Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3133382e3132322e3138302e302f32322d3232203d3e203532363533.roa
File:                     3133382e3132322e3138302e302f32322d3232203d3e203532363533.roa (raw, json)
Hash identifier:          cmgduC7U/IuKpK4UlctCV9X+XRmqKPeWkauGtgec2hY=
Subject key identifier:   B7:31:0B:BB:2A:88:44:21:0C:C3:18:8B:5D:94:DD:17:6C:74:34:F3
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       6BEC63506F05754AD14F768EE757914A5181EC81
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3133382e3132322e3138302e302f32322d3232203d3e203532363533.roa
Signing time:             Thu 05 Feb 2026 00:29:05 +0000
ROA not before:           Thu 05 Feb 2026 00:24:05 +0000
ROA not after:            Thu 04 Feb 2027 00:29:05 +0000
asID:                     52653
IP address blocks:        138.122.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl
                          rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 13:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:ec:63:50:6f:05:75:4a:d1:4f:76:8e:e7:57:91:4a:51:81:ec:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Feb  5 00:24:05 2026 GMT
            Not After : Feb  4 00:29:05 2027 GMT
        Subject: CN=B7310BBB2A8844210CC3188B5D94DD176C7434F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:22:17:63:b5:bc:cc:a3:e4:b4:b0:49:06:19:
                    01:89:de:07:fd:2e:45:21:8e:f4:8f:df:16:81:1d:
                    46:3c:16:86:d7:2b:ce:c9:4f:8f:a4:91:5d:15:93:
                    cb:b5:78:f1:b8:c8:9b:8e:86:76:7d:46:a7:93:7d:
                    68:aa:2f:6a:2f:2f:51:bb:69:4f:03:8a:e1:8b:16:
                    d2:c5:51:4f:4a:44:ed:02:92:a9:05:e5:7a:a3:ef:
                    14:9c:46:62:2e:8a:45:e3:ff:1c:a5:71:62:11:c9:
                    eb:53:84:14:c7:29:31:bc:72:a0:ce:08:d1:f3:af:
                    e3:0d:6d:72:e0:68:ac:71:05:53:88:f2:6e:e1:91:
                    b7:d2:a1:5f:fc:b9:58:71:ef:43:68:33:a3:be:6b:
                    2d:61:a5:ac:b7:62:28:bc:74:64:14:47:27:59:e2:
                    c5:e8:d7:a7:7d:6f:d0:e6:f9:72:b5:b0:8a:3b:24:
                    72:28:78:a9:6e:e2:d6:b6:10:f6:55:44:75:d4:c2:
                    db:62:2e:98:99:a1:c7:59:8d:6c:73:e8:30:35:b7:
                    7e:a6:27:9e:e6:68:d5:54:49:95:e7:17:42:4c:1a:
                    84:c7:01:c9:e7:ed:ee:8a:39:6e:81:2b:72:fc:e3:
                    38:b1:a4:8f:1f:19:d6:58:fc:04:81:2c:82:e5:eb:
                    1a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:31:0B:BB:2A:88:44:21:0C:C3:18:8B:5D:94:DD:17:6C:74:34:F3
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3133382e3132322e3138302e302f32322d3232203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:1d:f2:83:ff:e9:86:30:f8:da:f2:03:7a:f3:af:33:a2:93:
         9f:57:da:03:e2:5c:f2:41:aa:b7:24:a9:f0:a8:2e:7c:f5:2f:
         bd:1b:8c:05:77:35:69:9d:00:f3:74:48:48:76:e0:34:a7:4c:
         f1:92:ab:c2:cb:3b:25:35:95:81:87:a3:44:e3:7a:6f:e5:06:
         b5:ec:5d:70:cc:82:f4:82:8f:0f:2d:0f:43:de:15:01:42:b7:
         44:4d:27:b5:70:58:6c:44:38:56:1f:2c:8a:12:59:4e:0e:94:
         80:57:4a:3e:f2:1b:b6:65:06:eb:4e:56:c4:8c:7d:d3:93:d2:
         00:32:e2:84:61:dd:c7:0d:dd:0b:7b:bb:ee:65:71:dd:14:4e:
         97:86:c4:cb:34:15:3e:a7:c0:1a:6c:10:bf:3e:26:cb:f1:22:
         b2:b4:03:42:31:85:57:26:81:6f:42:a7:2b:f4:b4:5d:0b:05:
         a1:ce:69:1d:b3:f9:b1:d4:12:8d:61:4e:f0:44:c8:3c:d4:a1:
         bb:4d:ec:75:3d:6b:7e:b7:03:75:c8:ec:a0:01:2f:51:83:f6:
         57:1b:c0:8f:c9:27:a9:d6:3a:00:20:82:b4:6d:af:e7:f1:37:
         25:da:a4:27:3d:bc:3c:67:3e:61:df:e2:19:b2:ea:8b:62:6d:
         b1:9e:bd:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:04:16 2026 by rpki-client