Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3133382e3132322e3138312e302f32342d3234203d3e203532363533.roa
File:                     3133382e3132322e3138312e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier:          riRGHoIY+Z8BjgRmBPy52BN8/I8qdX1OuI9Wp1ch4GI=
Subject key identifier:   0C:E9:BC:78:49:20:66:77:BA:82:A8:98:A7:16:A5:AE:5D:1B:B2:61
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       48BD587A4780DF8C9003A898A21DC14D476FBE94
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3133382e3132322e3138312e302f32342d3234203d3e203532363533.roa
Signing time:             Thu 05 Feb 2026 00:29:04 +0000
ROA not before:           Thu 05 Feb 2026 00:24:04 +0000
ROA not after:            Thu 04 Feb 2027 00:29:04 +0000
asID:                     52653
IP address blocks:        138.122.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl
                          rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 13:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:bd:58:7a:47:80:df:8c:90:03:a8:98:a2:1d:c1:4d:47:6f:be:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Feb  5 00:24:04 2026 GMT
            Not After : Feb  4 00:29:04 2027 GMT
        Subject: CN=0CE9BC7849206677BA82A898A716A5AE5D1BB261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8d:6e:7d:e0:71:16:d3:60:c3:69:f7:bb:ca:
                    d8:b4:bc:54:d3:b9:8c:f6:71:6f:9e:ee:9a:4d:6f:
                    28:b8:47:24:0e:17:b0:17:04:3f:fc:2e:18:60:2f:
                    1e:14:72:cb:18:30:1c:27:e9:c0:ef:0f:85:bc:96:
                    1f:80:87:6d:59:97:ae:b0:d0:9d:7f:d1:dd:34:05:
                    bb:08:36:f9:93:05:eb:e3:bc:7d:ea:f4:e9:5d:a0:
                    22:4f:ae:c1:57:9c:40:2f:c2:1a:a2:56:cc:7d:48:
                    4c:35:25:7e:11:46:85:80:e8:df:4c:f9:d6:fc:0e:
                    10:1c:bb:96:a7:44:50:ef:3f:b1:5f:ef:8b:75:a4:
                    82:33:74:7c:7e:0d:9b:28:e0:40:89:ca:65:2d:2a:
                    f8:c5:6d:07:55:19:22:61:35:34:4a:5f:c0:a3:ff:
                    b8:43:81:b1:c9:62:fa:f8:e6:4e:51:4c:9b:5c:2b:
                    b2:4f:a2:3b:e1:89:d8:98:44:9d:25:58:a0:04:e3:
                    ed:7c:5c:a2:74:fc:4a:41:b9:12:b3:61:66:3c:0d:
                    30:45:dc:ef:82:bc:d8:ad:cb:b4:b2:9b:56:ee:ab:
                    8e:43:18:32:a6:5d:01:db:d9:3a:c5:fb:ee:11:a0:
                    48:52:2b:06:44:c4:15:2f:9d:7b:08:0e:bd:a5:33:
                    73:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:E9:BC:78:49:20:66:77:BA:82:A8:98:A7:16:A5:AE:5D:1B:B2:61
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3133382e3132322e3138312e302f32342d3234203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:0f:4d:28:9d:2a:f5:e8:a3:98:36:8a:a8:c2:fa:4f:62:69:
         50:8b:80:d9:a2:74:ef:73:36:33:c0:dc:69:6f:e6:2e:a4:db:
         cc:dd:ad:09:d1:92:7a:99:08:45:d9:37:46:65:40:7c:13:2e:
         09:cb:f5:2a:37:a4:01:78:ff:b2:04:d8:24:51:12:cb:c9:4b:
         33:19:f0:a8:b2:50:e2:5d:02:45:f1:b2:31:2f:dc:68:39:48:
         d6:7f:4d:8c:bf:19:a3:91:50:06:6c:ed:9a:e1:d8:e3:73:54:
         48:dc:a0:75:13:21:0e:d9:a7:da:26:e1:4e:78:e4:f0:b3:1b:
         62:91:2d:3b:6e:da:74:67:f8:e3:b3:2e:26:e5:8b:06:2a:8b:
         eb:88:75:52:c7:24:0c:a2:59:84:57:56:09:83:b0:10:7d:9f:
         c5:40:b2:05:fb:35:99:da:db:97:d3:28:1b:81:a0:4b:f6:a7:
         c9:99:f8:8d:a5:5c:b1:55:7e:25:44:60:a3:b6:56:a8:9a:81:
         b9:4a:3e:04:9b:52:25:d5:e1:c4:99:b6:bc:ec:b6:91:30:96:
         84:c3:8f:37:d8:4a:65:f7:cf:a0:73:aa:c7:1a:9e:d6:48:75:
         fd:71:6e:0b:22:13:51:b6:34:01:3a:fa:20:bb:89:f7:8f:2b:
         cb:c0:64:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:04:21 2026 by rpki-client