Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EojyFvHCeNPxVLBwB7PTvC1BY9hxQWKhQCPMnZQSqRHS/0/3133312e3235352e3130392e302f32342d3234203d3e20323634343834.roa
File:                     3133312e3235352e3130392e302f32342d3234203d3e20323634343834.roa (raw, json)
Hash identifier:          qoLheRC7CToZzk+WLQG9t2AshYyojAH0z+1CCjFBFC0=
Subject key identifier:   DA:17:14:91:26:13:D3:9D:01:1D:9A:C4:C6:3D:BC:CB:F9:5A:8E:4B
Certificate issuer:       /CN=EABBC5494AFF48709E3D64D65220EBB9DE71EBD4
Certificate serial:       667DA307B3D3D257000E8AF6CC985A27B3F87B70
Authority key identifier: EA:BB:C5:49:4A:FF:48:70:9E:3D:64:D6:52:20:EB:B9:DE:71:EB:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EABBC5494AFF48709E3D64D65220EBB9DE71EBD4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EojyFvHCeNPxVLBwB7PTvC1BY9hxQWKhQCPMnZQSqRHS/0/3133312e3235352e3130392e302f32342d3234203d3e20323634343834.roa
Signing time:             Thu 12 Feb 2026 00:14:30 +0000
ROA not before:           Thu 12 Feb 2026 00:09:30 +0000
ROA not after:            Thu 11 Feb 2027 00:14:30 +0000
asID:                     264484
IP address blocks:        131.255.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EojyFvHCeNPxVLBwB7PTvC1BY9hxQWKhQCPMnZQSqRHS/0/EABBC5494AFF48709E3D64D65220EBB9DE71EBD4.crl
                          rsync://rpki-repo.registro.br/repo/EojyFvHCeNPxVLBwB7PTvC1BY9hxQWKhQCPMnZQSqRHS/0/EABBC5494AFF48709E3D64D65220EBB9DE71EBD4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EABBC5494AFF48709E3D64D65220EBB9DE71EBD4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 17:20:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:7d:a3:07:b3:d3:d2:57:00:0e:8a:f6:cc:98:5a:27:b3:f8:7b:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EABBC5494AFF48709E3D64D65220EBB9DE71EBD4
        Validity
            Not Before: Feb 12 00:09:30 2026 GMT
            Not After : Feb 11 00:14:30 2027 GMT
        Subject: CN=DA1714912613D39D011D9AC4C63DBCCBF95A8E4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2d:c0:fb:b5:41:bc:ae:d7:54:e8:df:b3:5c:
                    bc:7b:90:9d:7e:da:a5:27:73:84:0b:ab:9c:33:63:
                    4e:1a:93:5e:57:cb:a9:4e:91:96:fe:41:d6:6a:8a:
                    b1:76:24:13:1e:4a:5b:48:df:cb:f0:c5:46:b2:01:
                    6f:dc:eb:0e:95:b7:8a:65:43:14:40:5e:58:8d:1f:
                    7d:0f:69:fb:c4:38:82:2e:68:b4:b0:26:c7:e8:f4:
                    e8:01:66:08:ac:c9:b2:dc:85:5a:31:09:a2:f4:ed:
                    7a:bb:c9:b0:c4:bd:6a:06:c7:44:f6:a9:fa:dd:2e:
                    23:66:c9:e8:d1:8e:3e:79:26:2f:92:c5:a7:6b:ef:
                    54:4c:70:77:01:ca:58:ee:85:18:f5:64:86:ec:c9:
                    39:1e:a5:02:48:a3:f2:89:7e:45:be:bc:45:a0:4b:
                    c8:55:9b:6b:c2:5a:b2:bc:e7:fc:f1:22:59:f5:21:
                    3d:3f:f3:a6:3d:95:f1:95:61:17:50:f6:68:af:11:
                    72:9c:cd:17:ca:4f:b5:b7:99:f3:74:58:6f:89:89:
                    fe:23:2a:ee:6f:66:86:01:4a:8b:09:7b:83:9b:be:
                    d4:5f:eb:a3:a1:69:86:fb:55:ce:65:6e:fb:6c:5d:
                    33:70:72:93:88:89:b8:f3:b2:b1:4b:f1:f1:8c:0e:
                    0e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:17:14:91:26:13:D3:9D:01:1D:9A:C4:C6:3D:BC:CB:F9:5A:8E:4B
            X509v3 Authority Key Identifier:
                keyid:EA:BB:C5:49:4A:FF:48:70:9E:3D:64:D6:52:20:EB:B9:DE:71:EB:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EojyFvHCeNPxVLBwB7PTvC1BY9hxQWKhQCPMnZQSqRHS/0/EABBC5494AFF48709E3D64D65220EBB9DE71EBD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EABBC5494AFF48709E3D64D65220EBB9DE71EBD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EojyFvHCeNPxVLBwB7PTvC1BY9hxQWKhQCPMnZQSqRHS/0/3133312e3235352e3130392e302f32342d3234203d3e20323634343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:f7:b9:52:dc:e1:c9:3c:c1:9b:71:d9:40:25:82:a4:b1:b6:
         c2:67:b6:69:e5:9f:27:4d:13:7a:c2:22:da:58:a5:40:da:34:
         ac:e2:91:ee:b1:7e:f8:fb:a0:94:8a:da:26:d6:d0:b8:7c:72:
         8e:ea:81:9d:bc:71:f1:88:d6:6e:d3:ac:0c:6a:38:7b:95:bc:
         10:33:0e:24:a1:9a:5e:fc:98:96:59:30:54:10:13:ef:cd:6c:
         09:4a:06:ad:76:4b:30:20:9a:f3:f0:a4:c5:34:d5:7e:81:62:
         8c:3a:c2:08:8b:d9:12:a9:83:6e:48:81:a8:ce:c0:1e:a0:d1:
         7d:7f:7c:5f:41:3b:81:22:02:f7:08:cc:60:6b:c0:16:bd:78:
         b6:46:84:e5:8c:73:41:0a:82:4c:67:49:3d:de:7e:65:ba:4f:
         f6:df:b6:b8:ea:e5:27:cc:f3:ef:69:92:4a:00:ef:9b:4d:ad:
         20:4a:61:51:fe:bd:5b:1d:20:e0:ca:2b:f2:70:ee:c6:0f:ef:
         e6:d6:8e:06:06:75:90:ee:9a:52:a8:3b:93:69:10:56:b5:dd:
         32:37:e3:84:97:9e:4b:3c:7d:34:74:ae:6f:08:38:55:b2:29:
         55:e6:4f:82:0f:e3:4e:f9:c8:be:a4:ba:fa:3b:d4:ed:f2:b9:
         19:8f:86:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:31:36 2026 by rpki-client