Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/3133382e3235352e3232362e302f32342d3234203d3e20323633393839.roa
File:                     3133382e3235352e3232362e302f32342d3234203d3e20323633393839.roa (raw, json)
Hash identifier:          TPE8WRPn/ySNMno50RFx2PDkjhQ+jnnzgDGnADx4Elo=
Subject key identifier:   82:D8:F0:E4:8F:B8:DE:15:32:AC:F6:09:A8:DA:98:38:19:69:17:5D
Certificate issuer:       /CN=6E2CFADE0DB965B830D4C92D2183921AE113D2A2
Certificate serial:       6D6C4C71C69CA1454E02CC483FF919CA81E73507
Authority key identifier: 6E:2C:FA:DE:0D:B9:65:B8:30:D4:C9:2D:21:83:92:1A:E1:13:D2:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/3133382e3235352e3232362e302f32342d3234203d3e20323633393839.roa
Signing time:             Wed 04 Feb 2026 20:00:24 +0000
ROA not before:           Wed 04 Feb 2026 19:55:24 +0000
ROA not after:            Wed 03 Feb 2027 20:00:24 +0000
asID:                     263989
IP address blocks:        138.255.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.crl
                          rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:46:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:6c:4c:71:c6:9c:a1:45:4e:02:cc:48:3f:f9:19:ca:81:e7:35:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E2CFADE0DB965B830D4C92D2183921AE113D2A2
        Validity
            Not Before: Feb  4 19:55:24 2026 GMT
            Not After : Feb  3 20:00:24 2027 GMT
        Subject: CN=82D8F0E48FB8DE1532ACF609A8DA98381969175D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2a:ef:4f:fd:14:88:c0:ae:fd:ad:59:95:57:
                    0a:33:f3:fa:43:0e:7c:39:45:44:e0:cd:08:41:1c:
                    85:29:67:d7:00:8d:4a:d0:f5:67:28:07:f8:86:8d:
                    ed:8f:19:c3:6e:b3:81:7d:e1:35:d7:15:01:f2:d2:
                    6e:41:52:84:e0:05:26:18:1e:bf:aa:7c:11:06:a4:
                    a1:b0:f1:5f:26:61:b7:dd:24:80:5d:27:1e:d6:2f:
                    e6:51:18:e2:48:43:3b:02:43:7a:5b:ad:12:6e:d6:
                    b9:97:c7:52:57:64:87:3f:e7:18:e4:15:a6:d7:19:
                    91:7d:7a:61:d2:01:c1:7f:8c:80:2d:78:06:29:0d:
                    5d:e9:01:00:57:00:bd:3e:e7:9c:1c:3c:26:98:5a:
                    8f:4f:56:c4:23:89:9a:36:94:fc:4f:03:d4:4d:71:
                    9f:12:d0:4c:69:6d:1e:37:46:6c:33:a6:e7:7a:54:
                    db:13:7f:94:5f:5c:be:7c:a9:38:27:88:61:48:d2:
                    13:e7:57:9d:fd:04:0e:54:0a:28:61:b3:63:e2:e2:
                    41:d2:32:87:dc:e1:79:89:f7:4f:48:3c:a6:4a:04:
                    36:a1:d8:3b:f4:c5:e1:a3:e1:28:3d:be:e8:21:77:
                    28:e0:57:38:4a:88:ad:88:24:94:ce:35:32:29:46:
                    34:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D8:F0:E4:8F:B8:DE:15:32:AC:F6:09:A8:DA:98:38:19:69:17:5D
            X509v3 Authority Key Identifier:
                keyid:6E:2C:FA:DE:0D:B9:65:B8:30:D4:C9:2D:21:83:92:1A:E1:13:D2:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/3133382e3235352e3232362e302f32342d3234203d3e20323633393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:e5:fe:c3:89:2c:29:96:e5:af:6a:bb:59:65:48:23:07:64:
         48:f3:e2:a4:a4:24:16:76:37:ca:01:b9:82:03:95:f7:38:b2:
         1b:8e:70:bd:25:88:21:ad:4b:7c:2a:8e:0b:33:a3:a3:8a:9b:
         52:91:6a:99:ea:72:17:84:84:15:f6:47:5d:10:9e:ff:e2:cc:
         73:21:9d:77:62:f4:f8:27:06:9c:16:19:e6:71:c6:10:01:70:
         d9:8d:8b:c6:8f:2c:bc:bf:ba:66:94:d7:5a:92:3d:a3:6e:d5:
         eb:d2:9a:81:34:29:58:31:f9:f0:4c:1c:22:9d:4c:36:64:94:
         a3:de:6f:08:86:ed:f6:d4:96:a2:3c:38:dd:3c:e2:0a:87:1e:
         0a:9b:20:72:99:76:ea:90:d3:b1:c3:6c:28:26:8b:5a:90:7a:
         22:2d:d7:d1:bd:cc:a8:34:a9:ca:53:89:d1:dc:c9:3a:ab:24:
         2e:bc:25:9d:a0:17:13:19:82:f2:1b:d0:f6:2e:f1:3e:e9:84:
         61:a0:d5:5d:92:b3:1b:12:42:f9:e3:1b:57:3a:54:a1:cc:c7:
         32:1d:2a:aa:0b:3c:d7:de:5c:c9:dd:f0:30:3a:4b:68:9d:80:
         53:25:47:a7:59:0c:1b:2f:b0:81:aa:8f:84:2b:62:82:71:c8:
         fd:54:67:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:57:59 2026 by rpki-client