Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3230312e3133312e3234302e302f32312d3231203d3e203532373538.roa
File:                     3230312e3133312e3234302e302f32312d3231203d3e203532373538.roa (raw, json)
Hash identifier:          3PQWFSF/vFRtAmDp9Rr8Ec1vbDRBZYO5f/Z5gZX616I=
Subject key identifier:   61:5F:0A:C5:99:CC:0A:D1:BC:AC:C4:BC:94:94:87:D0:07:78:4C:33
Certificate issuer:       /CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
Certificate serial:       3679213AA496EB2E6791CD1C8108EB27246FE33C
Authority key identifier: B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3230312e3133312e3234302e302f32312d3231203d3e203532373538.roa
Signing time:             Fri 06 Feb 2026 14:46:32 +0000
ROA not before:           Fri 06 Feb 2026 14:41:32 +0000
ROA not after:            Fri 05 Feb 2027 14:46:32 +0000
asID:                     52758
IP address blocks:        201.131.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.crl
                          rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:79:21:3a:a4:96:eb:2e:67:91:cd:1c:81:08:eb:27:24:6f:e3:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
        Validity
            Not Before: Feb  6 14:41:32 2026 GMT
            Not After : Feb  5 14:46:32 2027 GMT
        Subject: CN=615F0AC599CC0AD1BCACC4BC949487D007784C33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0b:50:24:93:14:f2:04:55:94:80:e7:fe:ba:
                    1a:57:37:59:bc:05:ff:a0:c9:48:83:64:83:33:80:
                    33:eb:c8:42:74:8e:41:2d:5f:cf:8e:2b:9d:8a:29:
                    52:9b:b4:36:52:9c:38:af:cf:19:29:2f:41:d9:df:
                    1b:19:39:c5:ad:67:15:6e:08:0c:b1:88:56:14:9f:
                    0c:65:0d:50:92:a3:ac:1c:35:bb:8c:9a:48:5d:39:
                    a6:7f:33:21:14:35:9e:2b:81:f7:e9:19:71:4e:7d:
                    76:3d:be:87:56:74:c1:ef:54:8b:7e:79:39:b2:91:
                    b5:3a:2c:e4:96:88:49:5b:73:30:55:e6:a8:99:f6:
                    70:62:ff:b1:ba:50:3b:65:ce:c2:da:0f:5c:d0:e8:
                    e1:91:52:dc:7f:95:4b:aa:81:f3:4d:27:5b:9c:60:
                    c0:87:44:a4:72:de:27:95:c7:34:01:ee:74:3c:25:
                    76:a5:3e:38:92:81:0a:a6:7c:e5:d7:b3:25:bc:6f:
                    3f:24:ab:94:5f:53:0b:7d:ff:a3:4f:03:04:0d:6e:
                    92:04:e3:a3:88:a1:3b:c6:a9:63:a8:50:34:0b:a3:
                    91:1c:a4:7c:72:2a:12:f6:83:4a:2d:0c:41:fa:16:
                    93:38:5c:0a:4b:f8:64:f8:99:2f:57:31:2f:db:fa:
                    03:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:5F:0A:C5:99:CC:0A:D1:BC:AC:C4:BC:94:94:87:D0:07:78:4C:33
            X509v3 Authority Key Identifier:
                keyid:B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3230312e3133312e3234302e302f32312d3231203d3e203532373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         21:85:dd:b4:2b:d2:69:32:29:01:04:51:57:bd:5c:f8:cb:ec:
         5b:51:ad:4c:b2:13:17:ea:fd:91:19:52:6f:e4:c7:48:2d:54:
         0e:a6:1e:9b:12:6e:dd:5c:43:cf:ef:80:a6:b4:38:b7:01:41:
         4f:7e:a8:c0:a1:3a:e3:b1:f0:bc:63:1c:98:24:39:69:f6:21:
         b9:f7:88:bb:3c:96:ca:ae:ac:8a:d2:5e:29:6a:a4:25:f3:ea:
         63:7b:1f:94:14:a2:ec:e8:60:07:0d:fd:4e:59:c0:df:7e:eb:
         48:e0:b6:d7:a8:7c:f8:95:0e:22:da:03:fa:ed:33:1f:1f:fc:
         72:33:41:4c:60:93:71:5c:ab:56:4d:43:a0:30:b4:45:d2:8f:
         c4:40:b8:6f:1a:a8:90:22:6f:ee:42:a3:65:f5:86:71:ef:64:
         b3:1d:61:d6:5e:88:9d:e2:59:2e:38:43:a7:43:86:e8:a6:1d:
         bc:8c:1f:15:33:41:74:1d:17:7e:2d:bc:99:1d:02:0d:16:4f:
         1b:08:6e:15:75:79:65:0f:b1:41:ca:8d:5a:36:9d:2b:f6:71:
         9d:5b:ce:96:36:f9:0f:b4:ee:22:3f:96:f6:d4:70:96:47:0c:
         72:c8:a5:0c:7e:53:36:6a:f1:dc:ac:e4:70:34:5a:34:23:13:
         06:96:63:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:17:46 2026 by rpki-client