Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3134342e302f32342d3234203d3e20323733343930.roa
File:                     3139312e3234302e3134342e302f32342d3234203d3e20323733343930.roa (raw, json)
Hash identifier:          Fj1vJjUSNktAjUmmCRtyCpxMw5hlkp0RB+owLDlDg8s=
Subject key identifier:   78:53:D5:F7:EA:F7:9A:3C:C8:32:DB:27:FC:6A:DB:45:38:F6:92:C9
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       7BA79826FAFB09B31BC95D2EDFF7B586B89573AE
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3134342e302f32342d3234203d3e20323733343930.roa
Signing time:             Fri 20 Feb 2026 12:33:10 +0000
ROA not before:           Fri 20 Feb 2026 12:28:10 +0000
ROA not after:            Fri 19 Feb 2027 12:33:10 +0000
asID:                     273490
IP address blocks:        191.240.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 09:07:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:a7:98:26:fa:fb:09:b3:1b:c9:5d:2e:df:f7:b5:86:b8:95:73:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Feb 20 12:28:10 2026 GMT
            Not After : Feb 19 12:33:10 2027 GMT
        Subject: CN=7853D5F7EAF79A3CC832DB27FC6ADB4538F692C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6c:42:6c:8a:63:95:52:63:35:9f:3b:cc:8f:
                    9b:70:48:fe:11:7e:39:e2:4a:60:e9:7b:21:c5:5b:
                    ee:e1:bf:f7:aa:2b:35:0d:9a:9d:0d:d3:cb:62:2b:
                    39:70:ec:9e:47:b4:05:28:ad:a6:9c:fe:9d:24:93:
                    c7:f9:2a:d3:0d:3c:66:05:86:e0:45:de:9c:5c:43:
                    bf:17:1a:99:4c:e1:79:1f:04:27:35:a1:41:2e:b5:
                    54:9b:10:03:75:06:61:69:2c:a0:eb:53:29:9a:d4:
                    05:b5:44:28:0e:ac:5b:12:88:6a:7e:c5:0b:a3:c0:
                    99:a5:d5:ed:36:94:82:fe:36:85:50:68:8e:6c:95:
                    9c:77:02:7b:63:ea:ea:80:89:c8:8e:17:d5:6d:5c:
                    f5:de:4d:a1:84:28:a7:14:a2:13:99:4b:ab:49:22:
                    f4:b1:b5:b3:ce:82:7d:0e:ae:9b:72:b5:d6:c4:5e:
                    85:6f:17:bf:db:8f:da:18:b5:df:8e:8c:e2:64:3f:
                    15:76:cd:67:e3:84:d7:a8:f2:e5:26:fb:98:f9:50:
                    1c:19:eb:a0:ff:11:61:d8:cd:63:f2:67:eb:e8:56:
                    36:a3:57:18:7c:a2:87:af:04:6e:91:0d:61:6c:05:
                    d4:ae:15:13:3b:09:83:ef:ad:97:1a:87:b6:21:dd:
                    6a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:53:D5:F7:EA:F7:9A:3C:C8:32:DB:27:FC:6A:DB:45:38:F6:92:C9
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3134342e302f32342d3234203d3e20323733343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:91:70:68:87:d5:62:b5:d7:34:b3:23:08:6c:0c:a8:21:c9:
         92:ea:1f:a5:1d:1c:9b:25:4a:a8:c8:55:3f:bf:63:1c:12:09:
         93:e6:36:bd:9e:ef:74:f6:5b:04:8d:16:13:80:1d:27:4e:d1:
         eb:a1:2d:96:c4:a3:85:f3:f0:ca:5c:e3:06:bf:d8:95:50:44:
         2b:aa:65:e0:78:c9:19:ff:84:bf:36:0e:fd:78:3f:21:ef:92:
         66:2b:f2:ac:9e:58:a4:02:ee:88:96:57:53:19:0c:87:93:0f:
         e5:dd:79:74:0e:87:7d:33:5c:a7:02:3a:e0:2a:23:e1:d3:48:
         79:dd:71:4c:5d:c3:d8:d6:3c:38:25:2e:ef:91:18:26:74:2f:
         19:4c:8e:24:01:2e:f1:81:1e:c2:08:dd:41:8d:f3:a4:0b:be:
         2b:f8:d1:e0:1d:4d:9b:a9:dd:c4:d4:99:dd:f8:f1:6d:f1:0e:
         85:29:16:1a:8d:61:cd:16:35:b5:1a:02:c3:b9:5f:6a:36:fa:
         cf:c9:47:b6:0d:4e:ac:90:dd:b1:f0:80:b2:46:01:29:d2:d4:
         80:23:21:a4:83:9d:03:e7:2a:91:37:40:8e:db:0c:c0:fb:93:
         d0:8e:c7:83:03:b7:1a:55:1e:22:de:7e:17:ee:35:00:de:83:
         36:d4:c5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:03:56 2026 by rpki-client