Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3230332e302f32342d3234203d3e20323632363837.roa
File:                     3138372e38372e3230332e302f32342d3234203d3e20323632363837.roa (raw, json)
Hash identifier:          /49FUcxnZTEwQaQ7brZSCUDSNlxcbSCptYBEPtchoQE=
Subject key identifier:   4C:C5:4C:33:BD:54:39:B2:CA:BF:78:33:B9:FE:B5:FA:F7:D6:82:5E
Certificate issuer:       /CN=D1F123F850B68CABD3D5C67D9B2660D78C38455C
Certificate serial:       2163429C0C66BBD2A8093EABF2384114F8C710E5
Authority key identifier: D1:F1:23:F8:50:B6:8C:AB:D3:D5:C6:7D:9B:26:60:D7:8C:38:45:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F123F850B68CABD3D5C67D9B2660D78C38455C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3230332e302f32342d3234203d3e20323632363837.roa
Signing time:             Fri 30 Jan 2026 14:01:46 +0000
ROA not before:           Fri 30 Jan 2026 13:56:46 +0000
ROA not after:            Fri 29 Jan 2027 14:01:46 +0000
asID:                     262687
IP address blocks:        187.87.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D1F123F850B68CABD3D5C67D9B2660D78C38455C.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D1F123F850B68CABD3D5C67D9B2660D78C38455C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F123F850B68CABD3D5C67D9B2660D78C38455C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:15:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:63:42:9c:0c:66:bb:d2:a8:09:3e:ab:f2:38:41:14:f8:c7:10:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1F123F850B68CABD3D5C67D9B2660D78C38455C
        Validity
            Not Before: Jan 30 13:56:46 2026 GMT
            Not After : Jan 29 14:01:46 2027 GMT
        Subject: CN=4CC54C33BD5439B2CABF7833B9FEB5FAF7D6825E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:01:bf:69:6b:5f:19:35:de:d5:d2:4e:4e:a4:
                    1d:11:e0:55:b8:ef:3a:e6:8f:60:65:b6:5a:e2:05:
                    ab:90:e6:19:c9:37:fa:5e:42:0c:f6:58:71:d3:10:
                    3c:43:13:7d:a6:3a:5c:49:96:91:b8:3b:5b:ac:25:
                    a7:64:0f:01:7b:97:48:b5:a5:a5:78:a7:a7:ce:af:
                    d2:ed:1e:34:76:08:64:e9:d4:da:68:0d:9b:3e:5f:
                    d8:1b:3f:17:dd:7b:71:46:b9:e3:3e:b9:03:5d:d9:
                    4e:ff:0f:22:87:20:df:1f:47:fc:05:b1:08:2b:14:
                    d2:22:2a:39:27:9d:46:26:9e:9f:d7:11:f3:8a:36:
                    22:6f:96:38:d2:97:c9:07:0e:32:30:c8:53:78:37:
                    48:f4:f4:61:ef:3e:b2:cf:92:6f:15:cd:4b:d4:d3:
                    4c:75:b1:9e:2c:b2:a1:50:28:aa:fa:7e:93:9b:c2:
                    1c:83:54:5e:82:47:d1:46:dd:13:9d:63:d2:52:cf:
                    09:d1:16:cb:59:d3:4e:55:09:40:2c:5e:96:9e:00:
                    21:2b:99:a2:16:0c:c7:63:10:e3:40:5f:c3:5d:b4:
                    90:e3:9d:0f:a6:16:48:5f:e3:be:1c:93:e0:19:f6:
                    73:43:61:52:10:b0:c0:96:c5:08:e7:d0:3b:aa:d2:
                    6e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C5:4C:33:BD:54:39:B2:CA:BF:78:33:B9:FE:B5:FA:F7:D6:82:5E
            X509v3 Authority Key Identifier:
                keyid:D1:F1:23:F8:50:B6:8C:AB:D3:D5:C6:7D:9B:26:60:D7:8C:38:45:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D1F123F850B68CABD3D5C67D9B2660D78C38455C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F123F850B68CABD3D5C67D9B2660D78C38455C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3230332e302f32342d3234203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:91:5a:2b:bb:55:82:4a:b2:10:db:f8:8e:e3:c1:65:e7:cf:
         0b:71:55:0b:70:cd:34:ca:31:60:d7:2e:aa:12:21:70:91:28:
         94:50:55:f6:f1:1b:a9:07:72:a6:ad:d9:9d:48:bb:8e:97:54:
         cc:3a:8e:63:40:15:9e:28:16:f8:7f:89:7d:53:6a:8a:15:49:
         64:50:19:31:4a:d6:19:53:5d:69:b6:49:80:54:4f:39:09:03:
         7e:7d:99:f1:06:a9:48:3e:aa:7e:6a:80:a4:b5:c9:9c:24:f7:
         a2:ba:64:fd:dc:d9:59:f5:80:81:10:0a:9a:30:ea:33:34:c5:
         c8:4b:68:74:97:d5:3e:ed:31:b1:3c:89:2e:15:b0:da:fd:f5:
         d6:20:68:57:61:2e:54:36:3e:ef:96:5f:b5:90:cc:31:6d:16:
         b7:eb:f5:01:5c:ee:1e:1e:23:43:2e:d9:f0:fe:b4:75:e7:08:
         76:1f:9f:59:ff:66:8e:c0:b6:36:dd:f9:d7:e8:a2:52:b9:db:
         9c:4d:61:8a:3e:80:71:ea:4c:86:cf:7e:02:6e:0f:44:44:72:
         d1:9d:cc:88:ac:a3:a1:36:7e:f5:0c:28:69:5a:ff:e3:d4:22:
         6a:38:0f:07:81:46:94:5f:8f:97:b4:ec:e5:bd:70:f1:fd:8b:
         e5:54:f8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:32:40 2026 by rpki-client