Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3133382e3132322e3138322e302f32342d3234203d3e203532363533.roa
File:                     3133382e3132322e3138322e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier:          d9gWR+V0n8lfRqVndCDeHLy502gr1FSpQj4lY6zRI5Y=
Subject key identifier:   CE:A2:A7:49:69:3E:BD:13:77:5B:66:5F:9B:D0:C7:CA:8D:55:11:45
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       076C36323CBD76D813855260701E9A3E42472E21
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3133382e3132322e3138322e302f32342d3234203d3e203532363533.roa
Signing time:             Thu 05 Feb 2026 00:29:08 +0000
ROA not before:           Thu 05 Feb 2026 00:24:08 +0000
ROA not after:            Thu 04 Feb 2027 00:29:08 +0000
asID:                     52653
IP address blocks:        138.122.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl
                          rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 13:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:6c:36:32:3c:bd:76:d8:13:85:52:60:70:1e:9a:3e:42:47:2e:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Feb  5 00:24:08 2026 GMT
            Not After : Feb  4 00:29:08 2027 GMT
        Subject: CN=CEA2A749693EBD13775B665F9BD0C7CA8D551145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:15:1b:4d:23:e2:94:98:69:c3:3d:56:32:8d:
                    b6:be:59:07:ba:4b:dc:a1:ad:24:da:0e:bd:a6:9e:
                    b6:93:68:80:02:ac:79:9e:b6:60:79:3d:31:90:b1:
                    9f:a5:78:08:75:61:08:99:23:bc:fc:d6:be:0c:8b:
                    97:4f:54:c9:8c:52:4b:13:af:ac:97:62:45:ec:57:
                    fd:96:6c:0a:08:e2:cb:dd:7b:58:9a:a1:2a:24:92:
                    a6:cc:4f:a8:0f:a0:da:48:e5:5f:64:3b:34:c5:8c:
                    9a:cb:ae:26:1a:17:db:bc:c0:c2:bf:8f:ae:d1:07:
                    ee:ae:1c:36:e7:ef:95:cf:a0:00:f0:8f:a7:f4:26:
                    bb:ad:01:fc:0a:d8:6b:0b:43:85:a2:c5:e0:e5:5a:
                    c7:b5:4b:57:f3:f2:00:38:75:37:2b:2f:62:32:fb:
                    eb:1a:e8:ba:48:2b:a8:8f:e6:c0:19:af:53:6e:a3:
                    45:54:42:4a:a3:69:66:b1:75:60:89:c6:55:32:3b:
                    3f:01:67:c1:d7:d5:43:c8:35:d2:a2:fc:51:29:32:
                    07:39:78:5b:c4:b1:46:0f:b2:3d:15:03:dd:b8:3e:
                    35:2c:ac:e3:fb:84:fd:6e:0a:d6:ad:a3:64:f9:f6:
                    9d:41:92:ae:02:02:21:78:f6:d2:e5:a6:07:c2:d1:
                    8c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A2:A7:49:69:3E:BD:13:77:5B:66:5F:9B:D0:C7:CA:8D:55:11:45
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3133382e3132322e3138322e302f32342d3234203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:41:74:b9:92:49:ef:81:b0:39:55:8f:dc:8a:9c:c4:5e:10:
         b8:64:a6:58:50:e5:da:e3:c4:a5:b1:35:0b:6a:c8:e3:40:6c:
         70:8d:26:49:b2:07:61:0b:df:a8:ad:7e:75:3a:14:8a:30:49:
         e6:43:40:5c:b2:ec:9b:6a:fe:86:0b:99:ad:ef:f2:d1:9a:ce:
         4d:83:3d:af:59:90:a5:f0:66:14:22:84:63:9c:a4:5f:fb:10:
         c4:0b:59:d9:49:68:ab:72:fb:1b:16:84:6e:8e:ce:46:0a:fa:
         bb:f8:e8:3e:54:3f:3c:15:bf:8a:de:13:29:50:f5:79:3e:18:
         02:76:59:24:cc:a2:91:eb:a1:e3:ae:dc:27:ee:fa:27:fe:78:
         1d:0a:90:fa:a8:76:d4:d8:3f:bd:a1:03:c9:d9:3b:85:05:5f:
         c6:bd:01:fa:fb:d9:e0:4f:7b:ce:15:b8:27:f1:c5:8d:88:55:
         ba:97:93:8c:7f:08:3f:c7:d6:cf:ff:67:55:1a:ea:93:39:e1:
         32:0c:11:be:96:48:a7:6f:64:9d:d6:9d:df:80:93:fc:d1:bd:
         da:90:0a:95:d1:2a:40:14:17:84:06:e0:3c:2a:5b:11:e5:74:
         74:1e:b3:a1:9a:56:66:15:99:f0:d9:d5:4f:bf:79:ff:be:7f:
         10:08:82:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:04:08 2026 by rpki-client