Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/1/3133382e39372e3131322e302f32322d3234203d3e20323634313633.roa
File:                     3133382e39372e3131322e302f32322d3234203d3e20323634313633.roa (raw, json)
Hash identifier:          bIzMouZK82yCtRYuQqlhjmhoItw3DaHHHavKx4L3ats=
Subject key identifier:   54:E7:37:68:79:AA:CC:9C:F8:71:31:5A:49:FD:86:33:71:9C:B5:2D
Certificate issuer:       /CN=E6082A33F5870377F7FE543A5727F0951D32150A
Certificate serial:       29A418D3E22826537F98D551FC509083DD955BD7
Authority key identifier: E6:08:2A:33:F5:87:03:77:F7:FE:54:3A:57:27:F0:95:1D:32:15:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6082A33F5870377F7FE543A5727F0951D32150A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/1/3133382e39372e3131322e302f32322d3234203d3e20323634313633.roa
Signing time:             Thu 05 Feb 2026 05:45:15 +0000
ROA not before:           Thu 05 Feb 2026 05:40:15 +0000
ROA not after:            Thu 04 Feb 2027 05:45:15 +0000
asID:                     264163
IP address blocks:        138.97.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/1/E6082A33F5870377F7FE543A5727F0951D32150A.crl
                          rsync://rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/1/E6082A33F5870377F7FE543A5727F0951D32150A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6082A33F5870377F7FE543A5727F0951D32150A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:51:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:a4:18:d3:e2:28:26:53:7f:98:d5:51:fc:50:90:83:dd:95:5b:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6082A33F5870377F7FE543A5727F0951D32150A
        Validity
            Not Before: Feb  5 05:40:15 2026 GMT
            Not After : Feb  4 05:45:15 2027 GMT
        Subject: CN=54E7376879AACC9CF871315A49FD8633719CB52D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2f:95:19:df:9c:7e:5e:84:4f:a5:8a:13:f1:
                    d4:ce:2c:b6:df:d9:06:7c:fe:7f:d2:77:de:0a:f2:
                    bf:68:a0:6c:c2:be:d8:c3:ec:7f:28:e2:34:b6:89:
                    7e:9c:2d:e6:56:ce:3f:7a:87:18:d7:fb:64:e7:1e:
                    e8:9c:12:f8:75:7d:e7:e5:ff:d3:33:c7:61:73:94:
                    cf:9e:4e:99:f3:e1:64:d6:8d:f7:30:c8:09:be:ea:
                    16:56:50:bc:6f:da:66:90:b1:f3:c9:89:58:0d:23:
                    d6:cd:6d:6b:3f:24:5d:00:5d:08:18:14:3f:21:eb:
                    cc:8a:96:3e:ae:0c:e9:77:79:20:de:c9:22:fb:ee:
                    70:c9:34:1d:e9:2f:f8:97:ff:90:f9:98:88:55:08:
                    e3:6e:f4:98:f2:6f:36:42:14:6b:52:3e:ba:da:5c:
                    c5:4d:77:72:77:26:be:3f:1a:1b:f8:f1:5c:99:72:
                    bb:03:41:c3:b6:9f:ba:98:8c:21:d7:e2:bf:16:7f:
                    f2:44:30:62:82:52:11:bf:7a:8a:8a:95:04:36:73:
                    9e:61:60:e7:ed:b3:00:ed:75:fd:9e:bd:8f:5f:da:
                    81:67:05:12:1f:96:f3:9e:68:0d:07:a8:e1:66:5a:
                    a7:ff:6b:10:8c:ba:23:e1:04:76:e5:2a:49:70:54:
                    1d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E7:37:68:79:AA:CC:9C:F8:71:31:5A:49:FD:86:33:71:9C:B5:2D
            X509v3 Authority Key Identifier:
                keyid:E6:08:2A:33:F5:87:03:77:F7:FE:54:3A:57:27:F0:95:1D:32:15:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/1/E6082A33F5870377F7FE543A5727F0951D32150A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6082A33F5870377F7FE543A5727F0951D32150A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/1/3133382e39372e3131322e302f32322d3234203d3e20323634313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:5d:89:38:50:aa:e2:fe:be:2d:29:c1:4f:63:dc:15:a0:65:
         08:bc:f6:d3:d7:f7:e2:14:03:fd:c1:3d:d9:bc:b8:83:d5:42:
         35:ba:00:80:80:9e:19:14:67:6f:64:f4:f7:35:1e:1a:e5:d3:
         c7:b0:62:7b:15:1d:74:57:0a:79:9b:ad:8e:39:49:ad:fe:87:
         74:0b:3b:05:f7:52:7d:38:c2:39:e6:7c:c1:df:d4:48:ee:25:
         d3:45:e7:24:e4:97:48:c0:19:de:37:ce:9b:5c:a1:fb:e3:b3:
         1b:74:a1:2a:30:58:36:5c:d3:4f:58:cd:24:fa:63:2d:1f:59:
         c5:f3:bb:c4:9b:67:c7:7e:a5:6c:45:c2:a3:93:73:d7:48:60:
         0f:9a:a2:3a:7c:f5:04:28:3b:ea:48:00:11:a8:fd:04:c0:ba:
         f4:f6:b5:ca:76:b2:37:31:de:96:e5:15:8f:21:2b:1e:8b:3d:
         d5:72:11:03:be:41:3e:26:29:db:0b:cc:ca:c2:e0:40:ba:3f:
         22:12:c5:c0:ce:95:8d:4b:bc:cd:52:98:ea:d9:79:2f:90:be:
         e2:28:f2:be:8c:dc:17:06:92:7c:99:27:14:d4:cd:16:b6:f3:
         b0:19:1d:6c:5f:4d:a1:c7:9b:79:d2:57:37:07:a6:c6:6e:eb:
         dd:92:08:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:41:54 2026 by rpki-client