Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/3133382e35392e3230332e302f32342d3234203d3e20323634313236.roa
File:                     3133382e35392e3230332e302f32342d3234203d3e20323634313236.roa (raw, json)
Hash identifier:          S+v8vzphhtZY7xjginNwf3t+wP+EJBriE6bKYdq9edI=
Subject key identifier:   ED:63:AF:A9:1F:D1:FB:A1:1A:B7:AD:DB:D2:10:65:83:95:54:C5:68
Certificate issuer:       /CN=2BB1FB85B5A824CE1F12E99D84943C2812338D9C
Certificate serial:       7CF815552AB1253087ABB8D4D736CB5ECDD6146A
Authority key identifier: 2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/3133382e35392e3230332e302f32342d3234203d3e20323634313236.roa
Signing time:             Wed 04 Feb 2026 20:00:00 +0000
ROA not before:           Wed 04 Feb 2026 19:55:00 +0000
ROA not after:            Wed 03 Feb 2027 20:00:00 +0000
asID:                     264126
IP address blocks:        138.59.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl
                          rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 15:46:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:f8:15:55:2a:b1:25:30:87:ab:b8:d4:d7:36:cb:5e:cd:d6:14:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BB1FB85B5A824CE1F12E99D84943C2812338D9C
        Validity
            Not Before: Feb  4 19:55:00 2026 GMT
            Not After : Feb  3 20:00:00 2027 GMT
        Subject: CN=ED63AFA91FD1FBA11AB7ADDBD21065839554C568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c7:0b:17:a4:03:30:69:a7:de:64:87:f6:87:
                    5f:d4:f5:ff:10:5a:32:04:b2:42:49:ed:83:7a:28:
                    2c:4b:9d:d5:cc:96:1a:56:db:22:ce:ba:af:0d:56:
                    fb:f1:e7:72:26:78:37:f9:43:3e:17:cb:90:2a:df:
                    89:bc:07:c7:3e:0e:7b:10:73:be:ff:f7:95:40:da:
                    04:4e:78:f4:49:d4:df:3b:da:a6:e7:f0:c6:e4:30:
                    f8:be:35:43:f9:ac:59:38:13:af:eb:48:35:07:bb:
                    ed:e3:aa:f5:3c:5c:74:02:24:ee:c8:a4:54:50:0b:
                    88:c8:be:79:3b:9d:d9:8f:9e:f8:31:21:c7:c8:04:
                    55:6f:48:e4:0a:37:76:93:c8:c7:62:8b:5a:db:2e:
                    b6:f0:2f:ec:ba:8c:a3:a8:ed:2a:8e:d4:05:fe:87:
                    b0:e4:1b:1a:80:75:b3:c1:ee:fe:f6:d5:4b:44:fc:
                    ea:08:a4:37:ba:3c:54:ae:4e:0d:3a:66:b8:69:55:
                    00:52:4d:ba:5a:ac:0a:b1:8c:7c:ca:82:cc:6d:fd:
                    40:c8:ab:d3:d8:ca:df:06:7b:51:61:28:60:62:a8:
                    a4:cb:8a:f4:eb:c3:7d:27:d6:e1:c6:b3:e5:9c:ae:
                    f5:75:d0:dc:29:d7:7b:25:45:05:dd:0d:1b:84:76:
                    87:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:63:AF:A9:1F:D1:FB:A1:1A:B7:AD:DB:D2:10:65:83:95:54:C5:68
            X509v3 Authority Key Identifier:
                keyid:2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/3133382e35392e3230332e302f32342d3234203d3e20323634313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:bf:bc:f1:d5:c2:ef:f6:97:29:72:33:b9:7d:6f:7d:85:19:
         82:ea:a9:a6:ea:29:97:da:5f:38:38:e8:04:e5:5a:91:c2:91:
         ce:68:6d:3a:f5:fc:81:3d:85:11:0d:10:9e:14:9e:be:f1:db:
         6f:b8:25:cd:01:ff:d4:2b:a5:02:12:cb:0c:a0:d9:c7:d7:19:
         89:5b:e3:d8:23:35:4d:e7:b7:bc:5e:6e:68:0e:2a:10:3c:91:
         8d:04:8a:3f:96:4d:5e:5f:41:ab:13:29:95:62:53:dc:2f:29:
         bb:78:8a:4d:eb:f1:93:8b:36:84:ae:f6:e7:98:d4:59:45:a1:
         57:0d:f9:7f:87:7e:e0:ef:37:ef:c8:df:20:24:bd:94:9c:09:
         f5:73:d2:ec:b3:b7:eb:af:49:5b:20:69:82:f1:47:c7:71:be:
         6f:7a:e2:1a:78:87:c4:fa:60:ed:c1:bd:21:81:f1:25:84:3b:
         5e:93:b4:84:8b:f5:03:bb:9f:91:5e:40:d5:9b:03:0b:b8:ec:
         2e:a8:75:94:0d:10:39:12:b2:e8:54:27:7d:d1:e4:69:fc:16:
         7d:77:98:ac:12:43:2b:69:f8:81:88:9b:05:c9:76:90:9c:85:
         40:be:0f:d3:ff:38:49:ef:ac:12:73:65:76:f1:75:d7:67:30:
         13:90:f9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:06:38 2026 by rpki-client