Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3231312e302f32342d3234203d3e20323733343930.roa
File:                     3138372e36322e3231312e302f32342d3234203d3e20323733343930.roa (raw, json)
Hash identifier:          XerBQseXN5uqzH8JLSfBPGnXcg4Le5TMKTovSqq+DIQ=
Subject key identifier:   0B:1C:4A:B1:18:92:2D:70:AB:89:E5:4A:A4:60:0B:05:7D:21:44:D0
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       31EBC817ABEB6A40F8E73138CA806691CDD84270
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3231312e302f32342d3234203d3e20323733343930.roa
Signing time:             Fri 20 Feb 2026 12:32:53 +0000
ROA not before:           Fri 20 Feb 2026 12:27:53 +0000
ROA not after:            Fri 19 Feb 2027 12:32:53 +0000
asID:                     273490
IP address blocks:        187.62.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 09:07:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:eb:c8:17:ab:eb:6a:40:f8:e7:31:38:ca:80:66:91:cd:d8:42:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Feb 20 12:27:53 2026 GMT
            Not After : Feb 19 12:32:53 2027 GMT
        Subject: CN=0B1C4AB118922D70AB89E54AA4600B057D2144D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9c:b8:15:4d:17:3f:5a:3f:f9:e0:e1:69:09:
                    f8:3d:b0:89:bc:75:15:1b:45:d6:0a:4f:b2:73:ae:
                    fc:35:a6:3e:c4:dd:87:b9:92:6d:8f:d3:c3:cb:5c:
                    e6:77:39:85:de:7e:e1:5f:20:14:78:2a:b6:3c:e4:
                    8b:14:33:0a:4e:63:23:b4:b7:b9:57:ba:8d:32:b3:
                    29:ca:d0:a1:b5:a4:11:f5:f9:0e:d3:17:83:84:ba:
                    20:b5:52:83:3c:66:8a:f0:b0:53:bf:5d:82:bb:78:
                    9c:bb:9a:57:f6:ea:92:fe:02:ec:75:01:de:96:90:
                    b0:f6:97:9d:3f:13:1e:d0:48:95:e9:af:ca:53:30:
                    95:d3:85:29:67:05:97:e3:b0:37:30:bb:f9:40:b4:
                    68:f5:b3:ec:61:2e:07:4e:c7:25:ac:74:60:4b:eb:
                    b3:d9:53:37:26:d0:fb:7c:f8:61:81:e3:bf:47:68:
                    b9:3f:ff:c9:ee:fd:25:04:76:44:58:3b:4a:9e:13:
                    b5:d2:1d:d5:17:a0:59:3c:18:04:96:76:a2:f5:ca:
                    b2:03:24:7d:01:b0:83:9c:e6:72:bb:c6:00:9d:92:
                    65:ec:d6:10:d3:7b:30:01:e8:59:f7:9e:65:b6:8c:
                    56:d5:a5:cb:c2:0b:9d:08:10:3a:73:a7:2b:f8:cd:
                    1e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:1C:4A:B1:18:92:2D:70:AB:89:E5:4A:A4:60:0B:05:7D:21:44:D0
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3231312e302f32342d3234203d3e20323733343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:7e:e3:c1:05:82:c7:26:8f:6f:91:4f:a7:ab:f4:9d:ed:c7:
         97:1b:bd:38:8d:42:22:36:aa:50:f1:de:15:46:16:bd:49:ed:
         da:93:cd:b6:cc:e7:89:98:9d:d1:de:84:f5:fe:64:c8:e0:e4:
         39:c3:93:67:ce:21:44:7b:b5:3f:2b:f3:7a:6e:04:64:ce:6f:
         2d:cb:5c:7b:21:8f:26:af:08:28:fb:df:c7:97:8f:ac:39:75:
         9e:f6:78:3c:f8:6e:b6:e1:ff:1a:11:93:33:9d:3d:9c:57:1f:
         3f:11:4f:05:79:a0:93:ab:61:fa:3a:c4:b9:c9:76:0e:ed:e2:
         82:98:e2:87:18:48:82:92:67:6f:35:03:e8:fb:43:46:c0:b1:
         9b:86:5d:46:20:67:7c:fc:4a:23:4b:ff:b2:0e:5d:24:05:f5:
         53:dc:be:47:69:74:b6:f1:a9:c5:fb:3b:72:1b:bb:9d:12:57:
         da:51:dd:56:32:33:8a:94:4a:78:fd:f8:98:89:7f:35:9e:92:
         79:29:09:0c:40:e8:03:83:f8:9f:f1:5a:48:8a:85:d9:9b:23:
         7c:7a:e7:9e:e8:64:db:45:92:d8:52:10:7d:fa:30:5f:e4:a3:
         30:d7:77:bd:80:19:51:f0:d6:07:82:8b:c5:e2:6a:dc:09:e4:
         33:53:40:7f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMevIF6vrakD45zE4yoBmkc3YQnAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTE2MDFBOUVGNUUwREE1RDBDMTUyRUNCN0ZFMjNDODc1
NUNCQzIwNzAeFw0yNjAyMjAxMjI3NTNaFw0yNzAyMTkxMjMyNTNaMDMxMTAvBgNV
BAMTKDBCMUM0QUIxMTg5MjJENzBBQjg5RTU0QUE0NjAwQjA1N0QyMTQ0RDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDnLgVTRc/Wj/54OFpCfg9sIm8
dRUbRdYKT7Jzrvw1pj7E3Ye5km2P08PLXOZ3OYXefuFfIBR4KrY85IsUMwpOYyO0
t7lXuo0ysynK0KG1pBH1+Q7TF4OEuiC1UoM8ZorwsFO/XYK7eJy7mlf26pL+Aux1
Ad6WkLD2l50/Ex7QSJXpr8pTMJXThSlnBZfjsDcwu/lAtGj1s+xhLgdOxyWsdGBL
67PZUzcm0Pt8+GGB479HaLk//8nu/SUEdkRYO0qeE7XSHdUXoFk8GASWdqL1yrID
JH0BsIOc5nK7xgCdkmXs1hDTezAB6Fn3nmW2jFbVpcvCC50IEDpzpyv4zR41AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUCxxKsRiSLXCrieVKpGALBX0hRNAwHwYDVR0j
BBgwFoAUkWAanvXg2l0MFS7Lf+I8h1XLwgcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXBQcFhSUmN1RzlRMW1YcXh6UXhIS28zdXA4V1V0M3Q0VjRFbXl4dERu
SmovMC85MTYwMUE5RUY1RTBEQTVEMEMxNTJFQ0I3RkUyM0M4NzU1Q0JDMjA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxNjAxQTlFRjVFMERBNUQw
QzE1MkVDQjdGRTIzQzg3NTVDQkMyMDcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FwUHBYUlJjdUc5UTFtWHF4elF4SEtvM3VwOFdVdDN0NFY0RW15eHREbkpqLzAv
MzEzODM3MmUzNjMyMmUzMjMxMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzMzNDM5MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC7PtMwDQYJKoZIhvcNAQELBQADggEBAE5+48EF
gscmj2+RT6er9J3tx5cbvTiNQiI2qlDx3hVGFr1J7dqTzbbM54mYndHehPX+ZMjg
5DnDk2fOIUR7tT8r83puBGTOby3LXHshjyavCCj738eXj6w5dZ72eDz4brbh/xoR
kzOdPZxXHz8RTwV5oJOrYfo6xLnJdg7t4oKY4ocYSIKSZ281A+j7Q0bAsZuGXUYg
Z3z8SiNL/7IOXSQF9VPcvkdpdLbxqcX7O3Ibu50SV9pR3VYyM4qUSnj9+JiJfzWe
knkpCQxA6AOD+J/xWkiKhdmbI3x6557oZNtFkthSEH36MF/kozDXd72AGVHw1geC
i8XiatwJ5DNTQH8=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:47:09 2026 by rpki-client