Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3137372e3232322e32332e302f32342d3234203d3e20323733343930.roa
File:                     3137372e3232322e32332e302f32342d3234203d3e20323733343930.roa (raw, json)
Hash identifier:          3JufDtTXRYdgxr3b7jvn9odRz/90NmNP4Ml5zup5JL4=
Subject key identifier:   BA:AD:F7:22:5B:AB:3D:41:EB:9D:AC:11:98:18:96:71:5E:27:4C:DB
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       532AB956297DC2296EA04C3D42B9B5888658B9AE
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3137372e3232322e32332e302f32342d3234203d3e20323733343930.roa
Signing time:             Fri 20 Feb 2026 12:33:01 +0000
ROA not before:           Fri 20 Feb 2026 12:28:01 +0000
ROA not after:            Fri 19 Feb 2027 12:33:01 +0000
asID:                     273490
IP address blocks:        177.222.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 09:07:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:2a:b9:56:29:7d:c2:29:6e:a0:4c:3d:42:b9:b5:88:86:58:b9:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Feb 20 12:28:01 2026 GMT
            Not After : Feb 19 12:33:01 2027 GMT
        Subject: CN=BAADF7225BAB3D41EB9DAC11981896715E274CDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6b:b6:80:1f:0e:d9:d8:f8:74:1a:04:79:09:
                    2c:c5:c6:21:a2:6c:1a:83:cb:50:5a:16:6b:54:0b:
                    da:64:ab:6c:fb:78:8d:ac:6b:14:26:6b:27:c6:32:
                    e5:4a:ee:ac:15:a6:9e:41:a8:35:e1:6c:00:19:bd:
                    c9:86:bc:72:64:6a:b7:93:09:1c:95:90:d8:ed:5d:
                    9a:1f:13:97:76:a4:77:9d:bc:88:e5:f2:58:7f:45:
                    16:a1:c4:eb:94:6d:94:27:c5:a6:41:a1:d9:8d:5f:
                    35:57:b9:65:2a:3e:76:93:ec:d5:ac:9a:59:dc:da:
                    e0:65:be:e8:36:b4:b5:38:83:25:ef:37:45:06:80:
                    f3:24:0d:27:f0:20:60:24:b8:06:24:e7:02:f1:d2:
                    82:c3:70:9e:cd:b7:bf:ed:28:a2:af:d1:c4:9e:2d:
                    02:e0:e3:c6:9d:92:ca:4d:85:06:6c:f6:65:5a:20:
                    79:c7:d2:b4:c9:48:e7:4f:4c:90:7e:16:25:a9:44:
                    07:46:c1:ed:42:03:6a:d7:2f:f9:ab:78:11:5f:27:
                    04:6f:54:44:bd:19:73:07:1e:4b:41:10:75:5e:34:
                    17:52:46:2a:b3:72:0b:75:33:7f:f8:77:af:5b:c5:
                    1b:c5:62:50:a0:77:ba:49:35:5e:63:5d:a8:8a:0f:
                    e9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:AD:F7:22:5B:AB:3D:41:EB:9D:AC:11:98:18:96:71:5E:27:4C:DB
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3137372e3232322e32332e302f32342d3234203d3e20323733343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:ee:fc:13:15:4b:04:18:2f:40:5e:1b:40:a5:3a:d9:18:9e:
         a8:ca:ea:e4:be:89:f8:f0:ed:86:a9:39:ff:10:1f:d7:70:aa:
         69:1e:19:40:de:c2:6d:ba:52:00:58:ea:27:b4:9a:45:a2:c9:
         a2:8f:39:d7:99:b8:ad:93:03:1b:8d:21:de:3a:e4:eb:b0:af:
         ca:f4:33:28:e1:0c:14:6f:c6:96:52:7c:58:da:eb:12:d3:74:
         60:45:30:1c:37:21:2f:47:a3:4f:29:71:99:a8:c3:00:a5:5e:
         8e:d2:d1:35:5b:b0:9c:d5:09:18:e9:41:99:e6:1c:f2:f1:5a:
         d0:43:1c:57:63:17:cf:2e:c2:3f:54:53:cc:f2:41:08:ef:bd:
         e5:21:a3:37:0c:96:54:44:50:a6:0e:8d:31:92:55:cf:fb:6f:
         d5:0d:b4:79:ce:90:91:61:47:19:28:25:c6:30:55:fb:ff:e7:
         24:2a:5a:27:46:b4:92:aa:4a:81:92:38:3d:3e:3b:6c:27:44:
         14:76:bb:1a:e0:2e:71:75:10:22:c4:cf:98:c7:c8:71:fd:9f:
         6d:49:58:f1:ab:e9:f2:18:f2:18:b6:92:33:a2:20:42:17:92:
         c7:cb:e1:ff:4f:c1:36:9c:49:7a:38:e5:e6:41:3e:bf:c0:b3:
         ab:a8:47:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:04:02 2026 by rpki-client