Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/3133312e3130302e38332e302f32342d3234203d3e203631373539.roa
File:                     3133312e3130302e38332e302f32342d3234203d3e203631373539.roa (raw, json)
Hash identifier:          2Z2/mrRSqsvs44S52LBknzxftP1J25GCg5k15pdojxg=
Subject key identifier:   0B:99:D3:1B:7B:85:D5:57:CA:2A:01:76:EB:9C:85:FB:D3:99:93:19
Certificate issuer:       /CN=CC21C52002F12385FE61F33BF5F6933D09EF8ED2
Certificate serial:       30E9883A57D1B23C92EFD25CE00264D379F5C7DD
Authority key identifier: CC:21:C5:20:02:F1:23:85:FE:61:F3:3B:F5:F6:93:3D:09:EF:8E:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/3133312e3130302e38332e302f32342d3234203d3e203631373539.roa
Signing time:             Wed 04 Feb 2026 19:00:00 +0000
ROA not before:           Wed 04 Feb 2026 18:55:00 +0000
ROA not after:            Wed 03 Feb 2027 19:00:00 +0000
asID:                     61759
IP address blocks:        131.100.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl
                          rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 11:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e9:88:3a:57:d1:b2:3c:92:ef:d2:5c:e0:02:64:d3:79:f5:c7:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC21C52002F12385FE61F33BF5F6933D09EF8ED2
        Validity
            Not Before: Feb  4 18:55:00 2026 GMT
            Not After : Feb  3 19:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8a:eb:8e:69:e8:c9:e5:98:50:af:a9:e8:84:
                    3b:c5:20:b4:d8:b6:6d:3e:c5:18:d6:97:90:b1:0c:
                    9a:b2:6d:a2:b7:41:cf:56:b5:b6:b9:1d:9b:44:59:
                    df:82:2f:2e:17:d0:79:78:72:56:cc:ad:05:97:cf:
                    53:5b:e4:10:60:c7:3c:04:89:5e:96:d9:6f:2d:7a:
                    7d:18:08:c7:be:4c:b8:7e:4d:85:38:b1:20:b0:dd:
                    8b:9d:cb:7a:04:ac:58:0b:99:98:2f:3a:e6:3f:1a:
                    31:33:09:38:b9:71:b8:9e:1b:61:6a:05:b2:e3:27:
                    f9:01:3c:3a:32:7f:34:b6:ac:5a:9f:46:7a:cd:96:
                    a4:d2:3b:ee:16:55:eb:41:f8:54:ac:68:88:9f:ec:
                    20:82:ef:1e:98:9f:25:7f:0e:85:3a:23:00:63:13:
                    dd:32:94:59:f7:ea:ed:54:98:b3:45:f3:a3:ab:63:
                    85:fc:66:c0:79:59:9f:83:71:7c:30:8f:18:59:98:
                    7e:5d:85:57:7f:97:e5:a0:9a:ef:f3:b9:4d:7b:45:
                    e4:bf:15:b0:77:58:c5:92:d4:59:5f:d3:84:ef:fd:
                    1a:45:6c:bb:07:57:0e:2e:af:9d:01:36:4e:6f:b0:
                    40:b4:3e:af:45:ac:6c:90:5c:ae:16:ff:c9:29:fd:
                    2c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:99:D3:1B:7B:85:D5:57:CA:2A:01:76:EB:9C:85:FB:D3:99:93:19
            X509v3 Authority Key Identifier:
                keyid:CC:21:C5:20:02:F1:23:85:FE:61:F3:3B:F5:F6:93:3D:09:EF:8E:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/3133312e3130302e38332e302f32342d3234203d3e203631373539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:a0:11:de:2a:47:a1:02:32:35:ba:97:f0:20:dc:24:df:27:
         c0:43:32:66:2d:1f:ed:a5:19:14:db:a5:5f:f7:89:65:95:48:
         c1:00:89:05:e3:d6:26:51:09:41:74:01:82:03:70:f5:37:f7:
         98:4b:de:03:07:5f:b4:5d:df:1f:5c:07:b0:6f:54:55:04:c0:
         e2:0a:a9:04:da:04:a9:5f:c5:62:4b:4f:c4:cd:9d:37:03:b0:
         2e:82:56:a3:80:d2:64:7d:cb:75:85:c7:bf:80:36:00:a8:5b:
         a8:33:0c:8e:4f:f5:70:93:88:ab:e6:d8:d9:12:0a:9b:3b:e4:
         f7:80:12:71:a9:e7:38:ef:12:66:9a:f5:3c:da:ad:6d:6c:69:
         94:ee:be:88:90:a6:36:1a:78:90:e8:68:09:9d:d0:cf:90:1a:
         d4:83:fc:e8:eb:f2:a3:1f:7b:0a:f4:cf:f2:3f:4e:a2:30:f7:
         ca:f5:e1:79:da:dc:77:11:30:b0:e0:4c:99:db:0f:71:0a:d1:
         0e:e4:ea:e2:79:e6:00:26:a5:94:c9:25:6e:b8:be:d3:6c:e8:
         7f:a9:f4:2b:bf:de:68:6b:90:f6:08:f5:6f:be:50:e3:36:ee:
         ea:90:e0:23:d2:b9:26:26:0d:93:bb:c9:54:90:cd:0e:1f:7e:
         b6:2b:b5:c3
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUMOmIOlfRsjyS79Jc4AJk03n1x90wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0MyMUM1MjAwMkYxMjM4NUZFNjFGMzNCRjVGNjkzM0Qw
OUVGOEVEMjAeFw0yNjAyMDQxODU1MDBaFw0yNzAyMDMxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzE4QUVCOEU2OUU4QzlFNTk4
NTBBRkE5RTg4NDNCQzUyMEI0RDhCNjZEM0VDNTE4RDY5NzkwQjEwQzlBQjI2REEy
Qjc0MUNGNTZCNUI2QjkxRDlCNDQ1OURGODIyRjJFMTdEMDc5Nzg3MjU2Q0NBRDA1
OTdDRjUzNUJFNDEwNjBDNzNDMDQ4OTVFOTZEOTZGMkQ3QTdEMTgwOEM3QkU0Q0I4
N0U0RDg1MzhCMTIwQjBERDhCOURDQjdBMDRBQzU4MEI5OTk4MkYzQUU2M0YxQTMx
MzMwOTM4Qjk3MUI4OUUxQjYxNkEwNUIyRTMyN0Y5MDEzQzNBMzI3RjM0QjZBQzVB
OUY0NjdBQ0Q5NkE0RDIzQkVFMTY1NUVCNDFGODU0QUM2ODg4OUZFQzIwODJFRjFF
OTg5RjI1N0YwRTg1M0EyMzAwNjMxM0REMzI5NDU5RjdFQUVENTQ5OEIzNDVGM0Ez
QUI2Mzg1RkM2NkMwNzk1OTlGODM3MTdDMzA4RjE4NTk5ODdFNUQ4NTU3N0Y5N0U1
QTA5QUVGRjNCOTREN0I0NUU0QkYxNUIwNzc1OEM1OTJENDU5NUZEMzg0RUZGRDFB
NDU2Q0JCMDc1NzBFMkVBRjlEMDEzNjRFNkZCMDQwQjQzRUFGNDVBQzZDOTA1Q0FF
MTZGRkM5MjlGRDJDMEQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwYrrjmnoyeWYUK+p6IQ7xSC02LZtPsUY1peQsQyasm2it0HPVrW2
uR2bRFnfgi8uF9B5eHJWzK0Fl89TW+QQYMc8BIleltlvLXp9GAjHvky4fk2FOLEg
sN2Lnct6BKxYC5mYLzrmPxoxMwk4uXG4nhthagWy4yf5ATw6Mn80tqxan0Z6zZak
0jvuFlXrQfhUrGiIn+wggu8emJ8lfw6FOiMAYxPdMpRZ9+rtVJizRfOjq2OF/GbA
eVmfg3F8MI8YWZh+XYVXf5floJrv87lNe0XkvxWwd1jFktRZX9OE7/0aRWy7B1cO
Lq+dATZOb7BAtD6vRaxskFyuFv/JKf0sDQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FAuZ0xt7hdVXyioBduuchfvTmZMZMB8GA1UdIwQYMBaAFMwhxSAC8SOF/mHzO/X2
kz0J747SMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RSWlN2N3dGSnQxRWtZ
NWZHa0RMRER5ZFhVamNlekJKdzhQR3gyR0RQRnlYLzEvQ0MyMUM1MjAwMkYxMjM4
NUZFNjFGMzNCRjVGNjkzM0QwOUVGOEVEMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9DQzIxQzUyMDAyRjEyMzg1RkU2MUYzM0JGNUY2OTMzRDA5RUY4
RUQyLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9EUlpTdjd3Rkp0MUVrWTVmR2tE
TEREeWRYVWpjZXpCSnc4UEd4MkdEUEZ5WC8xLzMxMzMzMTJlMzEzMDMwMmUzODMz
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTM3MzUzOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAINk
UzANBgkqhkiG9w0BAQsFAAOCAQEAGaAR3ipHoQIyNbqX8CDcJN8nwEMyZi0f7aUZ
FNulX/eJZZVIwQCJBePWJlEJQXQBggNw9Tf3mEveAwdftF3fH1wHsG9UVQTA4gqp
BNoEqV/FYktPxM2dNwOwLoJWo4DSZH3LdYXHv4A2AKhbqDMMjk/1cJOIq+bY2RIK
mzvk94AScannOO8SZpr1PNqtbWxplO6+iJCmNhp4kOhoCZ3Qz5Aa1IP86Ovyox97
CvTP8j9OojD3yvXhedrcdxEwsOBMmdsPcQrRDuTq4nnmACallMklbri+02zof6n0
K7/eaGuQ9gj1b75Q4zbu6pDgI9K5JiYNk7vJVJDNDh9+tiu1ww==
-----END CERTIFICATE-----
Generated at Thu Feb 19 15:54:43 2026 by rpki-client