Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3232332e302f32342d3234203d3e20323733343930.roa
File:                     3138372e36322e3232332e302f32342d3234203d3e20323733343930.roa (raw, json)
Hash identifier:          H4N99UC7WQ//Gm2+qIX9OMFqvrkzThlPnqN15gKTI10=
Subject key identifier:   63:59:E2:D9:9A:7E:F5:69:E5:4C:3D:EB:D7:73:27:B4:4E:4A:50:EF
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       3146D9455A964818EC1CBD8BD0FE597CC3826714
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3232332e302f32342d3234203d3e20323733343930.roa
Signing time:             Fri 20 Feb 2026 12:33:02 +0000
ROA not before:           Fri 20 Feb 2026 12:28:02 +0000
ROA not after:            Fri 19 Feb 2027 12:33:02 +0000
asID:                     273490
IP address blocks:        187.62.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 09:07:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:46:d9:45:5a:96:48:18:ec:1c:bd:8b:d0:fe:59:7c:c3:82:67:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Feb 20 12:28:02 2026 GMT
            Not After : Feb 19 12:33:02 2027 GMT
        Subject: CN=6359E2D99A7EF569E54C3DEBD77327B44E4A50EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4c:c6:c9:36:07:f8:18:55:45:4a:57:75:71:
                    a4:d5:52:06:40:b1:3d:84:da:35:e9:db:c0:30:e8:
                    b0:bb:3c:0c:1e:c6:19:60:43:7b:d9:3c:1d:66:07:
                    d2:67:78:d1:9d:9b:74:54:ca:ea:86:45:23:b6:12:
                    94:1e:3f:69:34:3a:48:be:30:85:a3:c2:f2:9b:63:
                    20:81:10:fb:5f:0a:fa:12:1c:d3:6f:c1:89:41:cd:
                    09:b7:7c:2a:18:0e:3a:fd:bf:d4:25:75:ce:71:e9:
                    d1:b3:dd:e1:df:a6:61:07:7e:c6:d5:76:7f:e5:3f:
                    b2:3b:09:48:f6:36:c0:0a:1b:5d:2a:f0:75:06:af:
                    26:3e:ad:4b:b6:90:15:e6:4e:ad:36:8b:66:b1:68:
                    6c:1b:de:05:01:73:fc:f3:04:fe:b5:d5:24:b8:5f:
                    48:1d:96:cc:2c:a5:61:40:9f:fe:5a:fe:72:40:9d:
                    35:93:25:41:c1:c1:d9:1e:08:33:b7:64:9a:e7:14:
                    3d:ac:30:97:d1:e6:03:6f:8b:9a:7f:41:b3:c0:32:
                    f5:34:d1:7a:58:a6:78:ce:bd:e9:81:c3:37:ee:46:
                    06:89:a0:69:24:8f:31:f8:73:21:2f:64:60:1a:11:
                    b5:43:9b:15:23:4b:c5:6e:51:1a:05:1c:db:68:64:
                    3b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:59:E2:D9:9A:7E:F5:69:E5:4C:3D:EB:D7:73:27:B4:4E:4A:50:EF
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3232332e302f32342d3234203d3e20323733343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:6c:ea:2a:c6:62:72:16:96:69:90:38:f3:f9:9d:ac:f0:86:
         a0:46:80:8c:c2:ef:48:e6:1e:de:1d:4d:ae:f0:f5:8c:4d:e1:
         d8:dd:8a:f9:02:29:6d:01:38:ef:bc:75:00:f5:40:f6:2a:19:
         71:53:ce:03:c4:c9:a0:ee:df:67:71:38:2b:68:79:96:5f:8f:
         98:49:e7:d1:ed:4a:32:ea:28:3b:bc:2a:8f:df:7d:25:84:82:
         77:98:14:26:ca:5c:43:29:a7:8b:35:60:43:dc:1e:f2:60:c4:
         63:6b:3d:37:64:d2:4d:c5:18:3e:d2:9c:c9:e1:75:7d:7e:ae:
         11:86:79:7c:96:1a:99:ea:bf:b0:63:00:3f:a9:4f:00:e6:80:
         18:72:aa:dd:15:93:63:17:c6:97:04:51:1d:82:8e:0d:9b:5d:
         2d:0b:ba:17:c3:fa:14:c4:6e:ba:ea:34:7c:aa:91:1c:57:fd:
         e0:11:92:ba:dc:75:c5:35:43:df:cf:e0:c1:f0:d2:ee:47:fd:
         67:6d:ad:70:89:61:47:11:d1:a0:89:70:f2:e8:e3:f5:d0:24:
         2a:90:c9:ee:43:c5:a3:6d:f2:ed:5b:38:50:74:e3:76:eb:6c:
         a0:7e:92:ae:f7:39:28:36:5d:17:76:83:7f:f8:25:d1:c9:43:
         11:bc:81:8e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMUbZRVqWSBjsHL2L0P5ZfMOCZxQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTE2MDFBOUVGNUUwREE1RDBDMTUyRUNCN0ZFMjNDODc1
NUNCQzIwNzAeFw0yNjAyMjAxMjI4MDJaFw0yNzAyMTkxMjMzMDJaMDMxMTAvBgNV
BAMTKDYzNTlFMkQ5OUE3RUY1NjlFNTRDM0RFQkQ3NzMyN0I0NEU0QTUwRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdTMbJNgf4GFVFSld1caTVUgZA
sT2E2jXp28Aw6LC7PAwexhlgQ3vZPB1mB9JneNGdm3RUyuqGRSO2EpQeP2k0Oki+
MIWjwvKbYyCBEPtfCvoSHNNvwYlBzQm3fCoYDjr9v9Qldc5x6dGz3eHfpmEHfsbV
dn/lP7I7CUj2NsAKG10q8HUGryY+rUu2kBXmTq02i2axaGwb3gUBc/zzBP611SS4
X0gdlswspWFAn/5a/nJAnTWTJUHBwdkeCDO3ZJrnFD2sMJfR5gNvi5p/QbPAMvU0
0XpYpnjOvemBwzfuRgaJoGkkjzH4cyEvZGAaEbVDmxUjS8VuURoFHNtoZDt1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUY1ni2Zp+9WnlTD3r13MntE5KUO8wHwYDVR0j
BBgwFoAUkWAanvXg2l0MFS7Lf+I8h1XLwgcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXBQcFhSUmN1RzlRMW1YcXh6UXhIS28zdXA4V1V0M3Q0VjRFbXl4dERu
SmovMC85MTYwMUE5RUY1RTBEQTVEMEMxNTJFQ0I3RkUyM0M4NzU1Q0JDMjA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxNjAxQTlFRjVFMERBNUQw
QzE1MkVDQjdGRTIzQzg3NTVDQkMyMDcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FwUHBYUlJjdUc5UTFtWHF4elF4SEtvM3VwOFdVdDN0NFY0RW15eHREbkpqLzAv
MzEzODM3MmUzNjMyMmUzMjMyMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzMzNDM5MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC7Pt8wDQYJKoZIhvcNAQELBQADggEBAEps6irG
YnIWlmmQOPP5nazwhqBGgIzC70jmHt4dTa7w9YxN4djdivkCKW0BOO+8dQD1QPYq
GXFTzgPEyaDu32dxOCtoeZZfj5hJ59HtSjLqKDu8Ko/ffSWEgneYFCbKXEMpp4s1
YEPcHvJgxGNrPTdk0k3FGD7SnMnhdX1+rhGGeXyWGpnqv7BjAD+pTwDmgBhyqt0V
k2MXxpcEUR2Cjg2bXS0LuhfD+hTEbrrqNHyqkRxX/eARkrrcdcU1Q9/P4MHw0u5H
/WdtrXCJYUcR0aCJcPLo4/XQJCqQye5DxaNt8u1bOFB043brbKB+kq73OSg2XRd2
g3/4JdHJQxG8gY4=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:47:08 2026 by rpki-client