Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3137372e3138342e3230302e302f32322d3234203d3e20323733343930.roa
File:                     3137372e3138342e3230302e302f32322d3234203d3e20323733343930.roa (raw, json)
Hash identifier:          mKQdXp5QnDndhidHGdXrfxd/viXdqPihEGowN02mMDY=
Subject key identifier:   21:76:7A:52:F8:B0:1F:2F:01:F9:D8:7C:0B:AB:82:CC:76:19:7B:16
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       2F76ECB1F6A43CB10CB255DE2056B6A7F8DCC5CC
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3137372e3138342e3230302e302f32322d3234203d3e20323733343930.roa
Signing time:             Fri 20 Feb 2026 12:32:46 +0000
ROA not before:           Fri 20 Feb 2026 12:27:46 +0000
ROA not after:            Fri 19 Feb 2027 12:32:46 +0000
asID:                     273490
IP address blocks:        177.184.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 09:07:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:76:ec:b1:f6:a4:3c:b1:0c:b2:55:de:20:56:b6:a7:f8:dc:c5:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Feb 20 12:27:46 2026 GMT
            Not After : Feb 19 12:32:46 2027 GMT
        Subject: CN=21767A52F8B01F2F01F9D87C0BAB82CC76197B16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:52:60:f5:0e:61:63:4a:e0:e6:f9:dc:b6:e7:
                    1a:1b:0e:3e:0f:78:46:a6:b3:2b:9c:02:7e:8a:c3:
                    b8:3d:35:62:22:5f:cb:28:d7:99:4f:60:8e:ce:82:
                    93:67:db:7c:df:96:f9:dd:bc:cf:15:d7:91:0d:f6:
                    3b:23:ed:79:52:9e:74:13:78:7f:9a:66:fa:cb:67:
                    5d:fa:34:ac:6b:85:7a:b6:11:a9:ee:da:35:ef:a7:
                    a1:c4:01:5a:42:1c:f7:5f:75:70:81:8c:ad:fe:b2:
                    d0:39:dd:3c:fc:d4:2d:6a:9a:02:fb:7e:4f:40:f0:
                    11:e4:6f:89:fe:9b:6a:2e:f9:0e:22:4c:10:11:34:
                    88:65:e6:39:eb:c4:e2:1c:33:9e:78:f5:2f:04:84:
                    de:ea:09:89:13:5f:d4:01:5b:1d:37:35:2a:98:46:
                    21:2f:ab:13:65:4e:2e:99:5e:a6:14:8a:ef:90:99:
                    f8:c1:de:54:87:a1:81:34:57:b4:3f:68:17:dc:c2:
                    ca:17:e8:1d:06:4b:67:ef:9f:af:35:1e:ca:bd:05:
                    84:98:19:3a:85:3c:1e:e9:88:5e:63:1c:a0:80:f4:
                    db:f7:d2:9b:20:04:4e:c9:5d:00:a6:f8:6b:b3:52:
                    a0:62:00:da:3a:ab:e9:57:f4:fb:be:a2:73:7b:2c:
                    f6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:76:7A:52:F8:B0:1F:2F:01:F9:D8:7C:0B:AB:82:CC:76:19:7B:16
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3137372e3138342e3230302e302f32322d3234203d3e20323733343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cd:7d:a7:95:48:1e:cb:23:b2:2c:cf:cb:ec:22:f7:65:6e:fc:
         83:3c:69:a3:40:ab:ea:8e:bb:fe:8a:a2:d5:83:3f:c6:bc:a0:
         8f:8b:8c:00:69:c9:1d:dd:34:d1:31:c0:1e:3e:af:0a:a7:86:
         bd:59:7a:9a:d8:cc:f6:96:c3:92:d8:4e:d8:c5:12:e5:f8:72:
         88:5f:b2:2c:f3:ea:88:d2:56:3e:38:8d:a5:39:4b:6b:9a:3e:
         a2:79:13:b1:0b:44:c6:61:69:52:4e:4c:4f:21:a5:7e:d2:0a:
         35:7e:85:0d:33:56:5d:4b:68:9a:c1:bf:55:e8:1c:39:7f:75:
         54:8f:f1:2a:ea:bb:7e:c9:c0:1d:c3:7d:0f:25:ea:44:7a:74:
         3b:4c:97:67:88:0e:21:bc:4f:a2:4f:a1:ec:95:0b:77:f9:35:
         83:e3:e6:a2:80:4e:3a:34:da:db:c7:11:08:82:aa:37:1a:66:
         80:96:99:59:f9:fa:65:4d:79:5e:cb:65:b2:d7:31:1f:97:60:
         62:09:bc:ae:89:ff:d0:94:86:48:e5:ce:ea:61:72:d3:c1:60:
         1a:58:5d:2d:a9:90:a4:fd:b9:49:70:c9:a0:f0:68:b7:4f:e9:
         e5:f2:7d:0e:1b:c3:41:a9:b4:79:36:e5:b8:34:70:b1:de:cd:
         52:9b:08:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:04:01 2026 by rpki-client