Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/3133382e3230342e33372e302f32342d3332203d3e203631373735.roa
File:                     3133382e3230342e33372e302f32342d3332203d3e203631373735.roa (raw, json)
Hash identifier:          UpP12LnX8V9yOeNpWAhngLI5xTreMtmtTfodbgcvkaQ=
Subject key identifier:   40:24:94:AB:EE:48:52:33:8D:32:6D:FD:A3:AD:17:00:D2:EE:17:8F
Certificate issuer:       /CN=2A4DF9097F97664A00A318EFAE22DC1036E91B5C
Certificate serial:       18F8CC83EFF6A8BC9893DC950990D75FDB82FC15
Authority key identifier: 2A:4D:F9:09:7F:97:66:4A:00:A3:18:EF:AE:22:DC:10:36:E9:1B:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/3133382e3230342e33372e302f32342d3332203d3e203631373735.roa
Signing time:             Thu 05 Feb 2026 22:00:29 +0000
ROA not before:           Thu 05 Feb 2026 21:55:29 +0000
ROA not after:            Thu 04 Feb 2027 22:00:29 +0000
asID:                     61775
IP address blocks:        138.204.37.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.crl
                          rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 11:41:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:f8:cc:83:ef:f6:a8:bc:98:93:dc:95:09:90:d7:5f:db:82:fc:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A4DF9097F97664A00A318EFAE22DC1036E91B5C
        Validity
            Not Before: Feb  5 21:55:29 2026 GMT
            Not After : Feb  4 22:00:29 2027 GMT
        Subject: CN=402494ABEE4852338D326DFDA3AD1700D2EE178F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b8:9a:40:97:5b:cf:4c:42:a9:b1:5a:ce:9a:
                    e9:a6:b5:8e:ef:0b:ca:a0:cd:fb:20:7d:6a:6e:02:
                    a6:13:b5:ec:22:9e:81:13:76:14:09:11:dd:2e:ef:
                    6d:33:4b:35:9e:e3:2b:79:9a:c8:3f:8b:11:46:12:
                    3c:e6:db:53:ed:6a:a2:be:a9:0f:9c:0e:2b:57:d8:
                    fe:39:cb:3d:57:8e:d3:90:4e:a2:ae:c9:9d:57:b4:
                    f0:54:9e:f6:94:74:ba:2e:c9:f5:c6:70:13:42:6e:
                    f8:57:76:75:ce:42:0a:5d:92:c4:6a:5f:ea:0f:31:
                    9f:03:fc:f3:f9:48:0b:0e:65:d5:f6:6b:2c:1d:a3:
                    69:89:b3:25:10:12:85:fc:53:7f:2f:69:a1:c7:65:
                    e7:e9:ae:fc:93:90:4d:a5:6e:80:b8:99:da:8f:61:
                    68:7f:00:d2:3e:1a:f2:f6:db:8b:b7:00:d5:cf:e3:
                    9f:cb:16:f4:5c:1f:62:97:1d:2d:26:33:6e:fe:b8:
                    bc:a5:06:73:d2:d0:e7:a8:ce:6f:05:bd:61:b9:92:
                    a7:ab:ca:02:a7:75:28:48:66:8b:27:7e:70:a4:3a:
                    b4:ce:03:60:e4:5a:09:85:0f:5b:cd:2e:60:cb:a4:
                    b3:e3:b6:46:eb:d2:d9:02:10:69:b8:11:44:1c:22:
                    dc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:24:94:AB:EE:48:52:33:8D:32:6D:FD:A3:AD:17:00:D2:EE:17:8F
            X509v3 Authority Key Identifier:
                keyid:2A:4D:F9:09:7F:97:66:4A:00:A3:18:EF:AE:22:DC:10:36:E9:1B:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/3133382e3230342e33372e302f32342d3332203d3e203631373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:a3:52:d5:8c:06:41:b7:e2:52:3d:c9:a9:8f:d7:0e:22:5a:
         f7:57:cc:fe:b5:56:b1:2e:6e:7a:0a:21:62:bf:8e:5b:f7:77:
         d1:fa:94:92:f1:96:38:4e:e7:bc:50:01:c1:c5:29:51:6d:09:
         ff:2e:2b:45:39:ef:af:bf:78:cc:46:b8:04:cb:67:ad:3e:fa:
         13:51:e7:70:c0:b1:42:23:43:82:94:57:2f:51:26:f1:ed:3f:
         25:79:22:92:49:d5:8c:66:18:e2:11:ea:52:fe:08:c5:1e:ee:
         a1:be:4d:ef:fd:66:ad:b0:cd:36:c9:a4:c5:40:5a:fd:68:cf:
         fb:98:a7:bb:77:b6:ff:6a:04:4b:ea:f1:8e:9e:5d:8f:7e:f7:
         fd:7e:e7:f0:eb:12:36:ef:e0:6c:63:bd:86:6a:92:f5:12:5b:
         4f:6f:82:6b:c5:5f:ce:bd:04:0c:0d:de:c5:79:48:d7:2f:1f:
         53:b9:b3:83:37:c9:90:10:3a:d2:0d:4a:f9:04:d0:bb:81:f3:
         90:7a:ea:93:05:ae:8f:7b:10:df:1c:dc:53:10:c9:ce:b1:07:
         86:dc:39:84:4f:1f:f4:68:b6:eb:e5:68:24:e4:1b:3f:85:42:
         61:06:59:17:ae:71:96:85:a1:77:b9:92:b9:58:ae:cb:7b:77:
         1d:b1:09:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:02:32 2026 by rpki-client