Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3137372e3232322e32312e302f32342d3234203d3e20323733343930.roa
File:                     3137372e3232322e32312e302f32342d3234203d3e20323733343930.roa (raw, json)
Hash identifier:          XShgOjPcgWyaQSXbl3Qx9YYTeCL1/um4gqhzD4bD/HQ=
Subject key identifier:   BC:AC:A4:39:DC:70:8F:59:E8:06:D8:C2:03:4A:DB:0B:FF:70:9F:59
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       3D961B20C526CB3A84D1E689524CFD69E546F006
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3137372e3232322e32312e302f32342d3234203d3e20323733343930.roa
Signing time:             Fri 20 Feb 2026 12:32:49 +0000
ROA not before:           Fri 20 Feb 2026 12:27:49 +0000
ROA not after:            Fri 19 Feb 2027 12:32:49 +0000
asID:                     273490
IP address blocks:        177.222.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 09:07:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:96:1b:20:c5:26:cb:3a:84:d1:e6:89:52:4c:fd:69:e5:46:f0:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Feb 20 12:27:49 2026 GMT
            Not After : Feb 19 12:32:49 2027 GMT
        Subject: CN=BCACA439DC708F59E806D8C2034ADB0BFF709F59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:bc:dc:4b:3b:a8:84:86:4b:32:cc:c3:ba:1c:
                    0f:8e:4c:b4:3e:53:e8:6d:b6:25:9f:c4:9c:3b:c2:
                    f2:09:18:62:d8:97:f0:66:10:74:2d:b7:cd:65:ab:
                    b9:1f:10:4b:ea:a2:34:86:f9:2b:5d:3b:3f:94:e8:
                    93:60:5e:48:c1:72:ba:78:8f:3a:df:02:7f:54:7b:
                    d9:1c:80:8f:86:53:17:e0:42:4d:9f:e9:eb:07:b8:
                    aa:ed:27:36:18:c6:4f:a3:a1:eb:17:4f:ae:4f:b0:
                    41:e8:86:c1:f0:bb:f6:0b:bb:d2:2b:aa:2f:49:0e:
                    41:5f:eb:da:f5:c8:22:e7:78:af:db:ad:1a:ff:b9:
                    ce:0d:31:e9:cd:08:9f:48:cf:0d:8e:f0:96:5a:1b:
                    52:d6:50:b1:c7:d2:1f:99:3d:c2:c9:96:6d:c7:07:
                    3e:d1:13:aa:02:4c:dd:68:96:1d:89:c5:6f:3c:6d:
                    5b:1c:b3:37:ef:ef:be:1f:57:3d:44:62:42:1b:13:
                    15:b3:51:51:5a:77:cd:f8:1a:58:dd:25:48:45:29:
                    4e:2b:df:9c:77:b2:3e:b7:fa:98:35:77:41:c1:27:
                    ff:df:f7:ff:ae:06:4f:ee:b6:06:80:c5:2d:64:0f:
                    3b:67:14:6d:02:49:6a:64:52:5b:38:83:53:95:05:
                    bf:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:AC:A4:39:DC:70:8F:59:E8:06:D8:C2:03:4A:DB:0B:FF:70:9F:59
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3137372e3232322e32312e302f32342d3234203d3e20323733343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:a1:22:43:07:40:b0:de:dc:65:f7:23:aa:2b:55:08:cf:0d:
         3b:48:8f:a4:6e:c7:50:00:7a:9f:94:28:7b:23:58:4c:84:2e:
         b3:72:2f:37:6e:0b:c5:7c:59:1a:b0:5e:08:4a:aa:7f:83:75:
         c9:91:3b:33:b6:18:4b:68:5b:5b:39:8b:72:a0:07:71:1d:0d:
         69:44:30:87:cf:fc:fe:8a:92:3f:e6:6e:e2:20:a1:72:7d:80:
         21:be:83:2d:9a:fb:c2:88:02:89:9e:d8:ac:cc:a8:1d:b7:60:
         d9:dc:83:86:4e:a7:b9:43:a8:33:74:9f:e4:a9:4e:bd:64:d3:
         1c:80:3e:17:62:26:e8:5d:f6:f6:57:b3:c2:3a:68:0f:67:29:
         cc:35:4f:07:40:8e:bd:6c:8c:b2:26:02:96:8f:6a:cd:6c:04:
         bb:44:d7:f0:ba:37:d0:ad:64:ad:34:5d:7a:e1:0d:45:6a:32:
         b3:eb:b1:df:7e:93:9d:4e:fd:d8:e2:16:17:30:41:9a:8d:c6:
         95:0e:24:f1:9a:40:a1:6d:62:1c:27:4a:56:b8:23:b5:34:c5:
         3c:1d:c5:04:db:d3:bf:26:2b:97:f1:36:23:e2:28:ec:93:c3:
         0a:5a:2b:98:70:50:77:3f:ff:34:ce:1c:87:08:e6:f0:7a:c6:
         ac:7e:85:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:04:03 2026 by rpki-client