Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139332e302f32342d3234203d3e20323632363837.roa
File:                     3138372e38372e3139332e302f32342d3234203d3e20323632363837.roa (raw, json)
Hash identifier:          +pJ30ravOzV44w0TxosL6F1Cru3SWckHI5hredZU2YM=
Subject key identifier:   87:6D:A9:48:34:08:3C:27:C6:18:AE:5E:F4:91:7A:F6:16:9D:DC:69
Certificate issuer:       /CN=D1F123F850B68CABD3D5C67D9B2660D78C38455C
Certificate serial:       4597B80D2DF8D296256F157251B441B2B69CC64A
Authority key identifier: D1:F1:23:F8:50:B6:8C:AB:D3:D5:C6:7D:9B:26:60:D7:8C:38:45:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F123F850B68CABD3D5C67D9B2660D78C38455C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139332e302f32342d3234203d3e20323632363837.roa
Signing time:             Fri 30 Jan 2026 14:01:45 +0000
ROA not before:           Fri 30 Jan 2026 13:56:45 +0000
ROA not after:            Fri 29 Jan 2027 14:01:45 +0000
asID:                     262687
IP address blocks:        187.87.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D1F123F850B68CABD3D5C67D9B2660D78C38455C.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D1F123F850B68CABD3D5C67D9B2660D78C38455C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F123F850B68CABD3D5C67D9B2660D78C38455C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:15:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:97:b8:0d:2d:f8:d2:96:25:6f:15:72:51:b4:41:b2:b6:9c:c6:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1F123F850B68CABD3D5C67D9B2660D78C38455C
        Validity
            Not Before: Jan 30 13:56:45 2026 GMT
            Not After : Jan 29 14:01:45 2027 GMT
        Subject: CN=876DA94834083C27C618AE5EF4917AF6169DDC69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f2:c8:91:54:33:db:db:24:a6:1d:33:ef:98:
                    fd:b7:f9:13:d6:f6:04:8d:7d:ad:89:f2:6a:ac:82:
                    d9:97:5a:4c:3b:bb:8c:66:6a:54:7e:04:7a:f5:78:
                    81:ae:91:13:d2:3c:d1:27:f8:de:13:a4:86:5f:ed:
                    b4:61:33:3f:68:09:ca:88:59:f5:12:f0:d0:b3:25:
                    4c:c5:90:28:4c:58:0e:a9:96:5d:54:68:31:e3:c3:
                    1d:db:ef:5a:1a:71:27:98:78:ac:28:eb:43:f4:03:
                    8c:2e:28:a2:2e:54:af:38:be:37:80:9e:1f:10:6d:
                    1a:8e:06:06:4c:7d:8e:e7:01:66:43:64:3e:c8:88:
                    7c:70:e9:d2:bb:b5:bc:6a:fd:ee:4a:92:05:69:93:
                    03:e7:41:dd:b8:f9:68:74:fc:2b:df:b0:25:f1:54:
                    f7:34:cb:fb:39:e5:3b:39:24:82:5c:d1:c7:d1:7c:
                    79:f2:1f:cb:3b:2f:bc:9e:83:de:b2:c6:9b:04:7d:
                    be:56:55:2b:c4:04:7a:e0:94:7b:fe:31:7f:66:f3:
                    9f:b9:5c:bd:65:fe:52:19:c8:8f:01:5d:e3:bb:1d:
                    51:3c:7c:69:cb:fc:fc:cb:dd:43:5a:a1:24:c9:65:
                    a0:98:cb:3d:a0:eb:71:57:7a:fd:52:af:e0:93:7a:
                    ba:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:6D:A9:48:34:08:3C:27:C6:18:AE:5E:F4:91:7A:F6:16:9D:DC:69
            X509v3 Authority Key Identifier:
                keyid:D1:F1:23:F8:50:B6:8C:AB:D3:D5:C6:7D:9B:26:60:D7:8C:38:45:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D1F123F850B68CABD3D5C67D9B2660D78C38455C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F123F850B68CABD3D5C67D9B2660D78C38455C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139332e302f32342d3234203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:a1:e4:ad:6e:59:f0:86:37:65:44:d0:dc:d2:68:88:97:e8:
         a3:4f:b6:10:47:bd:15:7a:9c:be:bf:dd:16:26:a1:9c:fd:e9:
         5c:99:93:83:fc:e1:8d:6e:0f:2d:05:e0:d3:1a:ee:e5:0d:d3:
         c3:c7:18:70:2f:b8:78:45:29:3f:bc:17:eb:a0:f7:34:cd:ed:
         ef:da:08:05:d6:be:b7:77:77:7d:93:24:6f:87:eb:ec:b4:34:
         05:a2:2a:e8:c6:16:15:a6:ff:0c:8f:cc:bc:72:53:3c:14:28:
         5e:02:40:5d:aa:88:2f:5d:0c:9f:57:3b:4d:77:f4:24:3b:49:
         53:22:c5:3c:a9:be:0f:61:76:2d:07:73:76:01:3d:ee:8b:fe:
         9e:11:64:0f:e1:88:7c:40:b2:b0:74:a9:59:81:44:d8:ba:64:
         ab:74:4a:1b:55:81:03:c2:c5:b9:a2:6c:42:e1:cc:5b:27:e7:
         9c:bc:1a:04:96:d3:9c:e7:5b:e6:9b:2a:cb:51:bb:c4:7e:1a:
         44:54:c8:5c:39:13:1c:cc:37:d0:d2:8e:2b:00:1f:f1:93:6e:
         05:20:ac:8e:33:0c:75:95:1c:df:bf:10:b2:82:ad:c2:11:f7:
         5c:c8:b5:65:83:6a:f7:43:8d:b0:65:f9:50:a0:f9:76:50:51:
         31:78:2d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:41:27 2026 by rpki-client