Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GyLVzFMWSPvpkLVDSUVfuRZ89Y5jsddoVMTpENVouy2w/0/3230312e37312e3232322e302f32342d3234203d3e20323731313135.roa
File:                     3230312e37312e3232322e302f32342d3234203d3e20323731313135.roa (raw, json)
Hash identifier:          017SbVhtWuqTyEYYoW30uKqqjtQt8hid0CZB+b2VVG8=
Subject key identifier:   CF:5F:70:41:CC:B0:BA:38:B0:38:79:B3:DE:DF:04:13:6C:46:F4:51
Certificate issuer:       /CN=6539CB44C8990B2AF26518E46D7AB6964B8D23B4
Certificate serial:       47B987504D50306245AF510657AFF781DBF375E6
Authority key identifier: 65:39:CB:44:C8:99:0B:2A:F2:65:18:E4:6D:7A:B6:96:4B:8D:23:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6539CB44C8990B2AF26518E46D7AB6964B8D23B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GyLVzFMWSPvpkLVDSUVfuRZ89Y5jsddoVMTpENVouy2w/0/3230312e37312e3232322e302f32342d3234203d3e20323731313135.roa
Signing time:             Tue 17 Feb 2026 17:29:45 +0000
ROA not before:           Tue 17 Feb 2026 17:24:45 +0000
ROA not after:            Tue 16 Feb 2027 17:29:45 +0000
asID:                     271115
IP address blocks:        201.71.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GyLVzFMWSPvpkLVDSUVfuRZ89Y5jsddoVMTpENVouy2w/0/6539CB44C8990B2AF26518E46D7AB6964B8D23B4.crl
                          rsync://rpki-repo.registro.br/repo/GyLVzFMWSPvpkLVDSUVfuRZ89Y5jsddoVMTpENVouy2w/0/6539CB44C8990B2AF26518E46D7AB6964B8D23B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6539CB44C8990B2AF26518E46D7AB6964B8D23B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 23:30:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:b9:87:50:4d:50:30:62:45:af:51:06:57:af:f7:81:db:f3:75:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6539CB44C8990B2AF26518E46D7AB6964B8D23B4
        Validity
            Not Before: Feb 17 17:24:45 2026 GMT
            Not After : Feb 16 17:29:45 2027 GMT
        Subject: CN=CF5F7041CCB0BA38B03879B3DEDF04136C46F451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5f:89:7e:cb:03:cf:9f:14:30:ba:30:0c:6f:
                    5c:5a:55:68:b8:2d:09:45:bc:a1:4a:9d:a7:e4:83:
                    5d:59:20:84:b9:a5:38:ec:9e:a4:40:7a:93:68:71:
                    2e:ea:ea:af:9a:06:4e:7b:ff:50:a8:4f:16:d0:31:
                    60:13:ef:01:72:4c:1f:f7:a2:a5:bd:4c:c9:e4:04:
                    7d:21:1c:45:e0:00:e5:88:53:52:e1:62:59:f7:55:
                    8a:7f:ba:c3:7c:1d:86:53:6b:89:5e:00:af:bd:60:
                    ec:cf:a4:38:0c:6e:2a:2a:cd:7b:cc:4d:e0:0c:09:
                    7f:a9:da:96:d4:6d:75:2c:77:73:20:77:a8:ba:30:
                    53:01:a8:25:44:4a:78:71:e3:3d:e7:15:48:79:c8:
                    71:20:32:7d:47:4b:f8:dc:2f:d4:fd:38:b3:c3:b9:
                    f1:10:34:a4:af:1c:be:2d:d4:cb:c3:b1:ec:47:b1:
                    91:2c:a5:0d:c4:af:82:99:18:a8:5a:cf:7c:4e:ac:
                    73:67:fc:24:92:76:4e:07:75:fc:18:b9:86:6f:58:
                    0d:0e:4c:17:8c:d8:07:65:21:e4:dd:ef:6b:e0:0f:
                    1d:8c:bb:dc:8b:b9:bc:3f:70:9a:96:d4:f1:fe:43:
                    49:bb:36:cd:83:77:21:b9:bb:e6:59:e2:49:ce:73:
                    3b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:5F:70:41:CC:B0:BA:38:B0:38:79:B3:DE:DF:04:13:6C:46:F4:51
            X509v3 Authority Key Identifier:
                keyid:65:39:CB:44:C8:99:0B:2A:F2:65:18:E4:6D:7A:B6:96:4B:8D:23:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GyLVzFMWSPvpkLVDSUVfuRZ89Y5jsddoVMTpENVouy2w/0/6539CB44C8990B2AF26518E46D7AB6964B8D23B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6539CB44C8990B2AF26518E46D7AB6964B8D23B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GyLVzFMWSPvpkLVDSUVfuRZ89Y5jsddoVMTpENVouy2w/0/3230312e37312e3232322e302f32342d3234203d3e20323731313135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.71.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:4c:ce:a6:11:ce:3b:80:8a:ae:2e:af:d0:fe:27:52:67:36:
         d9:4d:cb:46:4f:89:9c:68:0a:cc:74:ba:e5:78:a6:15:3a:9e:
         19:97:68:2b:4f:d9:4c:48:3c:47:52:4d:22:95:08:3a:93:87:
         29:2e:72:43:07:2f:34:00:ce:b3:de:49:7a:85:7f:eb:30:a6:
         af:06:5f:28:9a:73:62:bb:c0:31:35:40:49:35:40:b2:17:0f:
         65:33:53:68:97:b4:2b:c5:10:26:f7:9d:89:df:97:8a:11:7b:
         1c:a7:91:53:14:2a:79:68:a2:00:8e:dc:5f:e9:8b:75:c5:d9:
         4e:cc:d3:d4:9f:c5:7e:60:5d:04:bd:0d:b9:f6:71:6f:39:6b:
         d2:29:c7:52:60:95:ad:a8:b2:6e:32:c5:d7:6e:28:f2:24:3d:
         e5:87:95:a5:6a:ce:85:ab:9f:e5:4c:d4:d1:2b:9d:6f:43:1b:
         a9:14:8b:f1:32:d9:5d:15:b9:03:6d:2d:28:0a:9e:b6:07:fd:
         f7:74:68:0a:d1:a0:03:f3:52:9a:71:20:d6:45:6e:85:25:5a:
         5f:33:cf:fa:96:6e:46:24:ff:ed:90:31:b0:50:a1:5e:75:0b:
         a5:dc:39:72:91:ab:6f:83:8f:ba:06:cf:4e:4f:64:f0:ef:d9:
         0d:a7:1d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:56:10 2026 by rpki-client