Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/3133382e3235352e3232342e302f32342d3234203d3e20323633393839.roa
File:                     3133382e3235352e3232342e302f32342d3234203d3e20323633393839.roa (raw, json)
Hash identifier:          NJShx4hVt+OrdpYh6xe52dNX6VfKEODK1YnZImftUvc=
Subject key identifier:   58:E5:AC:AB:7B:73:1F:05:28:94:2F:2F:C8:52:34:65:19:CB:B3:A5
Certificate issuer:       /CN=6E2CFADE0DB965B830D4C92D2183921AE113D2A2
Certificate serial:       715E0D17C5A1018DC334D42CC70ADC16A4DC817D
Authority key identifier: 6E:2C:FA:DE:0D:B9:65:B8:30:D4:C9:2D:21:83:92:1A:E1:13:D2:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/3133382e3235352e3232342e302f32342d3234203d3e20323633393839.roa
Signing time:             Wed 04 Feb 2026 20:00:24 +0000
ROA not before:           Wed 04 Feb 2026 19:55:24 +0000
ROA not after:            Wed 03 Feb 2027 20:00:24 +0000
asID:                     263989
IP address blocks:        138.255.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.crl
                          rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:46:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:5e:0d:17:c5:a1:01:8d:c3:34:d4:2c:c7:0a:dc:16:a4:dc:81:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E2CFADE0DB965B830D4C92D2183921AE113D2A2
        Validity
            Not Before: Feb  4 19:55:24 2026 GMT
            Not After : Feb  3 20:00:24 2027 GMT
        Subject: CN=58E5ACAB7B731F0528942F2FC852346519CBB3A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ce:00:0a:80:d5:0c:f2:80:23:ca:59:36:af:
                    f9:33:74:23:9b:1e:c7:aa:99:25:8c:19:ef:d2:dc:
                    ef:4b:0d:2c:99:ce:15:40:52:10:c0:c1:b9:05:06:
                    76:48:91:85:8b:1f:ae:ef:cb:7f:8c:78:55:1f:1f:
                    24:bc:56:ec:bd:8b:d9:6d:77:ff:6f:f5:7f:14:26:
                    fc:9a:d8:60:49:38:ee:06:f8:8e:06:4a:d5:6d:04:
                    de:87:74:66:50:50:09:1f:ea:7a:9e:36:32:16:99:
                    01:b7:54:5d:c1:46:5c:c8:08:a3:78:56:68:4b:81:
                    ad:31:1f:a9:55:02:c3:88:a2:59:ab:b1:63:22:aa:
                    a7:bc:1c:11:45:e3:85:d5:c5:c9:0c:e7:22:34:eb:
                    3b:64:2c:67:19:14:d8:59:7e:a5:11:f2:81:a0:93:
                    c9:3e:68:d1:36:a0:01:76:7b:88:e7:b8:79:ef:12:
                    50:11:c1:0b:d4:22:96:f1:c2:b8:19:0e:2b:2c:52:
                    c9:63:9d:41:73:65:7f:dc:8e:e3:cb:1b:d0:f8:08:
                    af:80:ca:8e:0f:1c:79:88:e0:4a:3c:0a:ca:3f:eb:
                    e7:ee:e5:d9:ec:28:a9:fd:6e:63:60:2e:69:60:c8:
                    d3:90:d9:b0:bb:47:36:af:61:91:be:d2:b6:1a:ed:
                    b2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E5:AC:AB:7B:73:1F:05:28:94:2F:2F:C8:52:34:65:19:CB:B3:A5
            X509v3 Authority Key Identifier:
                keyid:6E:2C:FA:DE:0D:B9:65:B8:30:D4:C9:2D:21:83:92:1A:E1:13:D2:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/3133382e3235352e3232342e302f32342d3234203d3e20323633393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         df:50:08:44:d0:37:ad:f8:11:99:b1:6f:4f:75:f0:2e:3c:88:
         96:ad:08:c9:41:54:04:a2:60:c1:f0:0a:dc:bc:81:f3:cb:ec:
         b0:0c:73:1d:e7:08:b4:39:88:77:5e:e4:26:6a:d6:55:53:5c:
         5b:90:3d:08:bb:1c:58:b5:5f:9f:be:45:8c:20:f9:c4:56:e8:
         95:d4:0a:da:6b:a4:70:7c:a1:b9:52:93:b6:4d:3f:29:73:20:
         84:0a:13:c5:3f:6a:94:0c:84:64:84:05:03:28:b3:a3:31:09:
         6c:4b:af:fe:f3:74:c5:0a:0d:b0:db:f8:2c:72:88:43:f0:06:
         6e:2f:df:88:68:cc:84:79:13:d3:f5:03:f7:dc:a0:dc:ad:58:
         26:b8:06:7d:ee:81:61:81:4d:e9:4c:9d:ec:fc:a2:5b:5f:77:
         86:2c:fc:07:25:8c:23:73:3f:a6:07:a7:fb:21:c4:13:ab:d4:
         7e:dd:06:b4:56:69:ad:67:a5:cc:f5:c1:6a:3a:75:f8:10:c2:
         a3:1d:e9:c6:60:bb:1f:ab:f4:1e:24:82:3e:87:b9:0e:af:52:
         45:81:e9:73:dd:f2:1f:61:8b:b3:9c:15:a7:4e:15:12:6e:61:
         fd:31:da:1d:21:ca:84:2a:95:4a:46:5a:44:40:2c:86:69:b8:
         c4:1a:d4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:17:06 2026 by rpki-client