Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/3133312e3232312e38322e302f32342d3234203d3e203233373634.roa
File:                     3133312e3232312e38322e302f32342d3234203d3e203233373634.roa (raw, json)
Hash identifier:          fPNhiu5zQ+35XtLZHpTObQXQNqIK4POYrJm7wIxcHhc=
Subject key identifier:   EB:AC:A0:94:94:5C:E9:E8:AF:D9:51:8F:D2:59:AA:2F:17:1B:FA:E5
Certificate issuer:       /CN=213D61EA584763705A7243F87D26327EC5CA63B0
Certificate serial:       59DC6BD42C567E41578CC6FD93AAEE452168F329
Authority key identifier: 21:3D:61:EA:58:47:63:70:5A:72:43:F8:7D:26:32:7E:C5:CA:63:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/213D61EA584763705A7243F87D26327EC5CA63B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/3133312e3232312e38322e302f32342d3234203d3e203233373634.roa
Signing time:             Fri 13 Feb 2026 23:45:43 +0000
ROA not before:           Fri 13 Feb 2026 23:40:43 +0000
ROA not after:            Fri 12 Feb 2027 23:45:43 +0000
asID:                     23764
IP address blocks:        131.221.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.crl
                          rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/213D61EA584763705A7243F87D26327EC5CA63B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 06:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:dc:6b:d4:2c:56:7e:41:57:8c:c6:fd:93:aa:ee:45:21:68:f3:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=213D61EA584763705A7243F87D26327EC5CA63B0
        Validity
            Not Before: Feb 13 23:40:43 2026 GMT
            Not After : Feb 12 23:45:43 2027 GMT
        Subject: CN=EBACA094945CE9E8AFD9518FD259AA2F171BFAE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:77:a6:37:55:c0:82:a5:ef:89:a7:a0:bf:91:
                    df:47:4f:64:20:6c:9e:02:4d:05:2e:41:f6:3f:a5:
                    05:06:0c:98:a3:0a:26:95:77:04:23:81:e5:68:1e:
                    1c:2d:d2:58:5e:b9:27:6e:43:49:7a:7d:98:eb:1e:
                    66:8b:17:34:da:4a:c3:84:fd:6e:48:6e:be:49:57:
                    8b:90:d2:7e:d9:0d:5f:a0:7c:70:25:1a:c1:f4:e9:
                    dc:0e:ce:bb:fa:9c:e6:c9:49:04:d1:47:24:f0:26:
                    a6:a0:28:fe:30:48:74:ef:80:e8:cf:bf:31:75:c7:
                    8a:2f:21:61:59:ce:6d:8a:af:17:bb:2c:76:42:dd:
                    27:c7:e7:8c:a3:1a:79:74:d4:b2:bb:d4:ba:ae:96:
                    a4:d4:77:86:b5:26:1f:9d:c3:6a:2b:22:a2:d9:24:
                    04:ea:64:63:9d:29:d7:cb:fb:62:27:5d:4d:77:f9:
                    e4:a9:67:24:5b:d3:9c:48:40:00:f5:c0:ff:22:d3:
                    97:56:b1:d5:df:71:59:34:c9:62:f0:03:17:6f:ef:
                    6e:8f:2b:5d:bb:38:79:38:f4:73:f9:0e:a5:58:f1:
                    71:f2:b3:f9:2f:da:3a:f4:7a:43:07:df:53:d4:81:
                    73:6f:a0:1f:d7:7f:a2:0d:52:33:74:6f:2a:0b:89:
                    00:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AC:A0:94:94:5C:E9:E8:AF:D9:51:8F:D2:59:AA:2F:17:1B:FA:E5
            X509v3 Authority Key Identifier:
                keyid:21:3D:61:EA:58:47:63:70:5A:72:43:F8:7D:26:32:7E:C5:CA:63:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/213D61EA584763705A7243F87D26327EC5CA63B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/3133312e3232312e38322e302f32342d3234203d3e203233373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:45:18:5e:9f:7c:34:2a:bd:b6:7c:94:a2:76:30:f6:5c:ef:
         d6:a6:88:60:0f:de:79:6b:32:98:89:66:aa:ab:ee:a2:db:d0:
         28:9a:8c:e7:10:52:8b:ae:77:3f:1d:64:a7:1d:59:85:a2:6e:
         e9:92:a3:83:05:65:21:c0:38:a4:ed:72:c2:a4:82:4a:d9:96:
         6b:e4:e4:88:f4:57:e3:27:01:46:1f:ab:11:6f:c4:20:d5:9f:
         33:d2:dd:34:15:61:e2:51:6e:8a:6c:c6:f5:9e:0f:c5:67:84:
         2c:0a:e4:93:b2:b9:b1:cd:bf:8a:ec:8d:48:ca:3a:ea:76:35:
         16:68:4b:88:8d:bc:df:ff:ce:92:39:30:f9:db:06:13:fb:b1:
         98:9b:ac:80:b9:7e:56:2e:46:51:6b:d2:16:a4:06:8d:0e:5a:
         9f:de:2e:ee:aa:3c:69:22:be:3b:62:31:7a:d6:69:d8:4e:2f:
         ad:b9:e6:2b:38:7c:5c:fb:bd:24:1b:cc:f0:2c:ca:da:ed:13:
         25:82:3f:96:8b:75:9c:d1:24:49:35:dc:6b:7e:39:26:bd:3e:
         d9:54:af:88:41:16:b5:21:f8:f9:73:9f:f2:61:3d:6a:cd:02:
         43:87:82:dd:05:56:88:df:ef:17:66:72:7f:72:5d:ca:9f:00:
         cd:38:10:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 08:18:05 2026 by rpki-client