Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/3133382e35392e3230302e302f32322d3232203d3e20323634313236.roa
File:                     3133382e35392e3230302e302f32322d3232203d3e20323634313236.roa (raw, json)
Hash identifier:          KD2sUINvey2RZUbWiynu9D1f8dcwlTd0sk0Iaaix2mw=
Subject key identifier:   BF:0C:9B:B2:91:41:72:78:BE:81:61:30:43:6D:32:6B:4B:50:93:D6
Certificate issuer:       /CN=2BB1FB85B5A824CE1F12E99D84943C2812338D9C
Certificate serial:       470EE2FC55EFBFF858F2AD57997D6AD6109F9453
Authority key identifier: 2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/3133382e35392e3230302e302f32322d3232203d3e20323634313236.roa
Signing time:             Wed 04 Feb 2026 19:00:00 +0000
ROA not before:           Wed 04 Feb 2026 18:55:00 +0000
ROA not after:            Wed 03 Feb 2027 19:00:00 +0000
asID:                     264126
IP address blocks:        138.59.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl
                          rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 15:46:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:0e:e2:fc:55:ef:bf:f8:58:f2:ad:57:99:7d:6a:d6:10:9f:94:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BB1FB85B5A824CE1F12E99D84943C2812338D9C
        Validity
            Not Before: Feb  4 18:55:00 2026 GMT
            Not After : Feb  3 19:00:00 2027 GMT
        Subject: CN=BF0C9BB291417278BE816130436D326B4B5093D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f3:f2:e6:da:3b:e8:c5:a5:3e:c4:36:b6:d8:
                    9c:dc:91:ac:91:6e:d5:c1:50:30:8e:dc:72:60:69:
                    4e:fd:35:40:53:b4:57:e7:36:47:05:b8:0a:db:21:
                    12:13:0c:be:22:1c:fa:db:c3:14:67:14:1d:ca:11:
                    1f:e0:17:ac:91:ed:7e:df:03:63:c5:82:2f:3c:7f:
                    5a:d4:1f:b7:dd:3f:b0:ef:b6:2f:31:a6:20:f5:ea:
                    0b:a4:c3:20:22:93:20:3f:2d:97:dd:13:47:51:24:
                    a0:43:e8:f4:75:67:9a:09:82:5e:7b:be:5c:38:86:
                    ae:e2:1e:45:c0:74:a9:d8:4b:27:46:a0:f1:c2:48:
                    75:0c:6d:c4:1a:47:2b:74:1d:eb:e8:27:12:bd:54:
                    88:e5:38:39:d5:ba:0b:3b:30:5d:7e:02:d1:21:dd:
                    6d:56:c7:8f:81:d3:51:61:50:e3:f2:ac:9a:7b:9c:
                    c3:2e:f2:d3:c8:66:74:ea:bc:3d:77:60:09:bd:a8:
                    d3:6b:55:32:25:b0:0c:52:71:58:03:b6:35:d4:44:
                    40:a2:5a:d1:7f:29:37:5c:e7:ea:b7:c3:3a:b4:49:
                    04:60:62:c1:8b:bb:e0:2c:f8:31:8e:2d:46:d9:2f:
                    3b:b9:e7:a1:93:85:08:e2:72:9a:04:ad:d5:48:e6:
                    54:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:0C:9B:B2:91:41:72:78:BE:81:61:30:43:6D:32:6B:4B:50:93:D6
            X509v3 Authority Key Identifier:
                keyid:2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/3133382e35392e3230302e302f32322d3232203d3e20323634313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:c2:04:3e:39:21:d5:ad:c1:ad:0c:17:a0:e5:65:78:4d:89:
         3e:42:cc:5a:9d:1a:c6:74:63:98:bc:24:49:cd:5c:32:f3:35:
         71:7c:20:31:a4:b8:1d:f5:eb:22:69:78:4c:45:4e:28:bd:99:
         4e:85:2a:fe:80:4c:43:7d:e6:b7:9f:10:5a:95:af:36:a8:b9:
         61:22:9e:2e:0e:cf:32:d2:b9:5f:ad:af:a6:bc:60:6e:8c:f6:
         ac:80:78:e6:83:63:44:41:3e:f3:89:a3:c2:9b:75:40:f5:e1:
         a9:b6:83:10:b7:1f:2d:57:46:7e:58:40:1a:c6:5c:e9:04:f6:
         34:0b:2e:13:0e:41:63:3a:ce:e0:44:6b:b6:05:8e:fa:3d:77:
         c2:92:0d:f3:da:6d:d8:93:1a:a1:e9:2f:ea:b8:7b:38:c9:83:
         0f:bf:30:39:6d:e1:48:95:72:de:e8:a1:fe:7d:5c:9b:b8:35:
         4b:b1:3e:a6:3e:4b:36:c5:1e:e9:f9:41:de:60:c2:a0:de:2c:
         62:61:fa:7d:c0:67:52:09:12:05:33:e6:bc:66:be:7a:b9:0e:
         46:93:f6:42:8d:a1:0a:74:20:59:e9:b1:6c:28:b7:00:60:e7:
         35:78:0b:0a:62:e6:3a:85:0f:51:a3:bb:44:c3:f9:27:59:74:
         6b:e4:f5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 05:54:19 2026 by rpki-client