Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2SsJDXMb9d9qSW9Kz9SFgg8Ddfopf9HQqkySEkjGHAfj/0/3133312e3130302e3234302e302f32332d3233203d3e203631363633.roa
File:                     3133312e3130302e3234302e302f32332d3233203d3e203631363633.roa (raw, json)
Hash identifier:          1pugoFyArBCDZvtqbwh9tYkFi1wBkIwFK+ToFpzF1Qc=
Subject key identifier:   E1:1D:11:9D:A3:A7:31:53:B1:40:5C:77:CD:3E:00:FB:1C:4C:CF:5F
Certificate issuer:       /CN=A4613102C06DD4600B98177DD43712196340E623
Certificate serial:       1D08DE7A7128936F6A387037AB54971890C6DBAC
Authority key identifier: A4:61:31:02:C0:6D:D4:60:0B:98:17:7D:D4:37:12:19:63:40:E6:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4613102C06DD4600B98177DD43712196340E623.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2SsJDXMb9d9qSW9Kz9SFgg8Ddfopf9HQqkySEkjGHAfj/0/3133312e3130302e3234302e302f32332d3233203d3e203631363633.roa
Signing time:             Wed 04 Feb 2026 12:35:25 +0000
ROA not before:           Wed 04 Feb 2026 12:30:25 +0000
ROA not after:            Wed 03 Feb 2027 12:35:25 +0000
asID:                     61663
IP address blocks:        131.100.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2SsJDXMb9d9qSW9Kz9SFgg8Ddfopf9HQqkySEkjGHAfj/0/A4613102C06DD4600B98177DD43712196340E623.crl
                          rsync://rpki-repo.registro.br/repo/2SsJDXMb9d9qSW9Kz9SFgg8Ddfopf9HQqkySEkjGHAfj/0/A4613102C06DD4600B98177DD43712196340E623.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4613102C06DD4600B98177DD43712196340E623.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 20:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:08:de:7a:71:28:93:6f:6a:38:70:37:ab:54:97:18:90:c6:db:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4613102C06DD4600B98177DD43712196340E623
        Validity
            Not Before: Feb  4 12:30:25 2026 GMT
            Not After : Feb  3 12:35:25 2027 GMT
        Subject: CN=E11D119DA3A73153B1405C77CD3E00FB1C4CCF5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0a:bd:79:d6:f2:84:ec:92:ed:07:8d:9c:bd:
                    79:72:e4:44:e9:45:2b:5b:34:a4:96:97:99:67:d0:
                    d7:1c:44:7c:cc:83:a8:f7:57:5d:20:72:2c:03:e0:
                    44:55:2d:aa:d3:6d:fd:e4:ff:22:46:f0:ad:7b:fc:
                    4a:0f:b9:38:99:96:83:db:ef:3d:a9:92:4f:fe:d9:
                    65:1a:cc:e2:f4:2e:f5:69:08:bc:96:c9:40:d2:4e:
                    e6:0a:7b:74:1d:63:9a:77:15:1b:23:90:7b:01:66:
                    f4:83:7a:60:47:e7:39:96:20:98:38:5f:a4:02:1b:
                    73:44:78:3a:f7:36:a4:1d:fb:ed:c4:a9:53:bc:69:
                    d8:67:02:1e:9d:25:96:ec:e0:4c:dc:63:e4:4e:c7:
                    71:7e:6c:07:c5:33:38:bc:1a:7d:08:59:2d:85:8a:
                    08:6b:9b:81:5f:e8:12:8b:c9:ee:eb:02:3b:43:7f:
                    be:cd:0e:71:aa:38:fd:00:5f:7d:5e:c3:a5:82:94:
                    7a:8c:f6:9b:a0:20:48:a3:58:4f:0c:f7:49:76:e2:
                    74:34:b1:ed:16:63:ef:b2:df:f7:bc:f8:29:d2:93:
                    f6:05:62:8c:23:9f:9d:21:e4:99:b1:29:ee:e2:2c:
                    a4:2e:c0:44:41:48:8f:3a:97:0b:14:49:cf:b2:5e:
                    c0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:1D:11:9D:A3:A7:31:53:B1:40:5C:77:CD:3E:00:FB:1C:4C:CF:5F
            X509v3 Authority Key Identifier:
                keyid:A4:61:31:02:C0:6D:D4:60:0B:98:17:7D:D4:37:12:19:63:40:E6:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2SsJDXMb9d9qSW9Kz9SFgg8Ddfopf9HQqkySEkjGHAfj/0/A4613102C06DD4600B98177DD43712196340E623.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4613102C06DD4600B98177DD43712196340E623.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2SsJDXMb9d9qSW9Kz9SFgg8Ddfopf9HQqkySEkjGHAfj/0/3133312e3130302e3234302e302f32332d3233203d3e203631363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:91:b0:8b:03:4b:d0:fe:27:62:77:32:94:15:73:42:f6:41:
         d7:2e:b3:17:a1:76:58:2c:06:c3:78:83:3c:eb:70:20:cb:5a:
         fd:fe:72:69:a4:b7:29:c8:ab:9b:0e:85:60:65:70:0c:cb:0e:
         dc:26:75:e4:f6:04:06:26:e9:f3:c8:a0:2e:6f:38:6e:b6:a2:
         39:9d:fe:65:d0:af:ea:8a:d0:ec:68:39:46:3a:7e:70:2c:9e:
         eb:6a:0c:75:4c:02:93:02:39:d5:73:8c:4f:9d:a1:b8:39:43:
         f7:3c:e7:9c:6e:36:f5:a1:63:90:3e:5e:ad:d3:29:b1:b6:29:
         6f:78:d7:5d:c9:28:64:b8:c3:aa:44:8a:33:ec:4a:d0:b3:1e:
         a2:7c:2e:55:77:09:f6:f5:4f:1a:77:48:6e:73:0f:ae:af:47:
         f2:30:74:09:46:d9:72:51:cd:1a:41:45:63:92:8a:88:bd:cb:
         66:c0:30:aa:10:51:2f:7b:ec:e8:e2:8c:fe:b7:4a:e2:de:7c:
         3b:3a:58:98:58:51:4b:b4:71:cf:cf:97:d1:19:f5:a0:ba:56:
         3e:aa:3c:c7:f6:5f:8e:ac:eb:e2:9e:18:29:1c:dc:40:79:7b:
         a2:1d:3a:b2:2f:8a:08:6c:bd:12:a7:19:14:ed:87:62:6c:85:
         3a:0a:4b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:30:29 2026 by rpki-client