Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3133312e3235352e3232342e302f32342d3234203d3e20323634343936.roa
File:                     3133312e3235352e3232342e302f32342d3234203d3e20323634343936.roa (raw, json)
Hash identifier:          vuaa7WFz40PI4H6qrT1xy6CaAe2bAwZEMsXoAArmb9Y=
Subject key identifier:   0A:FC:A0:01:44:08:D3:F9:67:2A:B2:07:27:CD:DE:8E:EE:89:5C:48
Certificate issuer:       /CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
Certificate serial:       3480F7AF162EC437992435D7C5D9AC1525C3A664
Authority key identifier: 97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3133312e3235352e3232342e302f32342d3234203d3e20323634343936.roa
Signing time:             Wed 28 Jan 2026 15:12:33 +0000
ROA not before:           Wed 28 Jan 2026 15:07:33 +0000
ROA not after:            Wed 27 Jan 2027 15:12:33 +0000
asID:                     264496
IP address blocks:        131.255.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl
                          rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 00:15:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:80:f7:af:16:2e:c4:37:99:24:35:d7:c5:d9:ac:15:25:c3:a6:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
        Validity
            Not Before: Jan 28 15:07:33 2026 GMT
            Not After : Jan 27 15:12:33 2027 GMT
        Subject: CN=0AFCA0014408D3F9672AB20727CDDE8EEE895C48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:02:fc:be:1a:21:68:e0:7f:93:98:cf:b9:bd:
                    7c:72:92:4d:5d:51:19:fe:b7:65:0f:3f:93:48:68:
                    9b:77:3f:d4:7d:89:6a:a6:db:8c:a1:37:59:73:92:
                    0c:d5:5e:ef:7a:a9:de:df:a5:bf:8f:0c:76:a5:5f:
                    83:00:a7:29:6a:2a:db:22:61:5d:93:7b:33:08:37:
                    65:e5:62:9f:73:4c:d6:7c:c2:f3:49:9b:a1:82:80:
                    aa:b5:d7:6e:5f:3e:89:7f:c7:ba:36:8b:50:34:4d:
                    22:21:9d:54:d9:a1:d7:78:47:c2:c1:fe:37:1a:fe:
                    9e:64:c7:6a:43:0f:62:74:24:d1:47:58:94:82:4a:
                    95:45:fa:f7:24:d4:cf:2f:b8:f7:31:ca:dc:37:07:
                    b3:e5:db:2c:5a:cc:db:b0:58:5c:1f:77:2f:79:e5:
                    20:10:3b:64:30:9e:1b:b6:9d:24:f3:66:86:20:0d:
                    f1:2a:16:d8:8f:93:ca:b9:0f:84:ee:ac:8b:45:f9:
                    a2:ce:41:ee:2e:40:4c:ac:7d:a6:16:1b:dc:85:17:
                    b4:89:39:25:23:ce:ca:dc:6c:72:e5:34:3a:ec:45:
                    de:7e:80:cc:e4:c6:0e:a1:43:c8:3a:7d:90:13:8b:
                    ed:98:bc:a7:9f:c2:b1:fe:e4:dc:16:8b:e1:88:ab:
                    42:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:FC:A0:01:44:08:D3:F9:67:2A:B2:07:27:CD:DE:8E:EE:89:5C:48
            X509v3 Authority Key Identifier:
                keyid:97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3133312e3235352e3232342e302f32342d3234203d3e20323634343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:12:4c:13:fb:27:f4:c9:dc:cc:b1:3e:87:4f:56:7b:1d:63:
         4c:b0:19:af:0d:a8:f3:21:ad:ef:0f:ad:0c:bd:15:ec:70:13:
         13:42:96:5e:51:68:f2:3c:3d:0c:15:8d:7f:61:d4:4d:80:74:
         80:98:f5:df:f1:7b:8d:f6:a8:49:d2:ba:7c:fa:25:8c:2a:c5:
         2a:7c:ac:3b:84:99:a3:d0:85:7b:ce:26:60:8e:96:05:dc:bd:
         30:f1:0f:83:d0:7d:ee:e3:b2:db:08:12:7e:af:ab:5c:7a:cf:
         c8:32:95:29:b5:8d:eb:b0:1d:12:70:60:ee:b2:b4:3b:f3:65:
         43:9a:56:05:0f:33:ab:72:e8:eb:e5:59:6b:85:8f:09:e4:75:
         76:03:e0:30:50:db:a2:7a:ae:a5:23:27:19:15:6a:34:20:b7:
         1c:2f:d4:49:a9:81:7a:26:fb:e9:9b:5d:4f:c6:41:d6:36:6e:
         3f:3c:bc:97:1a:fe:1e:d2:06:1b:83:19:87:c4:d2:5e:e5:22:
         16:21:74:c6:09:d4:c7:6d:77:5c:bd:1f:8f:05:e5:f1:48:31:
         6e:14:94:f0:d7:e7:d3:94:a3:2e:37:6c:ef:d8:29:1e:64:06:
         92:8f:e2:b5:ab:f0:34:65:0d:4b:9e:da:ed:f9:97:c0:c6:e6:
         3e:db:6b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:43:34 2026 by rpki-client