Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3133382e3230342e39322e302f32322d3232203d3e203238313635.roa
File:                     3133382e3230342e39322e302f32322d3232203d3e203238313635.roa (raw, json)
Hash identifier:          YL/k1DS1CWk0xmnrSOwrulPFkkSmGfZwQzHZ9xp1VPU=
Subject key identifier:   17:E3:C4:BA:88:34:F7:00:AF:F9:1B:70:FE:08:CA:A1:F7:74:18:35
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       2B42655C28E29DF1338A4AD7E75B40EAB407F37A
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3133382e3230342e39322e302f32322d3232203d3e203238313635.roa
Signing time:             Fri 20 Feb 2026 12:33:02 +0000
ROA not before:           Fri 20 Feb 2026 12:28:02 +0000
ROA not after:            Fri 19 Feb 2027 12:33:02 +0000
asID:                     28165
IP address blocks:        138.204.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 09:07:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:42:65:5c:28:e2:9d:f1:33:8a:4a:d7:e7:5b:40:ea:b4:07:f3:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Feb 20 12:28:02 2026 GMT
            Not After : Feb 19 12:33:02 2027 GMT
        Subject: CN=17E3C4BA8834F700AFF91B70FE08CAA1F7741835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:44:dd:55:27:d9:23:1c:d0:04:82:10:68:6d:
                    42:79:43:44:c8:35:c5:5e:66:de:34:21:5b:ec:8e:
                    5d:63:e8:4e:d4:6a:44:89:b0:59:67:48:23:99:18:
                    8a:ac:30:1f:58:0c:81:14:d4:6a:1c:bf:86:46:ee:
                    19:55:c8:7a:ce:d4:c5:eb:22:ae:4b:96:b3:a5:18:
                    21:92:3f:18:ce:c8:91:ce:37:37:1f:18:cd:e8:8f:
                    ba:c1:bc:c6:c1:01:c4:0e:24:2a:7c:9e:88:68:4c:
                    58:1c:02:5b:e3:3b:eb:7b:ec:ee:c3:7d:73:37:64:
                    2c:75:9e:38:3d:23:5d:84:e7:d4:40:d7:47:41:f4:
                    82:ea:8d:c5:ff:2b:fe:d5:75:45:88:6f:c7:a4:58:
                    1d:ff:b3:2f:33:09:f7:1f:fd:16:d8:8e:d0:4c:27:
                    99:ea:d6:9e:1e:95:bd:0d:e9:c1:b8:ec:00:5d:0b:
                    ee:99:29:d9:89:ac:d7:f4:7d:e1:cf:0f:52:50:eb:
                    b0:1b:24:e9:92:9a:7c:58:b5:3e:21:ac:54:28:7c:
                    2c:4a:d5:12:9e:24:ff:4f:b4:26:49:ab:89:8a:77:
                    42:48:4a:56:e1:81:3d:1d:95:dd:93:03:79:bf:52:
                    05:af:9c:20:a5:6c:0b:05:07:06:93:40:e7:1a:39:
                    1c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E3:C4:BA:88:34:F7:00:AF:F9:1B:70:FE:08:CA:A1:F7:74:18:35
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3133382e3230342e39322e302f32322d3232203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:54:84:0f:d3:0e:b8:d0:20:6e:98:9b:2f:8c:e4:f0:2b:e7:
         3e:8f:09:36:a8:ea:76:01:7a:66:1c:e0:f2:ce:3f:9e:9f:bc:
         51:92:64:c6:98:54:d9:39:90:45:61:76:8b:40:f4:ab:74:23:
         71:6a:16:5a:e9:38:b6:de:69:c9:1e:30:3d:0b:d2:1b:ce:70:
         ea:7f:78:f2:04:fb:a7:15:a8:68:04:88:4d:06:28:5f:db:f4:
         d8:7b:e9:8d:6c:88:bd:cc:d1:1a:0d:b7:f8:51:60:c2:78:34:
         14:a4:d5:b2:6e:1b:9d:20:48:f8:7d:7a:1c:a8:2d:6a:ab:32:
         fb:54:17:32:3a:ca:5b:54:93:ed:b3:14:e3:7a:b0:36:eb:5b:
         be:ec:00:bc:0d:46:23:8e:30:12:b5:93:b0:3a:77:ad:14:ed:
         de:22:a7:80:0a:04:af:ac:ac:4f:e9:ba:f5:59:ff:a2:e2:79:
         58:5a:98:83:bc:59:d3:0a:cf:77:db:fa:53:e6:b3:32:3f:f4:
         38:d5:cf:94:0a:de:c1:07:7d:1f:4d:a6:2a:cb:fe:c5:4d:95:
         6a:6a:61:51:6f:ca:4f:27:c5:76:b3:7b:54:2c:6f:5a:60:82:
         64:fb:90:07:a1:0f:72:ae:65:8b:1d:b1:1f:40:ce:8d:cb:b4:
         4f:1b:52:cc
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUK0JlXCjinfEzikrX51tA6rQH83owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTE2MDFBOUVGNUUwREE1RDBDMTUyRUNCN0ZFMjNDODc1
NUNCQzIwNzAeFw0yNjAyMjAxMjI4MDJaFw0yNzAyMTkxMjMzMDJaMDMxMTAvBgNV
BAMTKDE3RTNDNEJBODgzNEY3MDBBRkY5MUI3MEZFMDhDQUExRjc3NDE4MzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPRN1VJ9kjHNAEghBobUJ5Q0TI
NcVeZt40IVvsjl1j6E7UakSJsFlnSCOZGIqsMB9YDIEU1Gocv4ZG7hlVyHrO1MXr
Iq5LlrOlGCGSPxjOyJHONzcfGM3oj7rBvMbBAcQOJCp8nohoTFgcAlvjO+t77O7D
fXM3ZCx1njg9I12E59RA10dB9ILqjcX/K/7VdUWIb8ekWB3/sy8zCfcf/RbYjtBM
J5nq1p4elb0N6cG47ABdC+6ZKdmJrNf0feHPD1JQ67AbJOmSmnxYtT4hrFQofCxK
1RKeJP9PtCZJq4mKd0JISlbhgT0dld2TA3m/UgWvnCClbAsFBwaTQOcaORzfAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUF+PEuog09wCv+Rtw/gjKofd0GDUwHwYDVR0j
BBgwFoAUkWAanvXg2l0MFS7Lf+I8h1XLwgcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXBQcFhSUmN1RzlRMW1YcXh6UXhIS28zdXA4V1V0M3Q0VjRFbXl4dERu
SmovMC85MTYwMUE5RUY1RTBEQTVEMEMxNTJFQ0I3RkUyM0M4NzU1Q0JDMjA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxNjAxQTlFRjVFMERBNUQw
QzE1MkVDQjdGRTIzQzg3NTVDQkMyMDcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FwUHBYUlJjdUc5UTFtWHF4elF4SEtvM3VwOFdVdDN0NFY0RW15eHREbkpqLzAv
MzEzMzM4MmUzMjMwMzQyZTM5MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM4
MzEzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCisxcMA0GCSqGSIb3DQEBCwUAA4IBAQB8VIQP0w64
0CBumJsvjOTwK+c+jwk2qOp2AXpmHODyzj+en7xRkmTGmFTZOZBFYXaLQPSrdCNx
ahZa6Ti23mnJHjA9C9IbznDqf3jyBPunFahoBIhNBihf2/TYe+mNbIi9zNEaDbf4
UWDCeDQUpNWybhudIEj4fXocqC1qqzL7VBcyOspbVJPtsxTjerA261u+7AC8DUYj
jjAStZOwOnetFO3eIqeACgSvrKxP6br1Wf+i4nlYWpiDvFnTCs932/pT5rMyP/Q4
1c+UCt7BB30fTaYqy/7FTZVqamFRb8pPJ8V2s3tULG9aYIJk+5AHoQ9yrmWLHbEf
QM6Ny7RPG1LM
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:36:29 2026 by rpki-client