Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3133382e3132322e37322e302f32322d3232203d3e20323633323633.roa
File:                     3133382e3132322e37322e302f32322d3232203d3e20323633323633.roa (raw, json)
Hash identifier:          +HEW2lqTu7BlE/xVzki71pHaKYC5Q1TpVykHfCmtIfE=
Subject key identifier:   CF:42:32:4F:8B:A7:C8:DD:06:88:B9:A7:28:B2:64:C4:CC:A0:86:A1
Certificate issuer:       /CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
Certificate serial:       43ECDAB0094B5614B4389885F908E55892F3026A
Authority key identifier: CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3133382e3132322e37322e302f32322d3232203d3e20323633323633.roa
Signing time:             Thu 05 Feb 2026 08:29:28 +0000
ROA not before:           Thu 05 Feb 2026 08:24:28 +0000
ROA not after:            Thu 04 Feb 2027 08:29:28 +0000
asID:                     263263
IP address blocks:        138.122.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.crl
                          rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 15:37:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ec:da:b0:09:4b:56:14:b4:38:98:85:f9:08:e5:58:92:f3:02:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
        Validity
            Not Before: Feb  5 08:24:28 2026 GMT
            Not After : Feb  4 08:29:28 2027 GMT
        Subject: CN=CF42324F8BA7C8DD0688B9A728B264C4CCA086A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:df:df:10:f3:45:a1:2e:aa:57:ca:e1:88:c2:
                    06:9a:a6:8f:37:c2:7f:89:15:d2:d2:8e:cd:06:29:
                    38:be:c1:f6:bd:39:bd:f2:86:96:a2:39:ee:2b:07:
                    99:fd:59:38:5b:01:87:37:55:b1:74:b2:01:44:be:
                    e3:fa:b8:5e:dc:77:44:fa:16:5e:af:1c:46:a7:07:
                    ec:a0:5f:7a:b0:13:51:43:7e:6d:1d:8c:46:d0:18:
                    2b:ad:f5:42:fb:55:44:16:c9:02:4a:b8:2c:54:a5:
                    74:72:f3:a9:9f:0e:39:6e:19:c7:60:cd:78:a5:7d:
                    2d:44:a3:16:aa:d1:63:c3:ff:88:84:fb:76:ad:dc:
                    74:0b:09:83:09:ad:03:b1:65:95:fc:91:39:7c:ec:
                    b3:e0:74:98:ad:37:87:f5:4e:a1:32:ae:e1:40:1e:
                    9e:fe:a9:17:82:fc:fe:17:e1:32:9d:12:48:15:d2:
                    f3:17:d9:bd:1d:29:3f:54:4f:b7:11:18:8f:a1:6a:
                    37:c1:b5:da:61:b5:3d:36:46:0a:ae:5d:c3:9a:70:
                    3f:f8:69:4d:09:27:b5:26:35:b3:41:bd:45:84:25:
                    c9:ad:c0:f3:f6:1f:d8:90:08:c9:f7:53:ab:c0:14:
                    e5:3d:a2:1e:fa:8f:6a:7f:f8:89:c5:9e:3c:03:bd:
                    09:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:42:32:4F:8B:A7:C8:DD:06:88:B9:A7:28:B2:64:C4:CC:A0:86:A1
            X509v3 Authority Key Identifier:
                keyid:CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3133382e3132322e37322e302f32322d3232203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:1a:bd:eb:d8:5c:10:6e:86:54:02:6b:09:8c:88:9f:1f:25:
         1a:6f:82:c7:3a:07:ea:c3:30:46:47:3b:4d:38:f3:e1:d1:7c:
         77:ab:12:80:59:f9:9f:5a:db:fb:b3:57:35:6a:8b:05:f3:78:
         4d:17:b5:60:44:3d:02:b7:a0:00:0d:5a:a4:9c:b4:08:ca:ee:
         07:9f:89:79:de:e5:25:37:1a:e3:68:7c:cf:3d:22:69:22:ae:
         04:58:3e:76:4c:ce:37:70:f9:e9:12:18:10:d7:db:a5:e4:d4:
         20:70:ec:4b:62:30:8d:cc:98:82:43:7c:9d:68:1f:46:a6:1c:
         7d:40:f8:57:a3:82:cf:8b:5e:09:ff:c1:1b:dd:cc:1c:89:3a:
         45:aa:3a:fa:35:bd:7e:45:72:52:87:25:9d:0c:4e:44:bd:5c:
         53:cb:6e:5e:bf:91:99:e1:31:31:35:8c:f4:8b:35:41:95:6a:
         a7:3d:f0:43:1f:2b:17:6e:6c:6f:65:16:da:3a:02:c9:e5:8e:
         a6:f7:7c:fe:73:3c:f9:6e:50:d5:34:8f:7a:6a:fc:60:24:1f:
         26:73:5b:9e:a6:74:4a:8d:05:81:9a:16:34:55:2b:d5:ca:0f:
         75:33:ce:5e:0d:69:f0:79:b8:43:5f:fe:ac:42:2b:d9:a1:ec:
         90:3a:da:fb
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQ+zasAlLVhS0OJiF+QjlWJLzAmowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0UyRDFCQzhCMjY3MzVFOTA2OEU4ODMzMzIwQTlGREVC
MDRFNjlDRDAeFw0yNjAyMDUwODI0MjhaFw0yNzAyMDQwODI5MjhaMDMxMTAvBgNV
BAMTKENGNDIzMjRGOEJBN0M4REQwNjg4QjlBNzI4QjI2NEM0Q0NBMDg2QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx398Q80WhLqpXyuGIwgaapo83
wn+JFdLSjs0GKTi+wfa9Ob3yhpaiOe4rB5n9WThbAYc3VbF0sgFEvuP6uF7cd0T6
Fl6vHEanB+ygX3qwE1FDfm0djEbQGCut9UL7VUQWyQJKuCxUpXRy86mfDjluGcdg
zXilfS1Eoxaq0WPD/4iE+3at3HQLCYMJrQOxZZX8kTl87LPgdJitN4f1TqEyruFA
Hp7+qReC/P4X4TKdEkgV0vMX2b0dKT9UT7cRGI+hajfBtdphtT02RgquXcOacD/4
aU0JJ7UmNbNBvUWEJcmtwPP2H9iQCMn3U6vAFOU9oh76j2p/+InFnjwDvQnlAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUz0IyT4unyN0GiLmnKLJkxMyghqEwHwYDVR0j
BBgwFoAUzi0byLJnNekGjogzMgqf3rBOac0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDVDVEZuOHdudTRveXNqWUozTFNRZHRLOFBIbnhObTVtRDRWSFl2SDlD
aUQvMS9DRTJEMUJDOEIyNjczNUU5MDY4RTg4MzMzMjBBOUZERUIwNEU2OUNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFMkQxQkM4QjI2NzM1RTkw
NjhFODgzMzMyMEE5RkRFQjA0RTY5Q0QuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ1Q1RGbjh3bnU0b3lzallKM0xTUWR0SzhQSG54Tm01bUQ0VkhZdkg5Q2lELzEv
MzEzMzM4MmUzMTMyMzIyZTM3MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzMzMjM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKekgwDQYJKoZIhvcNAQELBQADggEBADYavevY
XBBuhlQCawmMiJ8fJRpvgsc6B+rDMEZHO0048+HRfHerEoBZ+Z9a2/uzVzVqiwXz
eE0XtWBEPQK3oAANWqSctAjK7gefiXne5SU3GuNofM89ImkirgRYPnZMzjdw+ekS
GBDX26Xk1CBw7EtiMI3MmIJDfJ1oH0amHH1A+Fejgs+LXgn/wRvdzByJOkWqOvo1
vX5FclKHJZ0MTkS9XFPLbl6/kZnhMTE1jPSLNUGVaqc98EMfKxdubG9lFto6Asnl
jqb3fP5zPPluUNU0j3pq/GAkHyZzW56mdEqNBYGaFjRVK9XKD3Uzzl4NafB5uENf
/qxCK9mh7JA62vs=
-----END CERTIFICATE-----
Generated at Thu Feb 19 20:39:58 2026 by rpki-client