Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/3133382e33362e34342e302f32322d3234203d3e20323634353635.roa
File:                     3133382e33362e34342e302f32322d3234203d3e20323634353635.roa (raw, json)
Hash identifier:          PaL5PuzRVfUDEYyVqNiuWp1mTRshQPvGeZsx+SntzJ0=
Subject key identifier:   84:07:93:62:6F:3A:88:54:51:41:3B:96:2D:A6:43:48:48:F4:B4:C4
Certificate issuer:       /CN=AC40A1FA2C73E550F9412754FDDAA22E993A0D26
Certificate serial:       3DDFA5B6800011641B1313679B575ADE309718B9
Authority key identifier: AC:40:A1:FA:2C:73:E5:50:F9:41:27:54:FD:DA:A2:2E:99:3A:0D:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/3133382e33362e34342e302f32322d3234203d3e20323634353635.roa
Signing time:             Fri 06 Feb 2026 00:46:40 +0000
ROA not before:           Fri 06 Feb 2026 00:41:40 +0000
ROA not after:            Fri 05 Feb 2027 00:46:40 +0000
asID:                     264565
IP address blocks:        138.36.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.crl
                          rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:df:a5:b6:80:00:11:64:1b:13:13:67:9b:57:5a:de:30:97:18:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC40A1FA2C73E550F9412754FDDAA22E993A0D26
        Validity
            Not Before: Feb  6 00:41:40 2026 GMT
            Not After : Feb  5 00:46:40 2027 GMT
        Subject: CN=840793626F3A885451413B962DA6434848F4B4C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:58:ae:ea:b6:e8:04:61:b9:76:d7:f3:32:9f:
                    56:cf:f6:8c:95:76:67:62:6e:a3:78:26:5f:ce:0b:
                    dd:fd:dd:e2:63:81:68:8b:7d:8e:25:60:31:76:f7:
                    3b:db:32:df:d4:df:45:a9:20:23:0d:d9:2e:53:41:
                    d9:e3:a1:9d:2f:7b:b9:08:b5:60:7f:94:de:e8:7e:
                    50:2d:13:eb:f7:dd:77:75:65:43:78:1b:42:5a:d2:
                    88:cf:35:97:a4:f9:2a:2b:60:7b:dc:99:85:a3:ab:
                    e6:43:ab:19:a3:e8:60:a2:51:5b:be:49:4a:35:41:
                    2b:0d:a6:d4:b2:41:85:07:d1:a0:bf:87:56:64:02:
                    b9:10:6a:b2:ba:3e:f4:a6:ad:68:94:0f:a6:e4:8e:
                    8a:2f:8c:04:e2:83:e4:84:f4:f1:a1:0a:40:dc:80:
                    66:55:dd:ba:5c:3f:86:db:60:10:f3:e9:ec:22:4a:
                    92:ee:ab:a1:61:be:d9:fe:58:dd:68:a5:07:16:4d:
                    48:53:ec:6f:df:69:ae:49:bf:4b:3e:88:28:1f:87:
                    91:23:f1:15:3b:d1:36:08:4c:0b:f4:cd:de:91:80:
                    63:2a:3d:c4:e1:ff:b4:7e:e0:f9:45:6a:01:04:1b:
                    b1:42:11:df:6f:2d:59:bc:45:cc:96:3f:11:93:40:
                    45:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:07:93:62:6F:3A:88:54:51:41:3B:96:2D:A6:43:48:48:F4:B4:C4
            X509v3 Authority Key Identifier:
                keyid:AC:40:A1:FA:2C:73:E5:50:F9:41:27:54:FD:DA:A2:2E:99:3A:0D:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/3133382e33362e34342e302f32322d3234203d3e20323634353635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:58:14:7e:c3:c6:24:cd:17:ee:0b:e6:76:12:38:f7:91:38:
         be:48:a8:80:21:46:27:b4:02:aa:c7:93:2f:3c:40:f8:09:1b:
         1a:49:d5:ca:b7:a6:c9:c6:d6:cd:23:20:d0:23:c0:e2:37:1b:
         2a:bc:31:82:87:e2:22:43:16:7a:38:07:03:7c:8a:89:6f:c8:
         02:e4:a8:b3:83:43:c1:1b:82:33:3a:c1:43:4d:80:bd:dc:6f:
         c3:51:bb:96:b9:1a:88:ec:b9:ac:06:f5:92:19:b3:67:a2:47:
         cd:60:f2:df:0e:c2:7d:4d:c9:b9:5b:18:a6:ae:03:ec:1d:67:
         2d:82:51:e8:53:40:59:fb:b6:a9:e7:75:01:9a:70:d0:84:11:
         71:73:1c:aa:16:9c:57:2e:b6:1f:8d:7c:68:78:50:6e:58:66:
         75:4a:3f:42:aa:9e:e7:43:29:21:1a:db:23:3e:a3:33:7c:1b:
         e7:aa:a1:7d:46:71:80:f1:81:8e:7d:ae:cc:5f:05:30:ca:33:
         10:c2:53:f7:87:89:f5:49:75:5a:cc:3e:8a:2d:b8:0d:14:eb:
         06:b8:68:40:f8:97:1b:9b:50:1b:33:fd:3e:bc:24:54:d4:cf:
         9d:30:5e:ad:64:93:b4:53:d1:9c:b7:8a:b5:87:e9:f7:37:cb:
         fc:e3:e1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:13:09 2026 by rpki-client