Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/3133312e3232312e38302e302f32322d3232203d3e203233373634.roa
File:                     3133312e3232312e38302e302f32322d3232203d3e203233373634.roa (raw, json)
Hash identifier:          hrUv4pVrM/tW1vOl4vCpSeK58OalTkLfMZoZBCjg8Bs=
Subject key identifier:   7B:C1:85:57:FA:9E:6F:E6:1A:86:9B:B6:FE:B1:5E:61:D3:C2:BE:AC
Certificate issuer:       /CN=213D61EA584763705A7243F87D26327EC5CA63B0
Certificate serial:       31230E0736C57297A6263893C2CBB35C3D055B7C
Authority key identifier: 21:3D:61:EA:58:47:63:70:5A:72:43:F8:7D:26:32:7E:C5:CA:63:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/213D61EA584763705A7243F87D26327EC5CA63B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/3133312e3232312e38302e302f32322d3232203d3e203233373634.roa
Signing time:             Fri 13 Feb 2026 23:45:45 +0000
ROA not before:           Fri 13 Feb 2026 23:40:45 +0000
ROA not after:            Fri 12 Feb 2027 23:45:45 +0000
asID:                     23764
IP address blocks:        131.221.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.crl
                          rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/213D61EA584763705A7243F87D26327EC5CA63B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 07:29:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:23:0e:07:36:c5:72:97:a6:26:38:93:c2:cb:b3:5c:3d:05:5b:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=213D61EA584763705A7243F87D26327EC5CA63B0
        Validity
            Not Before: Feb 13 23:40:45 2026 GMT
            Not After : Feb 12 23:45:45 2027 GMT
        Subject: CN=7BC18557FA9E6FE61A869BB6FEB15E61D3C2BEAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a0:78:0c:1e:cd:c9:a3:47:59:cb:84:50:a3:
                    a2:92:49:22:d1:bd:ef:ac:35:43:c4:d3:63:ba:a5:
                    87:31:78:13:c6:cf:c6:62:c0:29:71:51:51:4a:36:
                    18:1c:51:37:83:71:5d:9f:50:36:f0:e6:fb:9f:92:
                    0b:68:82:44:e7:ae:24:1c:3b:8c:6d:d6:fc:49:64:
                    08:49:97:74:3a:34:65:5f:dc:b6:9e:27:30:48:f7:
                    33:39:25:3c:05:fc:48:37:77:1f:65:9b:62:7c:38:
                    81:70:05:36:e8:de:24:d9:32:a4:9a:1b:c4:c0:3e:
                    09:6b:69:da:3e:8d:9b:10:78:a6:de:1b:ee:c7:37:
                    cb:8b:53:9c:82:78:ea:df:03:66:3d:40:ce:17:61:
                    84:f4:ba:34:51:7c:a1:f2:4d:38:2a:5b:b2:d7:0d:
                    1b:2d:f8:0d:f3:81:a9:cf:d7:e9:cc:5a:6a:46:af:
                    ee:a0:b5:d6:17:d4:bc:7a:ba:57:cf:84:35:29:df:
                    73:f9:d6:a9:70:a9:ca:24:b4:2f:a4:4d:ee:75:b2:
                    31:88:27:24:18:73:44:ec:88:c6:e1:75:5a:b4:a7:
                    3a:de:ac:a7:8f:3d:0a:6d:23:a9:03:cd:27:25:08:
                    19:83:61:ea:f9:d1:6c:89:3f:31:d4:45:64:31:34:
                    8a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C1:85:57:FA:9E:6F:E6:1A:86:9B:B6:FE:B1:5E:61:D3:C2:BE:AC
            X509v3 Authority Key Identifier:
                keyid:21:3D:61:EA:58:47:63:70:5A:72:43:F8:7D:26:32:7E:C5:CA:63:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/213D61EA584763705A7243F87D26327EC5CA63B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/3133312e3232312e38302e302f32322d3232203d3e203233373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:c0:da:bb:51:e9:da:1f:6b:c8:01:1f:6d:f1:9c:cf:46:f7:
         4e:49:d8:06:9a:b3:68:38:82:cf:c5:81:b2:b2:dd:15:ea:dd:
         70:3c:51:de:30:ec:f2:44:13:8c:51:1a:5c:b6:d1:03:6d:46:
         ac:df:8a:8e:91:bd:65:40:31:0f:25:f4:5d:99:84:ad:e2:67:
         37:1f:74:ab:af:e8:69:ff:b0:05:b5:5a:60:e6:77:c6:21:01:
         cb:06:03:59:36:8c:3e:65:bb:db:b4:b1:5f:b1:d6:15:e2:03:
         4d:62:ff:d6:39:54:29:ac:b0:b9:0d:2d:35:bf:12:80:ac:6c:
         4d:f2:88:ef:fa:f5:e4:41:79:3b:74:ad:b5:6d:06:0a:8e:d9:
         f3:ac:0b:c4:65:97:9e:1d:31:5a:a9:a5:7d:73:97:32:28:0f:
         d9:bf:7f:85:70:75:09:48:44:dc:08:57:a9:94:0e:8b:b1:01:
         a8:0f:1d:08:71:c3:04:28:a3:94:77:34:70:8d:0c:20:f5:0a:
         1d:57:fd:47:cc:3c:ab:34:f9:9b:3d:be:35:85:2d:4b:93:73:
         d1:5c:5f:a1:83:67:3d:09:39:3a:48:be:db:1d:32:4e:82:ef:
         3c:f8:2f:3e:2f:f0:e1:e8:70:a3:a8:e4:56:76:c5:de:ff:9f:
         fc:13:70:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 08:17:23 2026 by rpki-client