Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/3133312e3232312e3230382e302f32322d3234203d3e203238363538.roa
File:                     3133312e3232312e3230382e302f32322d3234203d3e203238363538.roa (raw, json)
Hash identifier:          QvC85ERbGO/jTb34Hl9D2htpxPxNxnX5laPI+z+nnxo=
Subject key identifier:   A9:DB:B7:61:FE:3E:26:DE:E0:80:6F:0B:43:46:73:BE:16:60:EF:BB
Certificate issuer:       /CN=59D97368930A28A43621D32020C3E70B26E79708
Certificate serial:       7F9D69D304D40D299CB9ABCE1373C1FE3C415411
Authority key identifier: 59:D9:73:68:93:0A:28:A4:36:21:D3:20:20:C3:E7:0B:26:E7:97:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/3133312e3232312e3230382e302f32322d3234203d3e203238363538.roa
Signing time:             Thu 05 Feb 2026 11:05:28 +0000
ROA not before:           Thu 05 Feb 2026 11:00:28 +0000
ROA not after:            Thu 04 Feb 2027 11:05:28 +0000
asID:                     28658
IP address blocks:        131.221.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.crl
                          rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:29:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:9d:69:d3:04:d4:0d:29:9c:b9:ab:ce:13:73:c1:fe:3c:41:54:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59D97368930A28A43621D32020C3E70B26E79708
        Validity
            Not Before: Feb  5 11:00:28 2026 GMT
            Not After : Feb  4 11:05:28 2027 GMT
        Subject: CN=A9DBB761FE3E26DEE0806F0B434673BE1660EFBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:68:6c:88:82:a1:03:59:f7:8e:c6:b5:90:4b:
                    a3:67:08:d1:a7:18:b6:fb:43:4c:a3:72:2e:b5:c5:
                    81:a4:ca:7b:51:17:83:58:49:b1:36:b0:5d:fa:96:
                    e1:46:35:63:72:f5:60:2d:95:a8:a1:60:52:44:c2:
                    ff:8a:62:a6:1f:ae:df:b2:28:b7:5a:eb:89:a4:27:
                    c1:ea:51:51:de:31:0a:4e:e8:cc:e8:f4:4e:71:33:
                    3a:95:9b:48:c5:a8:bc:dc:4a:a7:76:70:7b:80:55:
                    c6:a4:f9:eb:43:f6:6d:0d:d9:25:04:d1:df:cc:f0:
                    f1:62:31:17:e8:76:62:6e:6c:da:c7:ff:71:15:f2:
                    0f:c8:b9:2f:c4:31:75:52:0e:d7:8c:cd:33:ac:1e:
                    43:14:e3:4f:ab:11:a1:c4:d1:26:67:38:ec:9f:ae:
                    ab:e2:37:d3:d2:00:43:cc:67:3b:2c:95:46:9a:87:
                    fe:1d:60:3b:2f:32:0f:f8:46:cb:68:3f:89:5a:3f:
                    47:5a:1a:ef:da:64:bf:ed:b0:b1:2e:48:29:7d:0d:
                    a7:23:2d:38:48:25:72:92:96:18:f5:d7:62:f7:1c:
                    02:68:3d:84:17:6e:c9:e4:e8:c9:bf:27:94:14:46:
                    54:26:9c:8b:49:a8:68:82:03:02:c7:0c:d7:5b:d0:
                    d9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:DB:B7:61:FE:3E:26:DE:E0:80:6F:0B:43:46:73:BE:16:60:EF:BB
            X509v3 Authority Key Identifier:
                keyid:59:D9:73:68:93:0A:28:A4:36:21:D3:20:20:C3:E7:0B:26:E7:97:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/3133312e3232312e3230382e302f32322d3234203d3e203238363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:7c:6b:05:41:a6:c0:6d:3e:77:01:4e:8f:5e:79:ac:65:bd:
         b6:be:0b:7b:dc:6c:22:46:7b:48:c6:de:36:38:2c:20:8d:a7:
         e3:e9:45:41:ff:19:98:16:93:87:e3:d4:0c:6f:da:b2:74:65:
         91:cd:db:b2:50:bc:7f:31:68:60:12:ed:7d:94:40:30:b9:cf:
         30:73:01:26:c8:74:90:80:9c:5a:59:46:64:bb:dc:ad:b1:d2:
         f6:ba:e0:d3:7f:6a:d3:f4:0e:0c:87:20:83:f4:e4:74:84:3b:
         a7:db:0c:e7:6c:10:74:84:ba:49:98:ab:e7:b9:1b:b8:b9:b6:
         28:54:a6:9a:34:4c:8e:32:aa:54:36:a5:a7:62:be:30:e8:51:
         6f:48:5d:26:63:5e:cd:e3:23:ce:43:31:9f:6e:03:4c:03:09:
         b8:b8:6c:1e:ed:ea:08:bc:93:38:99:eb:07:18:06:7d:89:87:
         73:87:90:df:37:3a:05:0f:3f:f5:d6:5d:23:dc:07:5b:67:f1:
         ce:c9:18:24:ed:7d:1c:14:f1:4a:89:c6:79:82:1f:41:8e:c2:
         ee:17:7b:75:4f:26:e7:6d:47:1d:04:95:01:69:ca:9e:72:37:
         96:81:a7:e6:e2:21:f6:33:ab:af:3c:b1:d1:31:23:9f:57:12:
         91:67:68:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:28:26 2026 by rpki-client