Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3230312e3134392e3132342e302f32322d3234203d3e203631383531.roa
File:                     3230312e3134392e3132342e302f32322d3234203d3e203631383531.roa (raw, json)
Hash identifier:          dXFZDpxl0CPapE2XymhmTJROIZFvoNjEaMD/zudFQPw=
Subject key identifier:   EF:A7:79:76:81:45:0D:08:23:C3:12:2D:6A:E6:F8:6E:15:1D:63:04
Certificate issuer:       /CN=E08831199EA949E55408336EDE9CA089E4C3F686
Certificate serial:       51AD9FDF312641D37AFEE46DD54DA3D5D0C139CC
Authority key identifier: E0:88:31:19:9E:A9:49:E5:54:08:33:6E:DE:9C:A0:89:E4:C3:F6:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E08831199EA949E55408336EDE9CA089E4C3F686.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3230312e3134392e3132342e302f32322d3234203d3e203631383531.roa
Signing time:             Tue 03 Feb 2026 18:30:26 +0000
ROA not before:           Tue 03 Feb 2026 18:25:26 +0000
ROA not after:            Tue 02 Feb 2027 18:30:26 +0000
asID:                     61851
IP address blocks:        201.149.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/E08831199EA949E55408336EDE9CA089E4C3F686.crl
                          rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/E08831199EA949E55408336EDE9CA089E4C3F686.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E08831199EA949E55408336EDE9CA089E4C3F686.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 20:44:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ad:9f:df:31:26:41:d3:7a:fe:e4:6d:d5:4d:a3:d5:d0:c1:39:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E08831199EA949E55408336EDE9CA089E4C3F686
        Validity
            Not Before: Feb  3 18:25:26 2026 GMT
            Not After : Feb  2 18:30:26 2027 GMT
        Subject: CN=EFA7797681450D0823C3122D6AE6F86E151D6304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:93:b5:fe:03:ef:28:98:37:d8:10:9a:80:91:
                    49:94:eb:eb:f2:10:c3:00:95:6f:1f:51:92:19:5a:
                    1e:ad:3f:51:50:04:bd:1c:c9:d7:30:26:f3:29:0c:
                    30:16:28:c9:3e:2b:8e:d9:97:a5:4a:77:0d:84:b7:
                    0d:bf:25:59:e4:21:16:dc:2a:e8:15:b6:15:75:19:
                    d2:4e:f7:87:0b:12:13:fa:c5:cd:8d:24:36:b7:29:
                    10:fd:c0:6a:be:77:b3:63:aa:98:53:7b:ca:73:6d:
                    d9:4a:f5:4a:90:3b:29:a3:4f:c1:59:ae:14:13:e9:
                    7f:55:cd:ba:b3:5a:07:65:8d:27:4f:f6:72:e0:22:
                    46:05:ec:ba:18:d7:2f:96:e2:9b:54:49:d0:23:d4:
                    9d:e3:8e:f1:f6:17:30:76:7b:27:da:96:3d:ff:38:
                    4f:73:fe:d2:53:1e:66:f5:0e:28:f2:bf:4e:4b:4b:
                    4e:37:1c:e7:2f:a5:4b:76:79:62:21:9c:ea:5d:90:
                    60:42:3a:ea:3f:50:bd:b9:ae:54:33:43:7c:57:42:
                    65:b6:92:e6:6f:ec:f8:17:78:50:a2:8e:2f:c6:a9:
                    d9:d7:71:54:b4:41:58:dc:31:9e:66:7d:b0:54:bd:
                    68:b2:2f:31:c5:a1:ba:fd:92:16:f9:17:3d:ed:24:
                    e4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A7:79:76:81:45:0D:08:23:C3:12:2D:6A:E6:F8:6E:15:1D:63:04
            X509v3 Authority Key Identifier:
                keyid:E0:88:31:19:9E:A9:49:E5:54:08:33:6E:DE:9C:A0:89:E4:C3:F6:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/E08831199EA949E55408336EDE9CA089E4C3F686.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E08831199EA949E55408336EDE9CA089E4C3F686.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3230312e3134392e3132342e302f32322d3234203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.149.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:b8:fb:da:c1:9e:87:6d:fc:83:75:88:69:7b:41:2d:e8:e7:
         86:3e:e9:bf:07:7e:b6:22:3c:b9:6c:44:8a:f7:f0:3e:c0:de:
         71:f1:c4:6a:d4:8a:cc:13:c0:97:57:fd:3e:d9:ea:b1:6b:31:
         07:48:9b:b4:fb:19:3d:31:2c:2e:88:9a:58:cb:c3:9e:58:81:
         c5:f4:b3:33:9a:89:69:da:0a:45:99:96:2f:29:94:65:55:b1:
         96:13:15:e0:2c:c7:1a:2c:33:46:ed:1a:a2:1c:e3:03:e5:75:
         6a:6e:7d:4d:c6:4c:ea:9c:7b:04:56:2f:63:88:f7:fc:e8:db:
         8c:da:30:de:ee:e4:81:f7:77:27:f8:df:0b:5c:40:1a:df:e9:
         f1:53:da:96:b3:cf:b0:db:65:e2:88:fe:5c:85:dc:73:0f:bc:
         ef:fb:ff:73:be:83:7b:54:b4:53:a5:bd:e4:94:f6:8f:dd:32:
         84:1f:de:d9:e6:99:7e:a6:ec:ea:68:d6:4c:0b:15:0d:e5:0a:
         5e:b9:a7:a0:d4:0d:76:a2:09:2a:a4:99:96:56:42:0c:62:b0:
         0c:44:7b:ac:9c:ff:e1:e4:14:2c:88:bf:86:73:48:ec:0a:bd:
         fe:5f:f5:61:f6:9e:42:03:f1:f0:a8:4b:37:3c:fa:d7:d7:99:
         aa:24:4a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:51:24 2026 by rpki-client