Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3231302e302f32342d3234203d3e20323733343930.roa
File:                     3138372e36322e3231302e302f32342d3234203d3e20323733343930.roa (raw, json)
Hash identifier:          fjvznYK4zmEwhmOFwvtCW64bNHrjKL/4ujbwiwx+UgE=
Subject key identifier:   5F:97:B3:88:D8:C3:BA:C1:DC:75:78:8D:32:FD:AA:64:F4:02:17:55
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       05B79BBDF909AD9F4F67F770BA96F2FC8AE2B54D
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3231302e302f32342d3234203d3e20323733343930.roa
Signing time:             Fri 20 Feb 2026 12:33:02 +0000
ROA not before:           Fri 20 Feb 2026 12:28:02 +0000
ROA not after:            Fri 19 Feb 2027 12:33:02 +0000
asID:                     273490
IP address blocks:        187.62.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 09:07:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:b7:9b:bd:f9:09:ad:9f:4f:67:f7:70:ba:96:f2:fc:8a:e2:b5:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Feb 20 12:28:02 2026 GMT
            Not After : Feb 19 12:33:02 2027 GMT
        Subject: CN=5F97B388D8C3BAC1DC75788D32FDAA64F4021755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:31:47:da:0c:1c:50:61:1d:7b:c0:63:37:e6:
                    61:55:bb:24:6e:bd:da:f1:40:b8:f8:32:0e:3e:d7:
                    05:48:b4:29:54:e5:47:84:af:d6:91:5d:31:a8:75:
                    c6:12:89:b0:5c:64:f1:21:88:e3:42:5b:6c:51:8e:
                    e0:4c:15:0d:d8:7a:2f:a6:08:a1:64:7d:0f:1e:4a:
                    aa:c2:a0:76:f3:f0:2c:07:04:00:48:d6:ef:09:5f:
                    72:4a:8f:b1:c9:ea:06:3d:a0:29:89:0f:30:c7:ff:
                    9b:2e:67:e8:e1:be:40:4a:8f:01:2e:61:74:0b:5c:
                    18:ad:22:66:9b:b2:e6:9e:38:66:ef:d7:7d:5e:2a:
                    fe:a5:95:4a:44:c8:f8:98:23:bc:df:94:c6:a8:64:
                    29:9e:65:10:9b:18:15:7b:93:35:b0:06:81:23:1b:
                    fd:03:56:14:ba:a9:ed:9b:2b:7f:44:15:06:8a:f6:
                    5a:26:ec:2b:81:52:69:3e:a1:bb:84:a8:64:4b:3e:
                    48:52:1a:48:1e:68:8d:35:3e:bd:2d:2c:e3:72:33:
                    81:f3:ae:12:28:a6:4a:70:91:19:0f:cd:ce:5b:7e:
                    d0:c3:eb:ab:65:c0:d3:3f:94:70:54:32:7b:96:c8:
                    b9:33:21:4b:f9:c6:89:63:f0:c4:c5:30:f0:56:ae:
                    26:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:97:B3:88:D8:C3:BA:C1:DC:75:78:8D:32:FD:AA:64:F4:02:17:55
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3231302e302f32342d3234203d3e20323733343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d4:c9:7c:88:dd:93:7e:57:c5:54:ab:0f:cd:fe:37:c2:85:0a:
         cd:c5:ba:0e:0c:a5:a3:a8:69:8d:74:09:28:e0:29:37:52:ba:
         7b:7c:c7:a5:66:f1:89:85:20:12:b8:23:69:1b:39:d1:9b:f6:
         8b:61:39:53:ea:f3:e7:5c:26:ce:05:f2:2e:68:39:4d:e9:47:
         4e:a2:46:e8:96:ef:ce:d5:e3:ac:92:3e:97:a3:bf:eb:31:1e:
         d9:ca:32:9e:06:a5:94:08:92:b5:e6:af:0e:9b:ae:03:b2:9b:
         b8:b0:9b:07:1a:ad:20:1f:70:01:73:d7:a2:ff:47:23:6f:ae:
         a3:1e:28:91:44:6c:d4:94:de:13:15:8d:e9:fb:5e:77:65:03:
         d7:c3:65:8b:9d:79:77:87:d0:39:66:17:6d:74:a5:f7:76:48:
         d4:89:55:4e:a7:6f:4a:3e:35:f5:92:69:8f:70:6e:41:38:cb:
         30:8f:2c:72:4f:e1:30:35:95:07:32:14:a2:22:20:aa:95:b5:
         a5:dc:6a:28:d1:2b:d1:6c:f9:32:f7:d7:d3:39:21:b7:17:56:
         c3:df:eb:d1:b0:97:e1:96:05:5d:a6:cd:a1:b7:7b:38:cb:8a:
         cd:f3:1c:5d:ab:cc:28:58:79:e4:65:34:73:42:e9:67:17:71:
         92:1a:a8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:47:13 2026 by rpki-client