Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/3133312e3130302e3133322e302f32342d3234203d3e203631363337.roa
File:                     3133312e3130302e3133322e302f32342d3234203d3e203631363337.roa (raw, json)
Hash identifier:          3WEFWCBGJe2kuClqr741XECgqtzqggsW0PKw1fCdiJo=
Subject key identifier:   39:2A:01:0C:52:5D:55:2C:AF:DB:40:0E:14:FC:6D:72:DF:14:C8:04
Certificate issuer:       /CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
Certificate serial:       605A31C49DF20BB3019E585B7EE8E9DD1FF61FC2
Authority key identifier: 31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/3133312e3130302e3133322e302f32342d3234203d3e203631363337.roa
Signing time:             Thu 05 Feb 2026 01:01:03 +0000
ROA not before:           Thu 05 Feb 2026 00:56:03 +0000
ROA not after:            Thu 04 Feb 2027 01:01:03 +0000
asID:                     61637
IP address blocks:        131.100.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl
                          rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 22:36:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:5a:31:c4:9d:f2:0b:b3:01:9e:58:5b:7e:e8:e9:dd:1f:f6:1f:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
        Validity
            Not Before: Feb  5 00:56:03 2026 GMT
            Not After : Feb  4 01:01:03 2027 GMT
        Subject: CN=392A010C525D552CAFDB400E14FC6D72DF14C804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:79:98:3e:c0:8e:75:c7:1d:ee:d6:2a:fc:22:
                    39:24:22:c6:3e:e8:ce:ed:dd:65:dd:58:53:53:72:
                    f0:05:f8:e7:da:f9:46:ed:45:64:eb:70:43:51:f0:
                    cc:7e:19:ca:94:82:ab:f0:80:94:1f:0c:f0:0c:8c:
                    66:24:fe:92:07:03:b2:8b:37:94:8a:41:3b:f0:fd:
                    c8:85:59:de:e9:3a:e4:e0:68:5d:64:3b:73:e4:27:
                    9f:0f:ae:5b:82:6d:08:0b:e2:f2:03:98:bc:f6:e6:
                    e4:e3:7a:d6:a4:8c:ee:fc:82:9d:9b:55:9f:80:2f:
                    e4:9a:b6:3b:62:84:23:6e:28:47:5c:c1:04:4d:e0:
                    e9:3e:63:93:63:cc:57:7b:65:df:ba:2f:f5:a5:43:
                    23:b3:aa:e5:ea:25:78:c7:fd:99:9f:2e:72:f2:99:
                    f0:8a:99:f6:8b:36:54:09:57:63:85:31:c5:81:4f:
                    56:7e:1a:d4:9d:e7:3c:15:a8:80:d4:4b:13:92:14:
                    ee:e8:68:e8:88:e8:61:25:0d:a0:61:54:ce:5c:8c:
                    ca:1d:4f:2c:22:41:36:2e:e3:65:c3:1f:84:09:8c:
                    fe:c3:9b:ad:7b:a4:ac:9a:de:e1:30:c1:c3:46:91:
                    60:36:b9:94:76:56:9e:23:e7:90:be:ac:3e:8d:e8:
                    1b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:2A:01:0C:52:5D:55:2C:AF:DB:40:0E:14:FC:6D:72:DF:14:C8:04
            X509v3 Authority Key Identifier:
                keyid:31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/3133312e3130302e3133322e302f32342d3234203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:4b:16:0f:9e:16:75:a4:27:9b:d2:e7:05:b8:21:36:21:34:
         82:61:32:e8:8b:0f:f2:42:05:c5:10:87:d0:b2:be:a9:cb:90:
         f6:c9:a0:84:7a:7d:0d:21:fc:2a:f3:aa:56:5b:10:97:bb:bd:
         96:51:0f:e1:dc:31:75:ff:48:46:9a:73:ee:b3:91:b5:af:44:
         94:aa:ef:4a:7d:c5:dd:5e:e7:63:81:db:16:09:cc:a1:88:f4:
         a0:14:bb:90:4b:6b:15:5d:c0:34:4e:c6:91:4c:f5:1c:ad:29:
         f7:99:56:14:e5:64:5b:bd:59:3b:4e:24:93:3f:35:1a:d4:d4:
         53:ee:a7:c8:a7:9d:35:b4:16:53:53:f3:07:82:20:ae:0e:e2:
         8b:61:76:2f:4f:24:de:32:86:26:aa:a2:98:9c:bb:f4:6d:30:
         03:e0:07:75:65:64:30:fe:3b:e6:3a:44:3b:c3:fb:34:68:7d:
         3c:0c:ad:4d:23:bd:86:b6:1b:3c:f7:04:f3:89:fb:ba:2c:32:
         5a:a5:64:07:8d:47:f0:0b:c8:76:e1:56:aa:a5:9f:80:52:e6:
         1a:8c:a0:a9:53:06:9b:11:10:32:b7:7e:a6:b5:01:69:7a:d5:
         5e:05:b7:1a:17:ca:c1:ed:d4:f5:6a:d2:de:a0:cd:49:d3:a9:
         c0:4f:ba:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 08:48:36 2026 by rpki-client