Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3137372e3232322e31382e302f32342d3234203d3e20323733343930.roa
File:                     3137372e3232322e31382e302f32342d3234203d3e20323733343930.roa (raw, json)
Hash identifier:          TpKkw64J9KDmx/Nxi5rsj+Tiquebr2jC4N7lWStjwBE=
Subject key identifier:   A8:E3:8D:C1:B8:10:2A:42:BE:3F:87:19:89:8F:5A:69:CF:CA:87:AE
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       7C5C2D5CCC17F4109E7E33AAAD9A54C45E2CD0BA
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3137372e3232322e31382e302f32342d3234203d3e20323733343930.roa
Signing time:             Fri 20 Feb 2026 12:33:01 +0000
ROA not before:           Fri 20 Feb 2026 12:28:01 +0000
ROA not after:            Fri 19 Feb 2027 12:33:01 +0000
asID:                     273490
IP address blocks:        177.222.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 09:07:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:5c:2d:5c:cc:17:f4:10:9e:7e:33:aa:ad:9a:54:c4:5e:2c:d0:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Feb 20 12:28:01 2026 GMT
            Not After : Feb 19 12:33:01 2027 GMT
        Subject: CN=A8E38DC1B8102A42BE3F8719898F5A69CFCA87AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e1:82:ee:77:17:23:41:76:a5:b6:37:23:43:
                    ea:a9:ba:87:47:b1:20:bc:88:83:a0:9d:a1:f0:f8:
                    fc:6a:f2:f1:e3:09:9b:22:a7:17:7f:df:f6:64:9b:
                    e8:ee:8a:bb:18:85:4b:90:59:f3:91:2e:09:c4:b2:
                    22:e5:de:b1:44:07:f8:7d:55:5f:b3:54:96:65:2f:
                    d8:9e:cc:22:18:4a:fd:70:e2:70:f5:bc:81:07:51:
                    ff:ea:10:28:86:73:7a:c1:83:2d:c0:a6:23:dc:c7:
                    54:d9:8e:4f:f9:7d:2a:ee:e6:d6:74:87:5a:7f:8c:
                    78:73:3c:80:17:dd:af:4b:1f:b9:b4:0a:88:76:6a:
                    a0:1f:6f:29:79:bd:ab:9e:e1:a0:97:58:b0:e1:24:
                    95:ed:a1:90:fa:7f:2d:cd:fe:91:b8:37:27:be:5a:
                    98:48:89:2a:77:b7:2a:d3:ac:c4:f1:9f:b3:5a:99:
                    bb:5b:ab:87:7b:16:a1:50:21:85:ef:0e:ea:af:29:
                    b6:e4:3b:5d:54:57:2c:6c:7b:26:53:12:78:18:09:
                    1b:9f:6b:88:60:73:f4:e7:e6:1a:26:5a:8f:df:cd:
                    4b:a5:f0:56:91:5f:c9:c9:a6:20:6d:80:8d:5c:aa:
                    e5:3a:c8:8a:c3:93:72:b0:f0:3c:60:bf:40:0b:87:
                    11:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E3:8D:C1:B8:10:2A:42:BE:3F:87:19:89:8F:5A:69:CF:CA:87:AE
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3137372e3232322e31382e302f32342d3234203d3e20323733343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:cf:88:33:b9:06:9f:93:00:3a:c6:c4:15:5c:bc:86:a0:68:
         b9:61:16:30:9f:0a:36:ff:ae:cc:15:cf:16:e6:11:e2:14:e2:
         b7:d7:b4:5b:f1:ff:13:8d:64:88:03:4e:97:d3:80:c3:77:23:
         7d:dc:8a:d1:d7:5e:54:b9:79:50:f2:64:d3:d7:d0:ff:2b:cb:
         20:fb:aa:20:e3:2d:b8:60:e6:39:07:33:8e:c0:04:5b:cd:23:
         ea:2e:4b:63:26:8b:69:86:cb:0b:63:ad:f2:08:b2:c4:84:b1:
         3e:b3:4f:bc:c0:4f:b8:dc:63:39:ed:78:c3:13:39:36:08:88:
         a6:9b:ce:ad:c7:6e:da:e2:23:05:02:7b:db:5d:59:ae:65:2a:
         d8:f2:44:51:65:d4:09:16:63:f0:6f:a8:0b:e2:75:01:35:07:
         87:25:60:fe:8a:c9:5f:b1:2b:a7:2d:cd:ea:a3:6e:09:72:1b:
         34:e3:a1:2e:d5:e7:32:0f:d5:54:c2:fb:e6:09:03:ae:00:27:
         9b:d8:5b:24:f8:b5:29:59:e8:62:26:89:4f:cd:20:f9:40:d7:
         2b:c4:cb:a5:59:10:4b:f3:86:45:b6:24:e9:21:2d:e6:82:17:
         da:61:77:d4:f5:15:ae:0e:af:41:c2:41:59:a1:8f:b5:8e:02:
         a2:ac:de:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:04:03 2026 by rpki-client