Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/gHpd9ZyoyCyD2NAAFezW1mXxnFigdkEycmfyoYumeAj/1/3133312e3235352e3138382e302f32322d3234203d3e20323634343937.roa
File:                     3133312e3235352e3138382e302f32322d3234203d3e20323634343937.roa (raw, json)
Hash identifier:          pM9BOLnft59byeDp++g0hTmK1OuRxB391N7WUJY42kA=
Subject key identifier:   1E:59:60:42:99:CF:D4:65:49:FF:89:5A:F6:60:B9:B9:F1:62:9C:B4
Certificate issuer:       /CN=9951F6EBAAA7813C694F3D0F966BFA8B04610665
Certificate serial:       62EB78366B917756511BA6B78D82E835F54C8C4C
Authority key identifier: 99:51:F6:EB:AA:A7:81:3C:69:4F:3D:0F:96:6B:FA:8B:04:61:06:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9951F6EBAAA7813C694F3D0F966BFA8B04610665.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/gHpd9ZyoyCyD2NAAFezW1mXxnFigdkEycmfyoYumeAj/1/3133312e3235352e3138382e302f32322d3234203d3e20323634343937.roa
Signing time:             Thu 05 Feb 2026 00:08:17 +0000
ROA not before:           Thu 05 Feb 2026 00:03:17 +0000
ROA not after:            Thu 04 Feb 2027 00:08:17 +0000
asID:                     264497
IP address blocks:        131.255.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/gHpd9ZyoyCyD2NAAFezW1mXxnFigdkEycmfyoYumeAj/1/9951F6EBAAA7813C694F3D0F966BFA8B04610665.crl
                          rsync://rpki-repo.registro.br/repo/gHpd9ZyoyCyD2NAAFezW1mXxnFigdkEycmfyoYumeAj/1/9951F6EBAAA7813C694F3D0F966BFA8B04610665.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9951F6EBAAA7813C694F3D0F966BFA8B04610665.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 08:24:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:eb:78:36:6b:91:77:56:51:1b:a6:b7:8d:82:e8:35:f5:4c:8c:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9951F6EBAAA7813C694F3D0F966BFA8B04610665
        Validity
            Not Before: Feb  5 00:03:17 2026 GMT
            Not After : Feb  4 00:08:17 2027 GMT
        Subject: CN=1E59604299CFD46549FF895AF660B9B9F1629CB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:dd:7f:3f:cd:96:79:b6:d8:18:d6:8a:52:52:
                    65:4d:81:68:86:3b:e5:e7:d0:c5:b5:ef:df:27:b5:
                    e7:db:02:fb:b2:38:10:cc:c3:3d:82:43:41:89:c3:
                    6e:75:5f:92:90:0d:84:3c:ea:89:b5:aa:56:e4:c9:
                    4d:5a:53:c8:40:1f:54:1e:0d:f6:ae:6a:6a:ba:ca:
                    63:a3:5f:2f:d3:d0:d4:88:fd:59:b2:7c:0f:80:44:
                    8e:e7:d2:1f:fd:f4:c3:88:5c:81:2a:05:8c:5d:7f:
                    0a:d8:6b:9b:c9:b0:7c:49:33:dd:d9:a4:39:c1:d2:
                    9e:04:e3:d7:69:4a:b7:c1:45:2f:c6:2c:00:86:0e:
                    06:d0:97:d6:35:1c:dd:ec:59:b9:d6:5a:8e:01:b0:
                    12:27:54:b5:17:4c:ac:fb:31:a0:c7:82:cb:2d:51:
                    e1:0c:0b:fc:d0:62:eb:27:2a:31:7a:e5:67:2b:a6:
                    f9:8f:de:98:7c:c6:20:62:1d:dc:51:a9:e4:50:9a:
                    94:02:9b:81:3d:a0:b2:6d:c1:a5:5b:3e:33:78:13:
                    40:3f:73:67:aa:2b:2e:03:0d:b7:84:71:da:62:22:
                    e1:a0:fc:96:65:ea:46:a5:67:f8:e2:0e:8b:d6:05:
                    7a:65:47:4b:98:5b:9f:ed:a1:c6:c0:22:67:56:f6:
                    d1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:59:60:42:99:CF:D4:65:49:FF:89:5A:F6:60:B9:B9:F1:62:9C:B4
            X509v3 Authority Key Identifier:
                keyid:99:51:F6:EB:AA:A7:81:3C:69:4F:3D:0F:96:6B:FA:8B:04:61:06:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/gHpd9ZyoyCyD2NAAFezW1mXxnFigdkEycmfyoYumeAj/1/9951F6EBAAA7813C694F3D0F966BFA8B04610665.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9951F6EBAAA7813C694F3D0F966BFA8B04610665.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/gHpd9ZyoyCyD2NAAFezW1mXxnFigdkEycmfyoYumeAj/1/3133312e3235352e3138382e302f32322d3234203d3e20323634343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:39:d8:6e:0c:7c:4e:08:3a:72:c6:f1:da:62:07:ef:ec:2d:
         a5:4f:dc:d3:00:b0:10:92:82:b2:78:6f:c1:7f:40:0e:18:8b:
         3d:f8:1d:3c:ba:4b:fd:f6:59:3e:bd:f5:74:61:a9:26:a9:41:
         fa:b0:ce:98:2a:f7:7c:43:fb:1f:f7:19:8d:c4:50:51:8d:97:
         3a:37:94:5a:1e:ba:ad:61:af:a2:fe:a6:b2:71:80:10:c7:32:
         a6:56:be:3b:f1:5e:99:4e:71:60:e8:9d:87:e3:29:95:27:77:
         cc:ef:f6:89:e1:1e:c5:b5:de:5d:67:e3:e3:07:2c:ff:d9:3d:
         5f:29:56:8f:a4:fb:20:23:4d:5b:84:15:bb:ec:bb:c9:c5:35:
         93:88:52:a2:e3:66:f6:f7:87:56:3d:25:0a:ad:df:9b:ce:3a:
         7d:b6:b3:db:9f:b1:be:63:e1:d6:de:1d:6a:c1:12:3b:3b:c4:
         12:9e:8b:bb:46:1a:56:f9:61:97:9b:5c:34:34:02:05:05:82:
         d1:bb:c3:fd:54:ea:12:51:0e:1c:f7:e2:9e:fc:ce:ad:b7:68:
         20:ee:a5:36:c7:1f:06:19:a5:7c:55:20:67:b3:9b:39:ea:f3:
         08:d9:ea:bf:89:e9:88:04:80:56:17:66:2d:0c:74:54:10:94:
         c2:61:a8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:40:48 2026 by rpki-client