Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/3133382e302e3139322e302f32322d3234203d3e203238313331.roa
File:                     3133382e302e3139322e302f32322d3234203d3e203238313331.roa (raw, json)
Hash identifier:          OACuBlgvFeqrBl97DicWFUeheJzjkdOGiOjtroPLZ5I=
Subject key identifier:   F7:8F:72:46:A0:92:F2:76:F5:6C:AB:9C:B4:5C:03:3D:52:9B:E0:38
Certificate issuer:       /CN=03981ED1B457034CCBAC00F384454B3A021E294E
Certificate serial:       203391A162EF5455DED155E13F4D60A72E8E69BD
Authority key identifier: 03:98:1E:D1:B4:57:03:4C:CB:AC:00:F3:84:45:4B:3A:02:1E:29:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/3133382e302e3139322e302f32322d3234203d3e203238313331.roa
Signing time:             Thu 05 Feb 2026 04:07:52 +0000
ROA not before:           Thu 05 Feb 2026 04:02:52 +0000
ROA not after:            Thu 04 Feb 2027 04:07:52 +0000
asID:                     28131
IP address blocks:        138.0.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.crl
                          rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 03:18:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:33:91:a1:62:ef:54:55:de:d1:55:e1:3f:4d:60:a7:2e:8e:69:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03981ED1B457034CCBAC00F384454B3A021E294E
        Validity
            Not Before: Feb  5 04:02:52 2026 GMT
            Not After : Feb  4 04:07:52 2027 GMT
        Subject: CN=F78F7246A092F276F56CAB9CB45C033D529BE038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ce:91:02:34:5d:ea:4b:8c:47:a6:eb:6e:34:
                    77:6f:7e:e9:b1:f8:1d:ae:19:1b:f5:44:56:0e:e5:
                    f1:f3:e0:d6:0f:19:68:2c:1e:a2:42:35:69:e8:72:
                    a2:c1:3f:fa:ba:a8:e1:70:89:91:b0:2f:8e:ce:5d:
                    4c:37:eb:bc:75:69:87:16:0e:18:03:10:d6:c2:55:
                    a3:04:7a:b1:67:30:73:d2:39:5d:b0:5b:f2:56:28:
                    ef:cb:20:f8:5b:4f:7f:e5:de:92:f8:80:a5:f8:d8:
                    12:14:02:ae:5c:f1:ba:f9:7e:41:9b:f2:91:d9:01:
                    ae:8d:53:21:67:d7:9e:94:82:a5:bf:26:7d:c2:7c:
                    97:d9:ac:21:72:17:f7:19:f9:60:fa:cd:54:87:46:
                    d0:6e:69:83:97:f0:b5:55:a4:25:e6:a0:df:58:66:
                    88:60:0f:4d:89:e7:a7:cb:c7:d1:1f:58:44:91:3e:
                    39:5a:e8:a4:8b:0d:d4:6c:23:a1:54:5b:5c:d4:5e:
                    ad:71:9f:9c:6a:46:62:97:18:4d:21:6d:ee:48:2e:
                    2e:80:52:a9:78:2a:99:13:ba:01:94:77:fc:c2:0a:
                    c9:18:c0:4e:65:a1:9d:d3:6e:71:5d:13:86:0c:e4:
                    ed:d1:06:2b:e8:50:8c:04:2e:5b:c9:d6:92:54:cb:
                    d2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:8F:72:46:A0:92:F2:76:F5:6C:AB:9C:B4:5C:03:3D:52:9B:E0:38
            X509v3 Authority Key Identifier:
                keyid:03:98:1E:D1:B4:57:03:4C:CB:AC:00:F3:84:45:4B:3A:02:1E:29:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/3133382e302e3139322e302f32322d3234203d3e203238313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:52:26:37:11:d3:7c:2a:73:9b:fd:54:3a:62:30:e1:87:81:
         34:09:a5:13:79:c9:b8:db:2d:3c:c3:18:1b:ef:93:a2:c7:c8:
         0d:2b:eb:26:89:56:c6:fc:c7:9b:f9:9a:92:be:be:f0:c7:7a:
         92:58:54:39:a1:db:86:18:07:a6:c1:c4:51:0d:65:01:e6:52:
         49:61:05:28:28:4d:e6:4e:49:d6:d3:01:68:73:6c:08:59:45:
         23:ef:3d:af:37:df:01:a8:3d:0c:ec:5e:90:c5:46:cc:f3:96:
         74:33:44:ec:2d:80:e0:9e:4e:48:1a:8c:0b:ff:55:31:0b:f6:
         2b:73:ad:d7:1e:a6:d9:06:fe:98:f0:21:ea:3b:c2:c1:2e:17:
         a7:48:7b:7d:d0:98:a2:49:88:21:3c:f3:6b:4a:23:a7:d1:91:
         92:19:68:e6:57:28:42:43:2e:99:4a:e9:d1:64:6d:2c:c5:31:
         ac:4e:28:a9:51:6b:68:1e:76:c3:e1:43:1d:4d:08:58:f3:85:
         54:32:48:d8:1a:d6:58:3d:cb:ac:2e:78:f9:ef:bb:5c:b3:1c:
         40:9b:25:e5:34:15:66:2f:b2:5d:20:ef:b0:70:ab:d4:8f:4c:
         69:c6:6d:6f:11:c2:20:d3:12:db:e4:c7:e7:87:31:c7:aa:80:
         e3:31:e3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 12:55:19 2026 by rpki-client