Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3133312e3235352e3232342e302f32322d3232203d3e20323634343936.roa
File:                     3133312e3235352e3232342e302f32322d3232203d3e20323634343936.roa (raw, json)
Hash identifier:          gGklbKLp3FyRklDLdRx6xTgDsIaFfSLp057apIVMlRM=
Subject key identifier:   7D:3A:25:77:9E:DA:D9:8A:58:A7:55:1D:11:EB:87:19:3A:0E:1F:11
Certificate issuer:       /CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
Certificate serial:       42D42E9BBAFDB94B813B1A9CB3CA6B9646C1E6D3
Authority key identifier: 97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3133312e3235352e3232342e302f32322d3232203d3e20323634343936.roa
Signing time:             Wed 28 Jan 2026 15:12:32 +0000
ROA not before:           Wed 28 Jan 2026 15:07:32 +0000
ROA not after:            Wed 27 Jan 2027 15:12:32 +0000
asID:                     264496
IP address blocks:        131.255.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl
                          rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 00:15:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:d4:2e:9b:ba:fd:b9:4b:81:3b:1a:9c:b3:ca:6b:96:46:c1:e6:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
        Validity
            Not Before: Jan 28 15:07:32 2026 GMT
            Not After : Jan 27 15:12:32 2027 GMT
        Subject: CN=7D3A25779EDAD98A58A7551D11EB87193A0E1F11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:37:e3:da:a5:b1:2d:37:0f:56:31:0e:19:4f:
                    20:fb:38:1c:ea:2d:b6:2c:f7:2e:46:6f:b3:76:e7:
                    8c:13:62:ae:ad:4e:68:8a:02:48:06:24:48:be:fd:
                    70:f7:4f:9c:c5:77:19:14:5d:5a:83:2f:66:53:94:
                    a7:49:ac:6a:f9:62:dd:85:8d:a1:d7:f0:03:1f:90:
                    11:36:18:40:f8:a2:7f:c1:1c:b8:69:69:80:df:d0:
                    6e:29:bc:bb:98:c4:6e:a5:f0:26:6d:0c:cb:84:df:
                    b7:71:08:cc:6e:8c:0a:c5:ac:e6:8e:c5:45:b5:07:
                    ac:5a:de:65:00:b2:4f:a1:8f:51:25:9c:10:d7:e8:
                    2f:62:f4:35:ac:c4:21:b9:fa:d2:2e:e7:bf:a1:99:
                    8b:73:ca:88:31:90:0d:df:93:7f:7a:bc:f5:e5:e8:
                    17:4a:33:3d:f3:cc:bb:d6:75:b1:e6:95:24:be:3e:
                    5a:82:6b:91:c0:6e:16:8b:36:3d:59:30:e5:13:46:
                    d9:bd:bf:17:35:5a:04:10:01:27:82:4a:60:da:f3:
                    0c:ed:66:c4:42:1a:89:58:e9:08:9a:3c:cc:6a:bc:
                    b1:d7:ce:7b:d2:66:9d:b2:1a:91:73:d0:00:66:c2:
                    be:33:40:f8:2c:af:e6:45:8d:3e:34:fa:3f:b6:f5:
                    be:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:3A:25:77:9E:DA:D9:8A:58:A7:55:1D:11:EB:87:19:3A:0E:1F:11
            X509v3 Authority Key Identifier:
                keyid:97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3133312e3235352e3232342e302f32322d3232203d3e20323634343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:f1:14:4f:42:cc:2d:b2:2d:ce:2e:c1:41:8b:39:29:e6:3f:
         93:6c:10:09:f0:68:bb:78:50:f7:de:6b:2e:f0:0a:6a:80:1a:
         9c:d6:8e:c2:69:9b:59:12:c4:eb:a0:82:7a:8e:e7:7b:57:04:
         ef:80:a0:93:23:04:2e:38:53:fa:03:7d:63:4d:e8:36:eb:9d:
         8f:f1:ba:9e:28:9a:7f:bd:cb:92:f5:48:00:08:b7:c6:96:e2:
         aa:c1:66:5e:89:47:e2:96:c6:3d:1d:e3:0b:7d:c7:7c:70:7a:
         68:71:29:63:69:da:ee:c6:40:d0:be:2e:ea:f4:86:47:2a:51:
         20:21:c3:aa:f7:c7:35:3a:a7:71:46:88:80:d1:1f:ee:56:e8:
         93:3b:66:6e:61:6b:2d:23:71:0d:da:c1:3d:07:6c:2a:f2:f5:
         be:ab:90:7b:bb:38:e5:0c:cf:af:52:ce:b4:b6:ae:08:bd:9c:
         e0:06:a0:f8:98:dd:79:a8:13:db:a2:fb:1e:49:b6:19:2d:33:
         92:43:7c:1b:1b:e0:38:bb:84:31:39:3a:f5:59:8c:4f:d2:d1:
         d4:39:47:bb:b5:bd:b0:94:8e:84:54:71:1b:0f:9e:86:15:03:
         94:69:ea:f8:f9:05:cd:4a:5d:09:f2:99:36:27:74:2d:d8:c0:
         db:4d:c5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:41:35 2026 by rpki-client