Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/1/3133382e39372e3230382e302f32322d3332203d3e20323634323031.roa
File:                     3133382e39372e3230382e302f32322d3332203d3e20323634323031.roa (raw, json)
Hash identifier:          Vm2B99z4i3YpU3InKndnm5c2GrGTL1TJcqkXvFobRAs=
Subject key identifier:   1B:47:73:94:01:47:8C:DB:83:E7:E5:22:B4:E0:0B:E8:96:36:2C:CC
Certificate issuer:       /CN=8E1E54DB030D4E86E9AF9B44C4588E78821D597A
Certificate serial:       59DC0B49331FEDBD17D4034F0A8FA70A262EE3DC
Authority key identifier: 8E:1E:54:DB:03:0D:4E:86:E9:AF:9B:44:C4:58:8E:78:82:1D:59:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E1E54DB030D4E86E9AF9B44C4588E78821D597A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/1/3133382e39372e3230382e302f32322d3332203d3e20323634323031.roa
Signing time:             Fri 06 Feb 2026 19:00:00 +0000
ROA not before:           Fri 06 Feb 2026 18:55:00 +0000
ROA not after:            Sat 06 Feb 2027 19:00:00 +0000
asID:                     264201
IP address blocks:        138.97.208.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/1/8E1E54DB030D4E86E9AF9B44C4588E78821D597A.crl
                          rsync://rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/1/8E1E54DB030D4E86E9AF9B44C4588E78821D597A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E1E54DB030D4E86E9AF9B44C4588E78821D597A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:dc:0b:49:33:1f:ed:bd:17:d4:03:4f:0a:8f:a7:0a:26:2e:e3:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1E54DB030D4E86E9AF9B44C4588E78821D597A
        Validity
            Not Before: Feb  6 18:55:00 2026 GMT
            Not After : Feb  6 19:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:72:56:70:e7:08:27:ea:ed:8c:7c:15:ac:69:
                    ce:d1:4c:26:61:61:99:8a:da:62:22:56:68:d2:d9:
                    3f:02:a6:be:07:52:b2:3b:ca:bc:77:c4:b2:15:ed:
                    db:25:15:90:63:bf:38:f8:6c:d2:36:d4:59:1a:23:
                    d8:83:ee:38:5e:3c:4a:50:6b:62:82:fd:47:bf:67:
                    d1:a1:19:a4:3e:26:46:24:9d:c4:88:7a:44:88:5a:
                    73:79:8e:64:3c:90:3a:dc:0f:ab:a4:9b:9f:df:b1:
                    4b:54:83:15:86:c3:e2:1d:f9:f6:0b:73:31:b7:cc:
                    8a:88:4f:f7:77:85:c9:34:28:90:1f:10:1e:9a:e5:
                    0a:a0:47:81:a2:b3:58:57:cc:66:36:e8:33:21:a7:
                    ed:7e:b0:a3:cb:8c:03:5c:10:70:8f:2d:04:21:c9:
                    35:d6:6f:3b:df:f3:ca:04:09:1b:93:86:8f:9a:cc:
                    0f:5b:f6:7f:77:ce:6c:4a:24:12:f9:dc:61:27:13:
                    61:43:09:ca:1d:01:e3:68:60:c0:64:06:e4:e4:9c:
                    e8:92:a7:52:1c:d9:4c:a2:e9:cb:96:fe:ff:2c:da:
                    95:a1:5d:0e:ad:ce:7a:e7:af:2b:36:de:72:8d:16:
                    93:ee:7c:66:66:57:34:a3:f2:76:ec:18:8a:d3:bc:
                    13:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:47:73:94:01:47:8C:DB:83:E7:E5:22:B4:E0:0B:E8:96:36:2C:CC
            X509v3 Authority Key Identifier:
                keyid:8E:1E:54:DB:03:0D:4E:86:E9:AF:9B:44:C4:58:8E:78:82:1D:59:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/1/8E1E54DB030D4E86E9AF9B44C4588E78821D597A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E1E54DB030D4E86E9AF9B44C4588E78821D597A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/1/3133382e39372e3230382e302f32322d3332203d3e20323634323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:30:9b:68:58:97:07:14:01:b0:d0:da:d8:6b:47:89:8a:41:
         fe:40:21:9a:a5:19:4b:fd:4f:ba:ac:95:cb:11:2f:86:0d:f2:
         4d:56:9c:7b:99:74:b7:b9:d6:40:cf:bf:0d:cb:46:e3:d6:8c:
         4f:dd:ad:4a:0a:6e:73:03:17:67:29:7d:51:a8:ee:1b:25:7d:
         44:14:68:2e:aa:95:d6:d6:a8:e2:af:d9:38:0d:63:7e:03:fd:
         0d:ea:57:2c:2c:7f:64:18:d4:4b:1b:08:2a:dc:2c:58:c8:26:
         28:1e:3b:b1:92:f9:81:fb:27:75:1f:96:df:5f:3d:e0:4d:fb:
         0d:a4:f9:ef:ad:83:f0:c1:8d:9b:d3:a2:fe:17:6d:07:3a:70:
         f2:43:d7:f3:48:4c:58:f8:87:cf:39:5a:92:c9:f7:43:3d:1a:
         6a:78:fd:c1:82:80:8d:d3:fd:74:62:a6:30:53:6d:84:7d:ec:
         3d:fd:40:c0:30:d8:80:de:ff:83:b4:68:9d:3a:ad:ab:bc:33:
         39:20:cf:37:84:31:3b:df:15:ae:b1:07:6f:e9:cf:58:22:a7:
         b2:94:86:c3:31:90:de:4c:38:14:0b:72:0b:2c:2a:69:91:75:
         e6:a9:b3:39:49:5e:70:ea:bf:70:42:32:71:e7:ff:c5:32:fa:
         ac:e1:1c:74
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUWdwLSTMf7b0X1ANPCo+nCiYu49wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEUxRTU0REIwMzBENEU4NkU5QUY5QjQ0QzQ1ODhFNzg4
MjFENTk3QTAeFw0yNjAyMDYxODU1MDBaFw0yNzAyMDYxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREM3MjU2NzBFNzA4MjdFQUVE
OEM3QzE1QUM2OUNFRDE0QzI2NjE2MTk5OEFEQTYyMjI1NjY4RDJEOTNGMDJBNkJF
MDc1MkIyM0JDQUJDNzdDNEIyMTVFRERCMjUxNTkwNjNCRjM4Rjg2Q0QyMzZENDU5
MUEyM0Q4ODNFRTM4NUUzQzRBNTA2QjYyODJGRDQ3QkY2N0QxQTExOUE0M0UyNjQ2
MjQ5REM0ODg3QTQ0ODg1QTczNzk4RTY0M0M5MDNBREMwRkFCQTQ5QjlGREZCMTRC
NTQ4MzE1ODZDM0UyMURGOUY2MEI3MzMxQjdDQzhBODg0RkY3Nzc4NUM5MzQyODkw
MUYxMDFFOUFFNTBBQTA0NzgxQTJCMzU4NTdDQzY2MzZFODMzMjFBN0VEN0VCMEEz
Q0I4QzAzNUMxMDcwOEYyRDA0MjFDOTM1RDY2RjNCREZGM0NBMDQwOTFCOTM4NjhG
OUFDQzBGNUJGNjdGNzdDRTZDNEEyNDEyRjlEQzYxMjcxMzYxNDMwOUNBMUQwMUUz
Njg2MEMwNjQwNkU0RTQ5Q0U4OTJBNzUyMUNEOTRDQTJFOUNCOTZGRUZGMkNEQTk1
QTE1RDBFQURDRTdBRTdBRjJCMzZERTcyOEQxNjkzRUU3QzY2NjY1NzM0QTNGMjc2
RUMxODhBRDNCQzEzQ0YwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA3HJWcOcIJ+rtjHwVrGnO0UwmYWGZitpiIlZo0tk/Aqa+B1KyO8q8
d8SyFe3bJRWQY784+GzSNtRZGiPYg+44XjxKUGtigv1Hv2fRoRmkPiZGJJ3EiHpE
iFpzeY5kPJA63A+rpJuf37FLVIMVhsPiHfn2C3Mxt8yKiE/3d4XJNCiQHxAemuUK
oEeBorNYV8xmNugzIaftfrCjy4wDXBBwjy0EIck11m873/PKBAkbk4aPmswPW/Z/
d85sSiQS+dxhJxNhQwnKHQHjaGDAZAbk5JzokqdSHNlMounLlv7/LNqVoV0Orc56
568rNt5yjRaT7nxmZlc0o/J27BiK07wTzwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FBtHc5QBR4zbg+flIrTgC+iWNizMMB8GA1UdIwQYMBaAFI4eVNsDDU6G6a+bRMRY
jniCHVl6MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJYR250OHNHVVFOWEpD
eHFqSGgzc3RNY013NHFtZFpuQXlqRVhDY1FTREFGLzEvOEUxRTU0REIwMzBENEU4
NkU5QUY5QjQ0QzQ1ODhFNzg4MjFENTk3QS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS84RTFFNTREQjAzMEQ0RTg2RTlBRjlCNDRDNDU4OEU3ODgyMUQ1
OTdBLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8yWEdudDhzR1VRTlhKQ3hxakho
M3N0TWNNdzRxbWRabkF5akVYQ2NRU0RBRi8xLzMxMzMzODJlMzkzNzJlMzIzMDM4
MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM0MzIzMDMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
imHQMA0GCSqGSIb3DQEBCwUAA4IBAQCJMJtoWJcHFAGw0NrYa0eJikH+QCGapRlL
/U+6rJXLES+GDfJNVpx7mXS3udZAz78Ny0bj1oxP3a1KCm5zAxdnKX1RqO4bJX1E
FGguqpXW1qjir9k4DWN+A/0N6lcsLH9kGNRLGwgq3CxYyCYoHjuxkvmB+yd1H5bf
Xz3gTfsNpPnvrYPwwY2b06L+F20HOnDyQ9fzSExY+IfPOVqSyfdDPRpqeP3BgoCN
0/10YqYwU22Efew9/UDAMNiA3v+DtGidOq2rvDM5IM83hDE73xWusQdv6c9YIqey
lIbDMZDeTDgUC3ILLCppkXXmqbM5SV5w6r9wQjJx5//FMvqs4Rx0
-----END CERTIFICATE-----
Generated at Fri Feb 20 00:30:02 2026 by rpki-client