Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/3133382e35392e3230302e302f32332d3233203d3e20323634313236.roa
File:                     3133382e35392e3230302e302f32332d3233203d3e20323634313236.roa (raw, json)
Hash identifier:          LC5WhYwuRlCoKe/AWdkLeyKJqgH4k4/mduZy8fUH33c=
Subject key identifier:   7D:19:2C:07:E5:7B:B1:AC:16:F7:06:DD:C6:70:A3:49:3F:5E:A3:E7
Certificate issuer:       /CN=2BB1FB85B5A824CE1F12E99D84943C2812338D9C
Certificate serial:       0AD762163A7866E21CE455575FC1B61608D60857
Authority key identifier: 2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/3133382e35392e3230302e302f32332d3233203d3e20323634313236.roa
Signing time:             Wed 04 Feb 2026 20:00:00 +0000
ROA not before:           Wed 04 Feb 2026 19:55:00 +0000
ROA not after:            Wed 03 Feb 2027 20:00:00 +0000
asID:                     264126
IP address blocks:        138.59.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl
                          rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 15:46:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:d7:62:16:3a:78:66:e2:1c:e4:55:57:5f:c1:b6:16:08:d6:08:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BB1FB85B5A824CE1F12E99D84943C2812338D9C
        Validity
            Not Before: Feb  4 19:55:00 2026 GMT
            Not After : Feb  3 20:00:00 2027 GMT
        Subject: CN=7D192C07E57BB1AC16F706DDC670A3493F5EA3E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e9:a6:72:5d:fb:65:3d:b7:29:ff:0b:2d:2c:
                    eb:87:53:b8:c6:6a:86:27:17:50:cd:c8:91:b8:48:
                    6f:0c:0d:9b:6a:ad:39:6c:01:46:3d:da:e4:2d:2d:
                    4f:55:68:fd:65:89:83:ee:03:2a:98:8a:fa:dd:bf:
                    9c:ab:bd:cd:1c:65:2c:6d:2e:50:29:59:66:b4:ad:
                    6c:20:15:5f:0d:30:26:80:55:5b:f4:af:d2:84:17:
                    be:70:74:70:a0:02:e7:bb:b6:2c:80:34:8a:80:d3:
                    28:5a:40:de:e6:16:73:2b:e7:3e:28:fb:9f:92:5d:
                    ef:24:29:97:82:14:2a:0e:3c:e3:76:68:73:b3:c9:
                    13:1d:33:36:47:c3:2f:9c:1f:17:70:8c:27:46:cc:
                    a1:4f:b4:62:9b:27:53:03:0f:e1:ed:6b:de:3f:c3:
                    84:58:14:34:4b:62:63:4f:31:44:5b:ba:93:24:fc:
                    be:73:3e:2d:c8:c7:dd:5b:fa:e7:f0:70:fb:91:6a:
                    76:7e:48:d5:10:48:f8:3b:7b:bf:94:ad:4c:64:7a:
                    b7:1f:22:0f:96:73:31:25:3f:38:6e:04:35:5b:88:
                    7a:3b:88:62:82:92:74:9f:d6:38:cb:06:d2:1b:9e:
                    48:cb:e6:4b:b2:cf:2e:76:89:de:66:24:10:3a:df:
                    15:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:19:2C:07:E5:7B:B1:AC:16:F7:06:DD:C6:70:A3:49:3F:5E:A3:E7
            X509v3 Authority Key Identifier:
                keyid:2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/3133382e35392e3230302e302f32332d3233203d3e20323634313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:08:11:9d:a4:59:58:10:b0:28:d9:2c:d4:03:9e:69:11:ad:
         52:5f:5d:12:00:98:88:9d:0d:b2:18:49:ee:28:93:81:02:6c:
         ce:f4:07:68:62:b1:91:81:20:75:c8:35:c8:41:c7:20:ed:4d:
         c2:cb:80:12:95:5c:c5:89:af:97:4f:35:dd:44:2a:4f:ed:17:
         e4:fa:02:81:90:0b:29:78:3c:40:fc:c2:e6:79:c4:53:26:cf:
         82:4a:0a:d3:58:06:ae:5c:6c:85:49:30:20:4b:33:85:76:0a:
         ee:7c:0c:6b:dc:be:b6:8f:a9:a9:40:67:8c:b0:d1:ab:0b:e6:
         e0:af:c7:a0:b5:9f:29:58:df:4d:6c:30:56:b2:2c:21:ee:9b:
         b9:9d:fc:40:20:ff:d5:6c:4b:31:4a:0d:09:38:da:ec:b5:b5:
         82:98:35:84:f2:d1:88:d9:3b:fa:6f:bd:ee:92:7b:f1:1c:40:
         e5:cf:a8:59:20:5f:df:67:ab:07:be:e0:4a:19:72:d2:dd:31:
         8f:48:e6:3d:11:00:25:d2:5a:e5:42:06:b9:95:68:45:dd:20:
         ef:0c:07:0a:9c:10:c0:b9:30:b5:ee:0a:7f:63:bf:3a:4e:6a:
         e2:d2:0b:9c:c5:ed:c0:fe:f8:d0:72:c0:94:17:12:e3:ee:cd:
         72:03:ca:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:05:39 2026 by rpki-client