Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2SsJDXMb9d9qSW9Kz9SFgg8Ddfopf9HQqkySEkjGHAfj/0/3137302e3135302e3235342e302f32332d3233203d3e203631363633.roa
File:                     3137302e3135302e3235342e302f32332d3233203d3e203631363633.roa (raw, json)
Hash identifier:          nD2Jc+mWtfjnIWz3YbiQZYYvSm1AlCmif9KLkMi8d74=
Subject key identifier:   37:8F:CF:52:84:37:98:05:49:88:CA:63:66:D5:25:09:0E:B8:B2:B5
Certificate issuer:       /CN=A4613102C06DD4600B98177DD43712196340E623
Certificate serial:       2D5F8B798F9C00936D21FB50E028FB338A830610
Authority key identifier: A4:61:31:02:C0:6D:D4:60:0B:98:17:7D:D4:37:12:19:63:40:E6:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4613102C06DD4600B98177DD43712196340E623.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2SsJDXMb9d9qSW9Kz9SFgg8Ddfopf9HQqkySEkjGHAfj/0/3137302e3135302e3235342e302f32332d3233203d3e203631363633.roa
Signing time:             Wed 04 Feb 2026 12:35:22 +0000
ROA not before:           Wed 04 Feb 2026 12:30:22 +0000
ROA not after:            Wed 03 Feb 2027 12:35:22 +0000
asID:                     61663
IP address blocks:        170.150.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2SsJDXMb9d9qSW9Kz9SFgg8Ddfopf9HQqkySEkjGHAfj/0/A4613102C06DD4600B98177DD43712196340E623.crl
                          rsync://rpki-repo.registro.br/repo/2SsJDXMb9d9qSW9Kz9SFgg8Ddfopf9HQqkySEkjGHAfj/0/A4613102C06DD4600B98177DD43712196340E623.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4613102C06DD4600B98177DD43712196340E623.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 20:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:5f:8b:79:8f:9c:00:93:6d:21:fb:50:e0:28:fb:33:8a:83:06:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4613102C06DD4600B98177DD43712196340E623
        Validity
            Not Before: Feb  4 12:30:22 2026 GMT
            Not After : Feb  3 12:35:22 2027 GMT
        Subject: CN=378FCF52843798054988CA6366D525090EB8B2B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:85:ea:dd:e7:9d:15:bd:dc:8a:43:89:42:16:
                    0b:99:fb:c7:a5:d0:34:4c:d6:93:8b:94:7f:a2:24:
                    99:56:32:68:83:22:87:85:70:78:9f:36:70:af:ca:
                    72:9f:d4:85:7f:29:74:ac:58:6f:e5:67:0c:78:08:
                    d3:a4:8d:91:b4:43:ed:ec:ac:a6:46:35:90:af:de:
                    cf:83:e1:93:81:b7:6e:11:06:6a:4a:15:63:2d:e7:
                    bb:38:c0:77:9b:8b:bb:57:3b:71:ef:b3:03:15:ed:
                    79:bd:33:c5:c5:f8:69:7f:d3:c8:8f:ff:3f:18:6e:
                    6e:56:ef:a9:d6:a3:51:e5:d1:9a:8f:57:8e:eb:d8:
                    69:f7:73:f2:b0:8b:35:ea:95:65:e2:3e:7b:04:73:
                    c5:ce:4c:4b:d8:fe:01:26:a6:c2:31:4d:c2:ef:b3:
                    7f:7a:c3:6d:bc:d9:3f:ad:26:e1:6c:a7:8b:a6:08:
                    bd:7f:20:4a:e9:2c:11:1b:3a:2f:cb:4f:0c:6b:49:
                    ba:96:88:e0:a8:4d:7d:58:bd:78:c3:ff:c9:63:e8:
                    15:1f:f8:a0:06:dd:59:26:29:62:ec:d4:bf:f5:48:
                    fa:de:ad:62:61:8f:6f:88:1e:68:20:ae:9f:04:eb:
                    58:87:c1:77:2e:0a:ac:54:0a:51:57:7d:39:1c:95:
                    11:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:8F:CF:52:84:37:98:05:49:88:CA:63:66:D5:25:09:0E:B8:B2:B5
            X509v3 Authority Key Identifier:
                keyid:A4:61:31:02:C0:6D:D4:60:0B:98:17:7D:D4:37:12:19:63:40:E6:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2SsJDXMb9d9qSW9Kz9SFgg8Ddfopf9HQqkySEkjGHAfj/0/A4613102C06DD4600B98177DD43712196340E623.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4613102C06DD4600B98177DD43712196340E623.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2SsJDXMb9d9qSW9Kz9SFgg8Ddfopf9HQqkySEkjGHAfj/0/3137302e3135302e3235342e302f32332d3233203d3e203631363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:88:46:eb:7f:90:a1:6d:89:a2:f9:4c:65:6f:f2:03:a6:91:
         92:3e:58:f6:1d:9a:15:bd:e2:fd:8b:58:96:de:12:87:fe:3d:
         22:11:64:0d:bf:eb:0e:d0:45:ba:8d:4e:21:2a:2a:62:43:36:
         4d:5c:b3:22:3c:16:80:df:fa:03:89:4d:98:5b:22:7c:1c:76:
         70:ef:1d:a2:a5:c8:da:47:29:ab:b3:72:6b:4a:34:4a:19:e7:
         1a:25:06:83:25:79:80:42:2e:f1:7c:05:c4:df:33:ee:db:c7:
         bd:90:5c:02:af:07:71:30:c9:8f:b3:06:07:86:0b:29:d9:76:
         34:e2:ac:f4:56:11:ad:53:5a:c6:df:e1:5b:80:f5:c2:be:73:
         9c:b4:25:7d:97:01:56:b3:ae:92:2f:13:84:12:d3:a7:f3:19:
         0b:08:04:e0:33:8a:1d:03:ab:22:82:7c:8f:a5:c6:8c:f2:bd:
         72:5a:33:ce:03:f4:b2:d1:f5:c9:2d:64:1b:3e:94:f2:12:a8:
         ab:35:d9:42:f0:a3:ad:90:e1:44:7d:e0:a2:19:7d:a2:d9:08:
         9f:8a:d2:02:12:ec:0f:36:e5:55:0d:d9:57:3a:95:84:02:1c:
         43:ef:61:5d:19:73:ac:e7:4c:3a:b0:2a:37:e4:41:66:e2:29:
         a3:23:27:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:30:52 2026 by rpki-client