Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/3133382e39372e35322e302f32322d3234203d3e20323634313238.roa
File:                     3133382e39372e35322e302f32322d3234203d3e20323634313238.roa (raw, json)
Hash identifier:          nSQNjQwVB8iBnalNXbKKxbT0i9o6g0PxO6Fw6OT3mHI=
Subject key identifier:   96:19:F9:3E:CF:C2:21:7C:E9:1B:96:3F:EE:ED:A7:CC:0E:8A:67:B7
Certificate issuer:       /CN=E3C11484C8B4CD3F766170F9E324672A733D9604
Certificate serial:       736B435EF02550BE5D09DED9FB93C0FEC4C744A8
Authority key identifier: E3:C1:14:84:C8:B4:CD:3F:76:61:70:F9:E3:24:67:2A:73:3D:96:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3C11484C8B4CD3F766170F9E324672A733D9604.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/3133382e39372e35322e302f32322d3234203d3e20323634313238.roa
Signing time:             Thu 05 Feb 2026 10:55:13 +0000
ROA not before:           Thu 05 Feb 2026 10:50:13 +0000
ROA not after:            Thu 04 Feb 2027 10:55:13 +0000
asID:                     264128
IP address blocks:        138.97.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/E3C11484C8B4CD3F766170F9E324672A733D9604.crl
                          rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/E3C11484C8B4CD3F766170F9E324672A733D9604.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3C11484C8B4CD3F766170F9E324672A733D9604.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 02:55:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:6b:43:5e:f0:25:50:be:5d:09:de:d9:fb:93:c0:fe:c4:c7:44:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3C11484C8B4CD3F766170F9E324672A733D9604
        Validity
            Not Before: Feb  5 10:50:13 2026 GMT
            Not After : Feb  4 10:55:13 2027 GMT
        Subject: CN=9619F93ECFC2217CE91B963FEEEDA7CC0E8A67B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:bd:c4:26:15:16:66:1b:05:5e:52:ed:08:25:
                    b3:a7:a8:88:56:81:c9:c3:f6:2f:d7:74:e3:e4:b9:
                    cc:c5:e1:00:63:96:d1:48:d6:7f:34:64:d3:aa:de:
                    06:5d:6a:63:ac:e4:16:c1:a5:b8:a7:7a:87:70:d5:
                    a2:9e:d5:ef:16:45:36:35:e9:29:96:83:fa:e3:85:
                    65:34:de:88:61:39:14:bc:36:18:55:e8:8e:d9:08:
                    7a:0b:37:af:67:b7:77:f1:de:62:d4:9a:15:52:ce:
                    23:b2:ca:26:d5:63:18:cb:64:05:61:f2:65:0f:6b:
                    78:0d:07:d2:1a:83:0d:6d:6a:71:25:af:26:67:c5:
                    ae:b1:54:c3:cd:f4:59:84:13:bc:e8:60:71:73:e3:
                    a4:23:e5:fb:52:a9:27:d3:b4:a1:70:01:89:3b:48:
                    f7:52:b8:1f:9a:af:15:fa:14:a8:2f:65:7c:b7:9b:
                    fa:96:2c:8b:63:76:96:ab:a2:a3:b0:33:2c:dd:9c:
                    88:61:fd:43:32:15:90:e5:d6:b2:71:0d:8c:cb:34:
                    2e:20:74:72:30:98:4a:09:dd:ed:c9:ca:ff:28:a5:
                    4d:40:e0:10:e0:ff:6e:b2:8f:d5:2f:dc:e1:9c:61:
                    3f:8d:68:d1:21:78:a6:12:c2:34:f1:72:82:aa:a5:
                    d9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:19:F9:3E:CF:C2:21:7C:E9:1B:96:3F:EE:ED:A7:CC:0E:8A:67:B7
            X509v3 Authority Key Identifier:
                keyid:E3:C1:14:84:C8:B4:CD:3F:76:61:70:F9:E3:24:67:2A:73:3D:96:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/E3C11484C8B4CD3F766170F9E324672A733D9604.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3C11484C8B4CD3F766170F9E324672A733D9604.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/3133382e39372e35322e302f32322d3234203d3e20323634313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:ae:59:de:78:9d:c4:cd:8b:0a:40:99:e3:4d:e1:80:fa:22:
         12:00:53:0e:92:20:dc:2e:85:3c:af:4e:96:eb:22:51:3c:b8:
         d1:cc:88:6b:fc:ed:05:c6:31:4e:46:03:42:61:2e:af:d8:a9:
         39:a7:04:37:70:63:3c:d0:2a:8f:60:ab:57:01:6e:7c:8e:0f:
         85:be:21:3e:ce:5f:a6:61:ca:ee:03:57:e5:c6:a6:ba:7e:ef:
         63:c4:fb:ff:89:cf:72:73:bb:53:87:09:ea:24:c8:39:c3:56:
         64:ae:19:9d:58:93:41:fd:25:30:cf:a9:04:36:fd:9c:a8:c8:
         b2:70:2b:4e:fb:8a:d2:5b:11:07:f1:f9:db:44:7e:4c:eb:72:
         92:1c:fc:9a:fb:c2:98:9b:04:da:ca:06:9d:d0:52:d3:b2:16:
         36:8a:5b:e6:41:0c:3b:9b:97:1d:24:63:fd:31:28:71:4b:7e:
         09:c0:3a:69:d4:b4:10:2c:e6:9c:d6:e5:2b:c2:a0:aa:d9:00:
         aa:59:7c:8c:f5:2e:8a:8b:73:70:a8:a6:28:a4:40:14:65:41:
         1a:1b:d4:ec:c0:54:19:96:33:fa:47:63:f2:86:b9:b7:20:af:
         e6:d5:8d:5e:fc:22:7c:5e:95:ec:3f:87:40:c7:d9:9c:0e:64:
         e0:2b:cf:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:28:49 2026 by rpki-client