Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3231372e302f32342d3234203d3e20323733343930.roa
File:                     3138372e36322e3231372e302f32342d3234203d3e20323733343930.roa (raw, json)
Hash identifier:          6v5plaInRSGRCPRos1cGCkyhX3MYi8Q/G6WHXZekFOw=
Subject key identifier:   29:3F:B5:19:44:6D:83:70:48:7A:47:00:B9:26:DD:94:60:44:E3:35
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       182E4EA6BD45EB9BC825799EF10A9697130DE6B3
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3231372e302f32342d3234203d3e20323733343930.roa
Signing time:             Fri 20 Feb 2026 12:32:55 +0000
ROA not before:           Fri 20 Feb 2026 12:27:55 +0000
ROA not after:            Fri 19 Feb 2027 12:32:55 +0000
asID:                     273490
IP address blocks:        187.62.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 09:07:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:2e:4e:a6:bd:45:eb:9b:c8:25:79:9e:f1:0a:96:97:13:0d:e6:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Feb 20 12:27:55 2026 GMT
            Not After : Feb 19 12:32:55 2027 GMT
        Subject: CN=293FB519446D8370487A4700B926DD946044E335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:35:e4:32:04:14:5a:33:84:c8:c5:d0:54:28:
                    d9:2c:2e:21:00:e0:3b:f8:c2:9b:8e:4a:4c:fd:ea:
                    c6:78:cf:5d:78:ea:60:75:79:f6:b5:2a:91:87:4e:
                    09:1b:65:68:f5:74:d6:30:ef:c9:89:bb:1c:7d:e5:
                    84:1f:28:e6:df:ef:77:f5:3e:4d:50:1c:b4:72:72:
                    ef:96:16:d4:0f:06:4c:c6:28:3f:cd:ea:e4:1d:32:
                    5f:fd:b6:c2:f7:11:1c:a9:e4:75:b4:fd:17:ab:d1:
                    7b:fc:38:ee:1f:cb:71:50:7e:21:f4:91:90:46:1d:
                    7a:ee:f7:80:3c:b6:55:31:60:c8:d9:16:83:0e:f6:
                    66:f1:f8:89:09:f3:39:69:9c:3a:62:b9:3c:cd:39:
                    f7:cb:59:50:83:23:f1:e6:94:ab:55:1d:19:19:53:
                    f6:63:f7:67:2c:94:4e:2a:70:23:31:28:c8:c3:cf:
                    c9:af:9c:24:0b:5f:43:1b:25:0e:a1:91:5a:d8:41:
                    42:9d:76:e1:05:39:55:77:e8:9e:96:2d:ea:1d:42:
                    54:1f:e7:9b:c9:66:df:c5:e7:49:69:2f:33:e7:9f:
                    2c:19:35:cb:32:bd:16:52:f9:0c:04:a7:4b:8c:a2:
                    4d:1c:5c:db:10:bc:79:6e:4c:c0:64:42:c3:3f:f0:
                    d2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:3F:B5:19:44:6D:83:70:48:7A:47:00:B9:26:DD:94:60:44:E3:35
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3231372e302f32342d3234203d3e20323733343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:5b:6f:07:cd:8a:76:18:8f:49:cb:7a:72:8f:bc:0a:2d:fb:
         7c:48:dd:96:4e:cf:e4:5d:bc:15:7f:af:8d:c3:e4:cc:c4:ab:
         0a:69:0a:a0:e4:ef:16:4a:18:e5:16:88:1b:fd:60:89:16:e9:
         d9:f8:4f:f2:78:5e:77:4f:98:81:d5:b4:5b:c8:18:cc:13:16:
         7c:3a:5e:ca:6a:9f:5c:ca:84:e2:b4:d4:84:83:fb:ac:8f:e5:
         9a:d5:db:ab:15:b3:90:24:f2:cd:69:fd:6d:54:55:a9:44:b3:
         d8:c2:7f:18:bd:f3:ec:b6:3b:27:53:d2:80:02:a7:8a:91:3d:
         1c:04:fe:6f:e3:37:95:3d:4d:1d:2b:1d:65:38:33:87:66:2c:
         32:55:02:ac:f7:2f:0f:cb:f3:a4:ed:11:9e:79:a9:24:0f:fe:
         a9:03:4e:8e:9f:9b:ba:2a:11:06:a6:73:fa:a7:7f:3b:9a:c7:
         a9:03:e0:16:d0:86:0e:a3:8e:ab:9a:97:07:c0:09:30:d7:d8:
         91:b9:bf:64:60:cf:6a:8d:dc:d9:c1:c4:bb:56:de:e1:a2:d9:
         f3:b4:38:0b:e2:d6:1b:bd:af:d0:b2:3e:89:ae:ca:c2:7c:ae:
         0f:56:07:b4:26:69:d9:f2:d2:85:99:32:8b:5f:84:c7:25:a0:
         f4:d6:60:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:47:06 2026 by rpki-client