Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3133312e3235352e3130302e302f32322d3232203d3e203238313635.roa
File:                     3133312e3235352e3130302e302f32322d3232203d3e203238313635.roa (raw, json)
Hash identifier:          cxB5kzCmvgCyGQyALqc+CXAAlGoAw2aeuF6aS9oRCEY=
Subject key identifier:   EF:F9:05:BE:E7:C7:DC:51:07:74:C8:4E:4C:8A:10:0E:AC:B0:8D:60
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       6647B619B15C689A0B4C55B1DDC1581FE45C1779
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3133312e3235352e3130302e302f32322d3232203d3e203238313635.roa
Signing time:             Fri 20 Feb 2026 12:32:51 +0000
ROA not before:           Fri 20 Feb 2026 12:27:51 +0000
ROA not after:            Fri 19 Feb 2027 12:32:51 +0000
asID:                     28165
IP address blocks:        131.255.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 09:07:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:47:b6:19:b1:5c:68:9a:0b:4c:55:b1:dd:c1:58:1f:e4:5c:17:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Feb 20 12:27:51 2026 GMT
            Not After : Feb 19 12:32:51 2027 GMT
        Subject: CN=EFF905BEE7C7DC510774C84E4C8A100EACB08D60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:35:a6:e7:96:cc:3a:f6:64:82:7c:c0:71:e3:
                    cd:99:77:83:eb:33:07:74:08:f1:7c:92:7a:1f:e8:
                    44:0a:84:aa:ff:7b:e4:5d:38:7b:15:46:c1:d8:ac:
                    97:0f:6c:c9:4f:61:f0:9d:2d:fb:3e:04:17:74:01:
                    f2:7a:fe:ca:29:ff:4b:59:ec:69:09:a9:a5:56:b8:
                    88:b9:a4:22:97:e9:72:0f:8e:95:a0:ef:5b:26:a0:
                    aa:81:b8:a5:ce:f9:62:17:c0:58:14:65:fa:51:67:
                    91:9c:83:79:c3:35:b7:85:25:b5:88:56:4e:b9:f8:
                    b0:32:bc:47:7b:a8:de:7b:f2:b3:1b:b5:06:17:b4:
                    89:09:c6:d1:c9:3b:fa:32:fd:7d:f7:df:1c:e0:ed:
                    70:03:77:3c:de:7f:bb:a9:00:69:0b:9e:f9:83:8c:
                    53:ae:bc:73:95:a5:34:f8:4d:30:70:c8:7f:25:3e:
                    bd:f4:34:2d:02:8a:2f:55:90:65:95:8d:2f:ba:ba:
                    34:61:32:32:2a:83:0d:cd:9b:49:85:70:09:33:f8:
                    80:21:2b:79:ce:22:b8:c3:ff:40:71:11:b3:fb:b4:
                    91:49:b6:72:23:4b:b1:a0:46:b6:49:e3:f1:19:48:
                    91:ac:f1:ff:97:0a:fd:b6:9e:38:4d:f1:0f:29:50:
                    e4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F9:05:BE:E7:C7:DC:51:07:74:C8:4E:4C:8A:10:0E:AC:B0:8D:60
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3133312e3235352e3130302e302f32322d3232203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:de:52:ef:47:ec:7d:16:0a:59:50:05:2c:bf:52:6a:83:4e:
         5a:a0:5a:dd:b5:ca:b1:23:03:98:46:62:b1:9a:82:3d:df:5a:
         7e:a4:dc:94:db:d3:c8:7d:25:66:13:f8:a8:7e:e1:70:1b:14:
         bf:dd:9e:8d:5d:ae:aa:f6:60:77:b4:7b:41:d3:99:21:81:9b:
         02:22:db:d8:35:49:e4:dd:ae:2e:01:13:35:18:31:aa:30:9c:
         c3:b8:db:a3:2e:24:7b:5b:69:7b:76:06:dc:9b:89:d7:18:fe:
         bf:34:41:50:c5:46:00:1d:73:99:6c:8a:9c:4d:45:51:c1:72:
         7c:89:0f:14:05:13:e2:3e:3a:4b:f8:1c:d9:1d:29:a1:ca:9c:
         fe:23:6b:03:d6:52:26:5c:e0:ce:5f:82:96:b3:1b:97:1b:16:
         58:bd:c1:c9:9c:aa:30:84:05:5e:9e:69:65:72:8b:45:65:90:
         2e:05:3b:16:4e:07:51:32:be:4f:87:f3:92:f1:bc:1c:54:15:
         56:cf:3a:90:be:9e:08:a7:52:0b:22:04:ba:fc:86:a8:18:e9:
         65:4c:d2:7f:d5:23:9e:da:c5:04:97:32:ed:0b:da:a7:46:f2:
         85:f5:d3:b6:2c:27:9f:38:6c:72:70:b4:e5:aa:ed:d7:97:ea:
         68:28:05:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:36:20 2026 by rpki-client