Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/3133382e39342e3231352e302f32342d3234203d3e20323733343137.roa
File:                     3133382e39342e3231352e302f32342d3234203d3e20323733343137.roa (raw, json)
Hash identifier:          KYE1H42HX+YvM60WjXOZh03ylFj+NB+0mm6xLPpYYD4=
Subject key identifier:   1D:D3:6C:EA:ED:11:39:1C:FD:45:EA:CF:A9:09:EC:C0:F6:9C:10:BF
Certificate issuer:       /CN=6C743304D2B88AC02B91B43EBCC7A62B65950D3F
Certificate serial:       05B2FFC1C21E02A29FA8EFE88F7675413C4F6D1C
Authority key identifier: 6C:74:33:04:D2:B8:8A:C0:2B:91:B4:3E:BC:C7:A6:2B:65:95:0D:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C743304D2B88AC02B91B43EBCC7A62B65950D3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/3133382e39342e3231352e302f32342d3234203d3e20323733343137.roa
Signing time:             Thu 29 Jan 2026 16:10:44 +0000
ROA not before:           Thu 29 Jan 2026 16:05:44 +0000
ROA not after:            Thu 28 Jan 2027 16:10:44 +0000
asID:                     273417
IP address blocks:        138.94.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/6C743304D2B88AC02B91B43EBCC7A62B65950D3F.crl
                          rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/6C743304D2B88AC02B91B43EBCC7A62B65950D3F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C743304D2B88AC02B91B43EBCC7A62B65950D3F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 13:30:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:b2:ff:c1:c2:1e:02:a2:9f:a8:ef:e8:8f:76:75:41:3c:4f:6d:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C743304D2B88AC02B91B43EBCC7A62B65950D3F
        Validity
            Not Before: Jan 29 16:05:44 2026 GMT
            Not After : Jan 28 16:10:44 2027 GMT
        Subject: CN=1DD36CEAED11391CFD45EACFA909ECC0F69C10BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b0:51:cc:f8:d1:bb:7a:4f:7c:b7:0d:78:1f:
                    26:29:02:7b:97:b5:fc:93:cc:83:4a:a6:8c:a7:8e:
                    a7:82:df:1e:db:d0:b7:30:f9:0a:03:03:0b:7e:86:
                    1c:e7:0d:b0:36:4f:75:58:44:66:22:61:fc:47:22:
                    1e:f9:bc:e2:85:c2:9b:0c:7f:a6:b4:85:76:16:fa:
                    9f:ca:03:f3:e5:e0:91:59:ba:01:09:08:f0:35:76:
                    c8:6b:e9:0e:e6:76:4b:9f:8b:1b:fc:aa:3b:dd:af:
                    ef:cd:22:02:f8:44:a6:cc:5c:46:b5:1e:e3:97:1c:
                    15:69:07:42:5b:7f:27:50:fc:f7:53:6b:ee:c7:54:
                    70:84:de:b3:de:29:5f:51:c7:e6:63:ce:b4:3d:0e:
                    c8:65:e2:68:63:04:e3:04:39:7d:3c:47:b0:6b:2c:
                    89:7e:0a:f4:ee:9b:30:5e:0c:c5:31:54:5c:99:6d:
                    1b:d2:b9:06:77:90:4f:da:e5:55:79:fa:c7:3c:dd:
                    97:9e:44:a6:81:c6:1a:61:32:d5:04:20:4b:fe:e3:
                    ae:ef:22:0b:51:3b:97:41:2a:8c:28:96:37:76:f4:
                    c0:b1:9f:65:e9:e5:cc:26:32:95:f9:9c:a2:5b:ce:
                    76:52:bf:57:0a:ee:2c:7c:7d:7c:62:ca:c2:9e:ba:
                    4c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D3:6C:EA:ED:11:39:1C:FD:45:EA:CF:A9:09:EC:C0:F6:9C:10:BF
            X509v3 Authority Key Identifier:
                keyid:6C:74:33:04:D2:B8:8A:C0:2B:91:B4:3E:BC:C7:A6:2B:65:95:0D:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/6C743304D2B88AC02B91B43EBCC7A62B65950D3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C743304D2B88AC02B91B43EBCC7A62B65950D3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/3133382e39342e3231352e302f32342d3234203d3e20323733343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:73:62:25:95:fa:06:8a:62:1d:f5:a3:35:3d:ed:07:48:09:
         ac:95:6c:2b:ca:0f:ec:f4:a8:28:26:ff:5b:af:83:2c:95:86:
         0e:ae:55:37:f5:41:3d:bf:0d:0f:f2:7a:b6:d6:a5:93:79:20:
         4e:25:4e:a7:20:d1:c7:48:c1:e6:c1:7c:08:66:57:05:13:af:
         44:65:45:12:ec:13:af:0a:6f:f2:af:8a:6c:f9:b0:b9:13:52:
         44:ae:e3:fd:01:26:96:9a:b2:68:95:be:a4:16:77:99:1c:3a:
         bf:fd:fc:f0:49:0e:de:eb:3b:eb:6d:bd:c3:9b:03:a4:1a:b2:
         ad:e7:dd:f7:7d:4c:64:da:6a:df:d9:c3:51:c4:aa:99:42:78:
         6b:b5:7c:ab:a3:7e:da:f5:1c:aa:ff:bd:ae:d8:b5:23:bd:37:
         bc:6c:f3:ab:98:db:f4:e7:e8:18:2c:66:20:89:05:ca:7f:21:
         6b:d2:3d:6a:82:75:ee:b2:bf:00:2e:3b:77:27:0f:ca:7d:63:
         bd:39:e9:2d:e0:08:15:a1:f0:0c:4e:f8:bb:ce:c5:86:d7:e6:
         99:54:5b:8b:0c:d3:81:cb:3e:22:89:20:ca:1a:1a:b6:a7:cf:
         27:dd:56:39:f7:11:5f:61:ab:98:19:a8:62:a4:50:d8:27:af:
         ab:e8:f3:ea
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBbL/wcIeAqKfqO/oj3Z1QTxPbRwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkM3NDMzMDREMkI4OEFDMDJCOTFCNDNFQkNDN0E2MkI2
NTk1MEQzRjAeFw0yNjAxMjkxNjA1NDRaFw0yNzAxMjgxNjEwNDRaMDMxMTAvBgNV
BAMTKDFERDM2Q0VBRUQxMTM5MUNGRDQ1RUFDRkE5MDlFQ0MwRjY5QzEwQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9sFHM+NG7ek98tw14HyYpAnuX
tfyTzINKpoynjqeC3x7b0Lcw+QoDAwt+hhznDbA2T3VYRGYiYfxHIh75vOKFwpsM
f6a0hXYW+p/KA/Pl4JFZugEJCPA1dshr6Q7mdkufixv8qjvdr+/NIgL4RKbMXEa1
HuOXHBVpB0JbfydQ/PdTa+7HVHCE3rPeKV9Rx+ZjzrQ9Dshl4mhjBOMEOX08R7Br
LIl+CvTumzBeDMUxVFyZbRvSuQZ3kE/a5VV5+sc83ZeeRKaBxhphMtUEIEv+467v
IgtRO5dBKowoljd29MCxn2Xp5cwmMpX5nKJbznZSv1cK7ix8fXxiysKeukyfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUHdNs6u0RORz9RerPqQnswPacEL8wHwYDVR0j
BBgwFoAUbHQzBNK4isArkbQ+vMemK2WVDT8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm5lcGtwc3NYZnZZY0s1SzFIY2ppM1gzZ3JzUkFNcFA5WU00YXZtcEJZ
eFcvMC82Qzc0MzMwNEQyQjg4QUMwMkI5MUI0M0VCQ0M3QTYyQjY1OTUwRDNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZDNzQzMzA0RDJCODhBQzAy
QjkxQjQzRUJDQzdBNjJCNjU5NTBEM0YuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJuZXBrcHNzWGZ2WWNLNUsxSGNqaTNYM2dyc1JBTXBQOVlNNGF2bXBCWXhXLzAv
MzEzMzM4MmUzOTM0MmUzMjMxMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzMzNDMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKXtcwDQYJKoZIhvcNAQELBQADggEBAKJzYiWV
+gaKYh31ozU97QdICayVbCvKD+z0qCgm/1uvgyyVhg6uVTf1QT2/DQ/yerbWpZN5
IE4lTqcg0cdIwebBfAhmVwUTr0RlRRLsE68Kb/Kvimz5sLkTUkSu4/0BJpaasmiV
vqQWd5kcOr/9/PBJDt7rO+ttvcObA6Qasq3n3fd9TGTaat/Zw1HEqplCeGu1fKuj
ftr1HKr/va7YtSO9N7xs86uY2/Tn6BgsZiCJBcp/IWvSPWqCde6yvwAuO3cnD8p9
Y7056S3gCBWh8AxO+LvOxYbX5plUW4sM04HLPiKJIMoaGranzyfdVjn3EV9hq5gZ
qGKkUNgnr6vo8+o=
-----END CERTIFICATE-----
Generated at Thu Feb 19 15:40:16 2026 by rpki-client