Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3230382e302f32302d3230203d3e203238313635.roa
File:                     3138372e36322e3230382e302f32302d3230203d3e203238313635.roa (raw, json)
Hash identifier:          2lWZQD2ZC6/3QDe6+qI5tc0G6cEOb64+8Y2IUYyoj/U=
Subject key identifier:   76:C7:E3:70:03:F4:C4:CA:34:F9:E1:F4:A4:75:76:07:2B:AF:15:2B
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       77D4EFA152BD30882C6E52C1F8FF268C89069B4F
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3230382e302f32302d3230203d3e203238313635.roa
Signing time:             Fri 20 Feb 2026 12:33:06 +0000
ROA not before:           Fri 20 Feb 2026 12:28:06 +0000
ROA not after:            Fri 19 Feb 2027 12:33:06 +0000
asID:                     28165
IP address blocks:        187.62.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 09:07:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:d4:ef:a1:52:bd:30:88:2c:6e:52:c1:f8:ff:26:8c:89:06:9b:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Feb 20 12:28:06 2026 GMT
            Not After : Feb 19 12:33:06 2027 GMT
        Subject: CN=76C7E37003F4C4CA34F9E1F4A47576072BAF152B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1e:15:d2:3d:82:db:cb:52:cf:a7:e0:30:f0:
                    cd:03:93:4c:43:ff:db:0c:66:c2:c5:8b:8a:78:a8:
                    09:55:03:8f:49:1c:a8:11:34:89:32:6b:5a:41:d5:
                    fc:fd:a6:41:c9:d3:08:3a:87:8c:8f:ef:97:96:66:
                    ce:ea:13:d8:0e:c4:45:8d:41:a8:8b:b4:20:a8:6f:
                    fc:68:84:5e:d0:03:47:f5:d4:17:cc:9b:96:79:b0:
                    ae:cf:ac:4e:62:3d:20:1e:30:f7:aa:44:9a:c8:bc:
                    81:f0:d6:1c:11:c3:a5:79:8b:ff:8b:a2:30:c2:cf:
                    d0:39:f7:e5:68:eb:2e:b1:cc:56:e5:e2:5f:b8:a9:
                    6c:37:0f:55:69:02:ce:db:23:7e:32:ba:b1:5c:83:
                    5c:67:e8:c1:2e:c7:a3:08:78:5d:76:38:d5:c4:38:
                    10:b4:e1:0e:4e:1c:73:e9:47:37:14:a7:55:26:a3:
                    96:07:d3:c2:a2:ab:e2:2c:44:5d:0d:a5:74:80:4a:
                    3c:85:6b:e2:83:89:22:47:58:ee:eb:77:d9:d2:34:
                    58:7f:15:f2:0d:da:ed:13:00:73:49:f1:5a:d8:fb:
                    ec:38:b5:ff:24:86:4b:63:8c:ca:87:1b:73:ad:53:
                    2c:cc:85:2b:39:bf:47:da:68:57:3b:97:2e:37:87:
                    62:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C7:E3:70:03:F4:C4:CA:34:F9:E1:F4:A4:75:76:07:2B:AF:15:2B
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3230382e302f32302d3230203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2d:a9:4f:bf:7f:99:2d:4f:b8:89:3c:a7:b1:24:b6:2f:49:61:
         46:3c:d4:a6:89:90:31:2b:60:26:c8:d5:7e:6b:5e:90:41:71:
         d7:90:94:6d:47:d9:b6:3a:6e:20:cc:54:5e:20:94:1c:69:8e:
         00:bf:00:1a:7e:6b:e8:ee:8d:05:54:79:87:8c:d4:a4:1d:2e:
         af:fc:87:2b:36:e2:25:ce:21:bf:11:6b:6f:2d:69:d7:e9:2a:
         77:67:bb:60:f7:32:e9:76:d4:64:72:61:40:20:23:41:9c:c2:
         80:28:7d:18:c2:55:a3:a4:6d:3d:2b:a1:1d:b8:51:92:02:2b:
         32:94:18:0d:6d:77:e4:b5:7b:c3:3b:39:82:9f:9c:88:86:a5:
         dc:86:a3:0d:9d:29:ee:73:94:a2:b8:84:1c:1d:99:49:32:6b:
         bd:74:05:b0:5f:56:f4:ce:4e:bb:74:3f:fb:9f:ab:2b:04:c7:
         ff:f0:97:69:09:9b:19:a7:74:da:6b:2c:ca:8c:06:88:c1:83:
         78:ec:fa:97:dd:f1:11:31:05:70:8f:07:1b:d8:98:c4:f1:70:
         d8:86:4a:d3:49:bd:48:40:fa:45:e9:92:0d:7f:c8:c4:70:92:
         fa:d3:fa:04:2f:84:c3:90:c0:60:4c:c4:e1:75:af:6a:36:a1:
         cd:9d:c2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:01:47 2026 by rpki-client