Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3133312e3235352e3232362e302f32342d3234203d3e20323634343936.roa
File:                     3133312e3235352e3232362e302f32342d3234203d3e20323634343936.roa (raw, json)
Hash identifier:          jrCO97Sqk+JzlgxMd3yu/wRe4YCaRhsTNV+fjnlSviE=
Subject key identifier:   E7:7E:7E:62:07:07:17:BC:F7:CD:35:CA:6F:98:C8:1E:C5:6A:2D:BF
Certificate issuer:       /CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
Certificate serial:       5AB1B9C0F17B4D83752AD4901E6D1B836FB9ED22
Authority key identifier: 97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3133312e3235352e3232362e302f32342d3234203d3e20323634343936.roa
Signing time:             Wed 28 Jan 2026 15:12:33 +0000
ROA not before:           Wed 28 Jan 2026 15:07:33 +0000
ROA not after:            Wed 27 Jan 2027 15:12:33 +0000
asID:                     264496
IP address blocks:        131.255.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl
                          rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 00:15:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:b1:b9:c0:f1:7b:4d:83:75:2a:d4:90:1e:6d:1b:83:6f:b9:ed:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
        Validity
            Not Before: Jan 28 15:07:33 2026 GMT
            Not After : Jan 27 15:12:33 2027 GMT
        Subject: CN=E77E7E62070717BCF7CD35CA6F98C81EC56A2DBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:dd:c9:aa:35:a3:b6:2c:13:fb:9c:e1:a0:c8:
                    d8:42:a2:e9:e4:45:e8:86:d0:0e:69:f1:82:85:58:
                    d8:91:7e:79:b9:b6:0c:2d:3e:3e:f8:e9:06:03:01:
                    06:bd:d5:63:98:e1:3f:73:08:ed:e8:b7:0e:77:b7:
                    e6:96:17:f3:89:96:eb:d1:76:40:52:6a:d6:6d:72:
                    17:c2:2d:68:a0:db:ce:53:90:13:3a:ce:1a:b2:08:
                    95:f7:71:5a:6c:aa:73:7f:9f:47:fd:89:1e:9f:68:
                    95:0c:8d:fa:ce:2a:b9:6f:8a:43:93:3a:1b:19:b8:
                    55:2e:40:c0:7b:64:63:d9:0b:97:37:04:40:44:2c:
                    5f:9a:0f:bb:b2:5e:6c:86:73:1b:94:26:95:3d:1e:
                    25:99:f9:1c:e8:9d:d5:f8:23:1f:e4:ba:49:03:6c:
                    e5:7c:60:21:2d:ec:42:8e:18:b1:83:64:fc:73:46:
                    78:2a:82:70:cb:f5:e2:b2:99:72:ed:06:8b:0e:ef:
                    70:55:7c:2e:0f:e1:c8:a5:6a:0c:55:63:f5:0f:b9:
                    bc:58:25:a7:28:a5:89:4e:56:9c:6b:b0:17:79:72:
                    89:c8:bc:a3:5f:89:20:55:a9:9b:38:94:23:14:7c:
                    f3:46:6d:b2:bf:9b:34:9a:da:b8:b1:03:26:aa:34:
                    b2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:7E:7E:62:07:07:17:BC:F7:CD:35:CA:6F:98:C8:1E:C5:6A:2D:BF
            X509v3 Authority Key Identifier:
                keyid:97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3133312e3235352e3232362e302f32342d3234203d3e20323634343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:48:82:7e:93:05:a0:53:13:a7:bc:56:59:5e:e0:41:1e:4b:
         4d:c3:07:96:72:8d:fc:2e:a8:12:ff:5c:51:3b:e7:2f:5c:a1:
         ef:f3:7c:74:fe:30:0c:32:80:b0:25:ed:18:4c:61:46:5f:af:
         d3:e6:5f:82:8e:73:a4:e5:f8:24:c0:13:63:c6:62:97:be:c1:
         aa:d5:03:5b:8a:f7:81:0a:0b:1a:00:b2:c7:12:2c:a7:98:7d:
         ac:d0:6f:df:2e:d9:56:b1:ec:25:cd:93:9b:ad:b2:f9:ca:ce:
         1e:ef:fe:77:e1:9f:f8:a4:e4:9e:46:c7:2a:00:86:ee:59:80:
         39:a7:1b:bc:16:98:66:54:9a:8f:2a:74:7e:94:d3:35:32:ad:
         a3:bd:db:49:a5:0e:08:a9:87:bb:cf:17:33:10:0d:cb:8e:b8:
         d2:84:79:e3:93:61:30:c3:c0:c1:7e:6b:a4:e3:26:fa:da:ca:
         82:8d:ca:f3:06:71:37:c8:ce:0b:12:44:55:1b:6c:2b:86:1b:
         f8:34:70:70:cd:5e:74:6a:b7:b3:ed:5f:81:5d:f2:b1:ab:14:
         5c:fa:65:bc:f5:95:e6:55:8a:3c:18:3f:a0:44:f4:97:05:42:
         93:db:ba:8b:9d:5f:10:2b:0b:88:7a:e8:86:0c:c5:19:21:e2:
         27:22:ef:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:54:01 2026 by rpki-client