:01:07 +0000
ROA not before:           Thu 05 Feb 2026 00:56:07 +0000
ROA not after:            Thu 04 Feb 2027 01:01:07 +0000
asID:                     61637
IP address blocks:        131.100.132.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl
                          rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 22:36:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:1d:c4:0a:1e:43:c0:f9:f6:2d:4c:5b:42:27:8a:68:64:69:be:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
        Validity
            Not Before: Feb  5 00:56:07 2026 GMT
            Not After : Feb  4 01:01:07 2027 GMT
        Subject: CN=E6BE128520ED88B9C25D87841C1811AB94A45CD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:93:d4:d8:a5:b8:ac:02:44:56:17:22:59:ec:
                    8d:2c:59:16:ca:d4:9a:0a:34:eb:0d:4e:ce:08:76:
                    ec:62:e3:b1:35:fc:a0:dc:08:7d:ec:cc:2d:0a:28:
                    8e:92:d0:9d:08:22:13:e7:12:68:5e:5b:bf:45:47:
                    da:0d:28:b8:cc:ad:b5:3f:49:9b:71:22:df:c4:a2:
                    b0:2c:a0:88:5c:a6:ac:94:44:a3:24:0e:38:43:47:
                    68:12:61:42:1a:52:b3:c2:c0:4b:d5:fd:76:db:79:
                    a3:59:34:00:84:f4:c3:55:f7:34:4d:53:05:a1:7d:
                    41:dd:bd:d5:c8:80:e6:34:70:d2:74:26:88:53:8e:
                    71:fc:54:70:b6:4e:fe:d4:90:38:87:23:35:df:51:
                    fe:08:45:e8:e1:8a:ba:f0:00:7b:a0:9f:aa:26:0f:
                    17:2a:cb:37:5b:64:87:d8:85:57:79:22:49:93:ba:
                    b1:43:97:37:98:7f:92:2a:df:18:9e:74:d5:0c:4a:
                    45:7d:b2:26:fe:91:3b:7b:90:71:47:e1:f9:a6:9a:
                    50:61:a5:a3:05:ec:c4:b0:12:d2:18:52:ec:52:44:
                    54:96:88:4c:64:d4:d2:3d:c4:5a:13:74:6d:22:84:
                    d7:9e:8c:e5:19:81:44:a4:34:d5:d4:fd:7d:af:a7:
                    6d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:BE:12:85:20:ED:88:B9:C2:5D:87:84:1C:18:11:AB:94:A4:5C:D4
            X509v3 Authority Key Identifier:
                keyid:31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/3133312e3130302e3133322e302f32332d3233203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:ec:9a:b0:3f:94:97:d7:64:a5:5d:f4:ed:83:95:ec:9b:4b:
         9c:3a:0f:26:8a:22:5a:1a:f1:e4:19:6b:e5:f3:19:41:bd:b8:
         c7:ff:40:15:41:e9:3a:9f:17:23:50:a6:d4:bd:94:37:d8:fd:
         21:2e:e2:6c:3c:47:8f:c1:3d:75:0b:00:31:df:9c:a6:22:60:
         f1:d8:a0:8b:b8:80:7a:a2:f7:bf:0b:d1:69:b5:7b:0e:cf:17:
         16:10:67:91:36:85:47:b6:fc:27:3e:0c:09:55:5d:c5:9d:d7:
         fc:9a:06:12:72:71:47:cd:66:11:ad:af:ae:02:ec:79:38:fe:
         bf:cd:ae:04:18:ef:db:3f:f5:17:d0:6e:29:60:94:ae:b1:dc:
         a9:c2:b6:7f:12:e1:b5:c2:e3:0b:2c:57:7c:f5:dd:ea:76:96:
         69:f9:83:be:00:90:cf:03:77:16:8a:67:10:73:1e:43:90:ad:
         47:3d:0f:65:7e:f8:2c:ee:a6:94:c3:c6:b6:08:c0:cd:69:fd:
         6a:a4:9b:35:c9:67:1f:52:00:32:b4:5a:e1:e2:69:be:53:b0:
         69:ec:45:06:b8:b1:4a:80:f2:a9:23:b5:d6:31:0e:99:3a:e2:
         89:30:ef:51:7b:0c:83:dc:f9:ec:03:cd:67:22:e5:c4:c9:3e:
         3a:e4:34:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:48:49 2026 by rpki-client