Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2SsJDXMb9d9qSW9Kz9SFgg8Ddfopf9HQqkySEkjGHAfj/0/3137302e3135302e3235352e302f32342d3234203d3e203631363633.roa
File:                     3137302e3135302e3235352e302f32342d3234203d3e203631363633.roa (raw, json)
Hash identifier:          fJaVrmxmWPt/G12/vPgvwcvVLzgAw3r6tq89FawB/p0=
Subject key identifier:   40:AD:50:6C:6A:96:BC:43:79:55:45:6B:F2:E3:F7:3D:F2:94:9A:77
Certificate issuer:       /CN=A4613102C06DD4600B98177DD43712196340E623
Certificate serial:       135E8783FF21B50DB0DE6EDD05BD3DA5EECBBF8C
Authority key identifier: A4:61:31:02:C0:6D:D4:60:0B:98:17:7D:D4:37:12:19:63:40:E6:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4613102C06DD4600B98177DD43712196340E623.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2SsJDXMb9d9qSW9Kz9SFgg8Ddfopf9HQqkySEkjGHAfj/0/3137302e3135302e3235352e302f32342d3234203d3e203631363633.roa
Signing time:             Wed 04 Feb 2026 12:35:29 +0000
ROA not before:           Wed 04 Feb 2026 12:30:29 +0000
ROA not after:            Wed 03 Feb 2027 12:35:29 +0000
asID:                     61663
IP address blocks:        170.150.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2SsJDXMb9d9qSW9Kz9SFgg8Ddfopf9HQqkySEkjGHAfj/0/A4613102C06DD4600B98177DD43712196340E623.crl
                          rsync://rpki-repo.registro.br/repo/2SsJDXMb9d9qSW9Kz9SFgg8Ddfopf9HQqkySEkjGHAfj/0/A4613102C06DD4600B98177DD43712196340E623.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4613102C06DD4600B98177DD43712196340E623.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 20:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:5e:87:83:ff:21:b5:0d:b0:de:6e:dd:05:bd:3d:a5:ee:cb:bf:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4613102C06DD4600B98177DD43712196340E623
        Validity
            Not Before: Feb  4 12:30:29 2026 GMT
            Not After : Feb  3 12:35:29 2027 GMT
        Subject: CN=40AD506C6A96BC437955456BF2E3F73DF2949A77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:95:32:19:dd:af:f8:1f:9a:a0:82:c5:37:3f:
                    8b:75:ff:f7:cc:12:b8:10:5c:bc:c9:f0:d2:93:c3:
                    3e:60:61:8f:30:40:6f:6d:9d:33:ee:1c:60:8b:59:
                    40:4a:06:59:b7:e1:ef:5f:2f:d3:d9:98:16:9e:69:
                    cf:54:08:f3:ec:f2:cb:66:21:07:29:e2:a3:af:16:
                    f0:e8:4e:ed:6f:01:de:da:8e:18:fa:da:2d:2c:d8:
                    41:27:b2:22:1a:72:a9:33:4d:17:82:8a:5a:41:95:
                    d7:13:4e:ec:43:bb:b4:c5:e3:50:e4:d1:c4:b0:a5:
                    20:a7:64:01:33:0e:8c:e3:6a:03:c7:cf:7e:9d:09:
                    c6:ae:2c:01:9a:d5:c2:2a:9d:58:b6:e6:20:b4:22:
                    49:dc:9c:34:8a:00:20:9e:92:c9:59:45:a6:66:c6:
                    21:76:70:c8:30:f4:11:95:37:d8:91:86:1b:a5:36:
                    16:98:f3:29:71:ca:6e:0c:3b:22:a7:18:d2:34:5b:
                    b0:cd:e0:97:dd:72:85:39:7a:ff:aa:e5:ee:c9:a5:
                    4a:ec:96:8a:4d:b6:c9:04:a9:78:2b:ae:2a:d6:bb:
                    e1:d6:3e:2f:8a:d2:c3:93:8e:55:4b:19:89:fd:5b:
                    39:94:c4:ce:55:01:82:9b:fa:02:86:14:3e:01:6a:
                    a5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:AD:50:6C:6A:96:BC:43:79:55:45:6B:F2:E3:F7:3D:F2:94:9A:77
            X509v3 Authority Key Identifier:
                keyid:A4:61:31:02:C0:6D:D4:60:0B:98:17:7D:D4:37:12:19:63:40:E6:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2SsJDXMb9d9qSW9Kz9SFgg8Ddfopf9HQqkySEkjGHAfj/0/A4613102C06DD4600B98177DD43712196340E623.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4613102C06DD4600B98177DD43712196340E623.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2SsJDXMb9d9qSW9Kz9SFgg8Ddfopf9HQqkySEkjGHAfj/0/3137302e3135302e3235352e302f32342d3234203d3e203631363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:32:db:aa:86:2b:45:1c:7a:e8:c0:b1:ac:e0:a2:af:64:58:
         28:ab:f6:22:1d:0c:bc:bd:0f:a9:d2:16:c6:41:69:3f:d7:d1:
         5b:e2:2d:4c:b3:b9:22:97:49:ee:fb:b3:d3:0b:2d:7d:3c:7a:
         46:c8:74:b5:86:cb:ff:e7:32:51:77:f9:f2:cd:a9:77:f5:c5:
         65:bd:c9:a1:a6:28:34:7f:53:b0:e3:17:4b:71:bf:27:9a:b7:
         96:46:2c:06:eb:37:d0:ea:87:e6:a7:f5:bf:2c:b6:00:ba:9d:
         f2:c0:02:4b:6a:54:2d:ba:6c:1f:07:60:6e:20:ff:54:51:66:
         d6:1e:11:fc:e5:53:77:2f:d5:6c:88:7c:21:ce:e9:70:4a:da:
         7c:ed:e8:f0:8c:d7:34:fc:bd:ed:e5:95:ed:ca:1a:82:68:90:
         ba:f9:e4:1b:b8:79:bd:6b:61:e2:38:7e:8e:af:91:e6:a7:2e:
         45:ad:cf:b4:ea:73:50:ad:f7:29:10:74:b8:37:c1:92:c2:15:
         ba:35:1d:40:47:48:b0:7f:35:a6:0f:17:0a:ac:e9:9f:39:14:
         7e:8f:1b:ff:17:49:ed:f9:17:f0:f2:81:c1:6d:45:60:ed:f9:
         bf:a5:7c:95:49:fc:d5:7c:8d:14:0a:17:f7:e2:9a:fc:59:e0:
         81:d4:2d:2b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUE16Hg/8htQ2w3m7dBb09pe7Lv4wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTQ2MTMxMDJDMDZERDQ2MDBCOTgxNzdERDQzNzEyMTk2
MzQwRTYyMzAeFw0yNjAyMDQxMjMwMjlaFw0yNzAyMDMxMjM1MjlaMDMxMTAvBgNV
BAMTKDQwQUQ1MDZDNkE5NkJDNDM3OTU1NDU2QkYyRTNGNzNERjI5NDlBNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmlTIZ3a/4H5qggsU3P4t1//fM
ErgQXLzJ8NKTwz5gYY8wQG9tnTPuHGCLWUBKBlm34e9fL9PZmBaeac9UCPPs8stm
IQcp4qOvFvDoTu1vAd7ajhj62i0s2EEnsiIacqkzTReCilpBldcTTuxDu7TF41Dk
0cSwpSCnZAEzDozjagPHz36dCcauLAGa1cIqnVi25iC0IkncnDSKACCekslZRaZm
xiF2cMgw9BGVN9iRhhulNhaY8ylxym4MOyKnGNI0W7DN4JfdcoU5ev+q5e7JpUrs
lopNtskEqXgrrirWu+HWPi+K0sOTjlVLGYn9WzmUxM5VAYKb+gKGFD4BaqU5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUQK1QbGqWvEN5VUVr8uP3PfKUmncwHwYDVR0j
BBgwFoAUpGExAsBt1GALmBd91DcSGWNA5iMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlNzSkRYTWI5ZDlxU1c5S3o5U0ZnZzhEZGZvcGY5SFFxa3lTRWtqR0hB
ZmovMC9BNDYxMzEwMkMwNkRENDYwMEI5ODE3N0RENDM3MTIxOTYzNDBFNjIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E0NjEzMTAyQzA2REQ0NjAw
Qjk4MTc3REQ0MzcxMjE5NjM0MEU2MjMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJTc0pEWE1iOWQ5cVNXOUt6OVNGZ2c4RGRmb3BmOUhRcWt5U0VrakdIQWZqLzAv
MzEzNzMwMmUzMTM1MzAyZTMyMzUzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2
MzEzNjM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACqlv8wDQYJKoZIhvcNAQELBQADggEBAB4y26qG
K0UceujAsazgoq9kWCir9iIdDLy9D6nSFsZBaT/X0VviLUyzuSKXSe77s9MLLX08
ekbIdLWGy//nMlF3+fLNqXf1xWW9yaGmKDR/U7DjF0txvyeat5ZGLAbrN9Dqh+an
9b8stgC6nfLAAktqVC26bB8HYG4g/1RRZtYeEfzlU3cv1WyIfCHO6XBK2nzt6PCM
1zT8ve3lle3KGoJokLr55Bu4eb1rYeI4fo6vkeanLkWtz7Tqc1Ct9ykQdLg3wZLC
Fbo1HUBHSLB/NaYPFwqs6Z85FH6PG/8XSe35F/DygcFtRWDt+b+lfJVJ/NV8jRQK
F/fimvxZ4IHULSs=
-----END CERTIFICATE-----
Generated at Mon Feb 23 05:30:47 2026 by rpki-client