Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3230322e302f32332d3233203d3e20323632363837.roa
File:                     3138372e38372e3230322e302f32332d3233203d3e20323632363837.roa (raw, json)
Hash identifier:          7btvefRntb0hjp0H2WI0pttha7gOowJTh7V+oR5O/a4=
Subject key identifier:   D3:61:E2:D4:92:7A:49:CB:BD:44:10:D4:83:F3:7D:CC:14:B5:CB:1E
Certificate issuer:       /CN=D1F123F850B68CABD3D5C67D9B2660D78C38455C
Certificate serial:       66ADB1AD7BE03AAC075EAC3DF026AF59C63172B2
Authority key identifier: D1:F1:23:F8:50:B6:8C:AB:D3:D5:C6:7D:9B:26:60:D7:8C:38:45:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F123F850B68CABD3D5C67D9B2660D78C38455C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3230322e302f32332d3233203d3e20323632363837.roa
Signing time:             Fri 30 Jan 2026 14:01:37 +0000
ROA not before:           Fri 30 Jan 2026 13:56:37 +0000
ROA not after:            Fri 29 Jan 2027 14:01:37 +0000
asID:                     262687
IP address blocks:        187.87.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D1F123F850B68CABD3D5C67D9B2660D78C38455C.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D1F123F850B68CABD3D5C67D9B2660D78C38455C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F123F850B68CABD3D5C67D9B2660D78C38455C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:15:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:ad:b1:ad:7b:e0:3a:ac:07:5e:ac:3d:f0:26:af:59:c6:31:72:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1F123F850B68CABD3D5C67D9B2660D78C38455C
        Validity
            Not Before: Jan 30 13:56:37 2026 GMT
            Not After : Jan 29 14:01:37 2027 GMT
        Subject: CN=D361E2D4927A49CBBD4410D483F37DCC14B5CB1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:24:bc:61:89:1f:17:5b:85:12:97:c6:4e:a0:
                    ea:64:7d:0f:2c:c6:6b:39:1e:fe:6d:3e:10:4e:3c:
                    82:1a:78:e8:d9:1d:d6:54:69:24:98:fc:ae:af:f2:
                    f8:d0:de:38:1a:a0:03:88:04:f7:28:22:23:69:b9:
                    1d:cf:90:c4:58:e0:2f:5b:6c:9c:16:71:28:d7:18:
                    fa:d4:fa:89:3d:03:1c:6f:29:f9:e6:6f:62:ef:fc:
                    12:c8:a3:dc:31:e1:74:98:be:4d:7e:46:83:c3:3a:
                    58:ac:0f:1e:33:91:48:4c:23:4d:62:91:da:17:2c:
                    20:48:0c:cd:a9:5c:7c:83:57:18:59:a4:e5:5f:cc:
                    69:63:a8:fb:52:19:32:32:27:ff:1a:83:df:7e:c5:
                    d6:e4:b5:2f:25:d7:5f:ef:0e:e4:fd:f2:3e:5c:c3:
                    ba:9a:1b:3a:bd:bf:e2:b9:0d:3e:90:4f:ae:66:a6:
                    71:fa:b0:df:fb:0a:52:38:a4:0c:51:1c:74:02:eb:
                    79:83:82:30:5f:af:0a:c0:6d:ae:9c:4a:34:0c:0e:
                    6c:cc:71:fc:07:8d:d7:68:a9:97:8c:9b:20:67:a2:
                    0a:09:6e:0e:78:d3:0b:ee:51:24:9c:fb:8f:99:a5:
                    ef:ea:fd:da:b3:d3:dd:eb:9d:ec:d9:21:47:58:06:
                    01:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:61:E2:D4:92:7A:49:CB:BD:44:10:D4:83:F3:7D:CC:14:B5:CB:1E
            X509v3 Authority Key Identifier:
                keyid:D1:F1:23:F8:50:B6:8C:AB:D3:D5:C6:7D:9B:26:60:D7:8C:38:45:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D1F123F850B68CABD3D5C67D9B2660D78C38455C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F123F850B68CABD3D5C67D9B2660D78C38455C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3230322e302f32332d3233203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:88:aa:ae:f2:5f:a9:77:9a:22:ba:6b:df:f3:79:31:7d:83:
         fc:68:0c:0e:ab:22:dc:8a:c8:5a:92:26:3f:d6:35:ef:be:2f:
         6d:73:4e:c4:3d:62:45:c5:9f:6a:65:b0:9d:c6:19:32:6d:62:
         02:50:fc:b3:55:7c:60:97:28:b4:c2:61:da:20:0c:aa:9c:e6:
         1d:14:8a:7d:f0:9e:2d:33:d2:3a:a7:4f:fb:69:aa:b5:2c:1c:
         99:64:90:21:93:77:e3:1e:37:26:f6:d8:a9:1a:91:8a:54:27:
         51:f9:4f:66:5a:a2:3a:2a:7d:04:51:94:c7:0d:5e:bf:b5:f9:
         3b:96:40:2c:f0:fd:2c:92:fc:20:fb:04:ef:6a:a6:54:fb:d1:
         61:7d:45:21:80:9d:ec:b5:5c:ab:16:91:16:ba:07:55:d6:f8:
         35:e2:ef:24:78:23:9d:d1:df:01:3f:cb:e1:03:09:30:f7:33:
         fc:f5:7a:fd:d8:27:5d:10:0e:30:91:3d:4f:fb:7f:f6:ac:11:
         99:16:15:90:a6:bc:45:4d:38:07:95:c2:51:70:99:04:95:30:
         62:f8:da:0c:3d:c2:f7:08:b5:d3:ef:ca:2f:18:19:b5:ad:ec:
         89:23:c2:c8:fa:01:21:aa:97:88:30:8c:e4:05:b9:1d:bf:82:
         01:23:2e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 14:25:10 2026 by rpki-client