Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2SsJDXMb9d9qSW9Kz9SFgg8Ddfopf9HQqkySEkjGHAfj/0/3137302e3135302e3235322e302f32342d3234203d3e203631363633.roa
File:                     3137302e3135302e3235322e302f32342d3234203d3e203631363633.roa (raw, json)
Hash identifier:          jKJU078gAWopQ+LOxhKZAzvgorZnfaIqa74CH0Pn96I=
Subject key identifier:   1F:F7:AD:F5:48:84:30:B3:1D:4E:5A:A4:E6:45:93:45:3A:B4:09:6A
Certificate issuer:       /CN=A4613102C06DD4600B98177DD43712196340E623
Certificate serial:       7C5270889BDEE6F1B222464AC692BA036278A0F1
Authority key identifier: A4:61:31:02:C0:6D:D4:60:0B:98:17:7D:D4:37:12:19:63:40:E6:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4613102C06DD4600B98177DD43712196340E623.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2SsJDXMb9d9qSW9Kz9SFgg8Ddfopf9HQqkySEkjGHAfj/0/3137302e3135302e3235322e302f32342d3234203d3e203631363633.roa
Signing time:             Wed 04 Feb 2026 12:35:29 +0000
ROA not before:           Wed 04 Feb 2026 12:30:29 +0000
ROA not after:            Wed 03 Feb 2027 12:35:29 +0000
asID:                     61663
IP address blocks:        170.150.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2SsJDXMb9d9qSW9Kz9SFgg8Ddfopf9HQqkySEkjGHAfj/0/A4613102C06DD4600B98177DD43712196340E623.crl
                          rsync://rpki-repo.registro.br/repo/2SsJDXMb9d9qSW9Kz9SFgg8Ddfopf9HQqkySEkjGHAfj/0/A4613102C06DD4600B98177DD43712196340E623.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4613102C06DD4600B98177DD43712196340E623.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 20:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:52:70:88:9b:de:e6:f1:b2:22:46:4a:c6:92:ba:03:62:78:a0:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4613102C06DD4600B98177DD43712196340E623
        Validity
            Not Before: Feb  4 12:30:29 2026 GMT
            Not After : Feb  3 12:35:29 2027 GMT
        Subject: CN=1FF7ADF5488430B31D4E5AA4E64593453AB4096A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4e:a8:83:08:c0:cd:33:61:89:56:7c:a5:d9:
                    d9:29:37:88:87:e7:45:8d:a3:f3:67:f9:59:fa:eb:
                    eb:f9:91:54:42:1e:71:94:ff:32:03:cc:92:01:b0:
                    ee:c1:50:69:29:db:36:38:8d:55:66:91:a2:f9:d5:
                    e3:bb:b6:c3:ed:b0:0a:bc:ad:a1:1b:a2:52:a3:db:
                    d7:b8:2d:3c:54:15:8a:c5:7d:f2:96:23:34:c3:92:
                    11:43:17:40:f3:f3:20:f0:87:bf:17:cd:c6:e6:ad:
                    48:a3:21:e3:43:9f:a8:5d:b1:18:cc:dc:e1:d1:f3:
                    52:3d:44:77:16:aa:9d:0e:48:14:c4:90:6a:32:a3:
                    f4:ca:87:f9:b5:6f:70:fc:22:98:32:5e:03:37:7f:
                    b1:cf:e9:39:53:90:a4:54:ae:99:c5:4b:60:c1:29:
                    e8:04:55:3e:39:3e:91:94:59:b7:37:3a:21:c9:6a:
                    8a:cf:be:02:dc:de:60:a9:0f:92:44:a5:30:5d:b1:
                    5f:6a:37:ac:0f:66:b2:b0:93:e4:56:3e:89:4a:e2:
                    47:73:e3:4e:1a:73:8b:8f:e8:91:bb:a6:a7:2f:b8:
                    c4:01:e2:4b:1b:04:75:bb:15:31:d1:9f:e9:85:fc:
                    3f:a0:3d:98:15:93:1e:c4:a2:01:e5:fd:95:00:38:
                    c6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F7:AD:F5:48:84:30:B3:1D:4E:5A:A4:E6:45:93:45:3A:B4:09:6A
            X509v3 Authority Key Identifier:
                keyid:A4:61:31:02:C0:6D:D4:60:0B:98:17:7D:D4:37:12:19:63:40:E6:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2SsJDXMb9d9qSW9Kz9SFgg8Ddfopf9HQqkySEkjGHAfj/0/A4613102C06DD4600B98177DD43712196340E623.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4613102C06DD4600B98177DD43712196340E623.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2SsJDXMb9d9qSW9Kz9SFgg8Ddfopf9HQqkySEkjGHAfj/0/3137302e3135302e3235322e302f32342d3234203d3e203631363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:9a:42:81:12:f3:78:50:30:4a:4a:86:64:90:35:e5:11:7d:
         76:79:e0:64:07:f3:f1:52:94:35:77:0f:5d:b2:bd:fc:45:ef:
         03:55:54:c3:01:43:57:aa:4f:5c:4f:34:0d:9f:1e:82:f3:89:
         e4:bf:e3:cd:4f:76:0e:09:e3:f9:0c:a8:31:8c:ca:14:b0:2f:
         5f:05:5b:9a:c9:5a:72:56:93:ed:69:61:8c:8e:4c:e3:66:55:
         c7:a3:10:e3:b4:cc:fb:66:44:c3:c0:e6:8b:f3:05:2a:c3:7f:
         c3:c2:d0:fe:bd:33:38:1b:5e:ac:03:83:08:f2:dd:5f:60:a0:
         9a:36:ba:0c:95:56:10:c1:d1:f9:1e:2f:21:fa:da:93:10:10:
         0c:45:92:c2:cc:e8:41:8f:38:1e:87:fc:76:e0:ad:82:cb:06:
         9a:a5:7b:38:d2:0d:4a:72:01:c8:c7:3e:d6:c9:ec:3f:23:9d:
         8e:0e:df:71:ae:2a:0e:7b:f1:48:6d:97:c3:10:72:7a:b6:85:
         e4:ec:17:e0:26:3a:3b:17:4f:ec:86:8f:4b:b9:e3:60:13:df:
         64:5a:7d:f1:09:f0:af:f8:c8:f7:1b:fa:0b:10:90:bd:3d:9c:
         00:dd:19:36:f8:34:65:9f:0e:9d:0b:37:ce:6c:51:37:c7:4c:
         1d:66:ac:8c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfFJwiJve5vGyIkZKxpK6A2J4oPEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTQ2MTMxMDJDMDZERDQ2MDBCOTgxNzdERDQzNzEyMTk2
MzQwRTYyMzAeFw0yNjAyMDQxMjMwMjlaFw0yNzAyMDMxMjM1MjlaMDMxMTAvBgNV
BAMTKDFGRjdBREY1NDg4NDMwQjMxRDRFNUFBNEU2NDU5MzQ1M0FCNDA5NkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGTqiDCMDNM2GJVnyl2dkpN4iH
50WNo/Nn+Vn66+v5kVRCHnGU/zIDzJIBsO7BUGkp2zY4jVVmkaL51eO7tsPtsAq8
raEbolKj29e4LTxUFYrFffKWIzTDkhFDF0Dz8yDwh78XzcbmrUijIeNDn6hdsRjM
3OHR81I9RHcWqp0OSBTEkGoyo/TKh/m1b3D8IpgyXgM3f7HP6TlTkKRUrpnFS2DB
KegEVT45PpGUWbc3OiHJaorPvgLc3mCpD5JEpTBdsV9qN6wPZrKwk+RWPolK4kdz
404ac4uP6JG7pqcvuMQB4ksbBHW7FTHRn+mF/D+gPZgVkx7EogHl/ZUAOMY1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUH/et9UiEMLMdTlqk5kWTRTq0CWowHwYDVR0j
BBgwFoAUpGExAsBt1GALmBd91DcSGWNA5iMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlNzSkRYTWI5ZDlxU1c5S3o5U0ZnZzhEZGZvcGY5SFFxa3lTRWtqR0hB
ZmovMC9BNDYxMzEwMkMwNkRENDYwMEI5ODE3N0RENDM3MTIxOTYzNDBFNjIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E0NjEzMTAyQzA2REQ0NjAw
Qjk4MTc3REQ0MzcxMjE5NjM0MEU2MjMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJTc0pEWE1iOWQ5cVNXOUt6OVNGZ2c4RGRmb3BmOUhRcWt5U0VrakdIQWZqLzAv
MzEzNzMwMmUzMTM1MzAyZTMyMzUzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2
MzEzNjM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACqlvwwDQYJKoZIhvcNAQELBQADggEBADWaQoES
83hQMEpKhmSQNeURfXZ54GQH8/FSlDV3D12yvfxF7wNVVMMBQ1eqT1xPNA2fHoLz
ieS/481Pdg4J4/kMqDGMyhSwL18FW5rJWnJWk+1pYYyOTONmVcejEOO0zPtmRMPA
5ovzBSrDf8PC0P69MzgbXqwDgwjy3V9goJo2ugyVVhDB0fkeLyH62pMQEAxFksLM
6EGPOB6H/HbgrYLLBpqlezjSDUpyAcjHPtbJ7D8jnY4O33GuKg578Uhtl8MQcnq2
heTsF+AmOjsXT+yGj0u542AT32RaffEJ8K/4yPcb+gsQkL09nADdGTb4NGWfDp0L
N85sUTfHTB1mrIw=
-----END CERTIFICATE-----
Generated at Mon Feb 23 05:30:48 2026 by rpki-client