Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3133382e3235352e3139362e302f32332d3233203d3e20323632383638.roa
File:                     3133382e3235352e3139362e302f32332d3233203d3e20323632383638.roa (raw, json)
Hash identifier:          J7bIFBmYR8mBfSYnhHH4R2IoRxDUGZEmCkvXL/c5vX0=
Subject key identifier:   AE:80:3A:EC:B1:82:05:6F:A0:F4:4A:F1:BD:5D:3B:27:53:99:DC:9A
Certificate issuer:       /CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
Certificate serial:       021EEBEC9787019C53698D16238C6078F5F8508F
Authority key identifier: BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3133382e3235352e3139362e302f32332d3233203d3e20323632383638.roa
Signing time:             Thu 05 Feb 2026 11:40:34 +0000
ROA not before:           Thu 05 Feb 2026 11:35:34 +0000
ROA not after:            Thu 04 Feb 2027 11:40:34 +0000
asID:                     262868
IP address blocks:        138.255.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl
                          rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:34:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:1e:eb:ec:97:87:01:9c:53:69:8d:16:23:8c:60:78:f5:f8:50:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
        Validity
            Not Before: Feb  5 11:35:34 2026 GMT
            Not After : Feb  4 11:40:34 2027 GMT
        Subject: CN=AE803AECB182056FA0F44AF1BD5D3B275399DC9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:71:69:8c:d3:0b:fa:72:1e:96:7e:e0:b5:ba:
                    74:f4:7b:c5:7e:da:63:bd:93:0a:8e:25:4b:d3:d3:
                    d2:45:62:30:21:7a:0b:63:73:b7:a1:9f:f1:eb:59:
                    af:cc:c1:e9:59:b1:95:dd:36:ed:a7:81:c3:84:4b:
                    cd:10:b7:06:ac:9a:53:f4:34:3f:a4:86:90:04:b1:
                    e9:85:f3:d8:8a:80:21:38:ed:dc:c6:ca:69:4d:43:
                    85:b0:e6:05:da:5f:8c:af:71:b0:d7:cb:93:de:30:
                    6d:15:01:da:87:b0:d4:be:fe:7d:92:d0:e8:54:b1:
                    be:c1:8e:9f:1b:fb:24:35:f9:3e:90:ce:62:29:54:
                    37:cb:7f:6f:5c:c1:14:0e:a0:4a:a4:78:69:37:ef:
                    3a:12:60:dc:6d:8e:4a:9b:9f:70:1c:b5:5a:45:1c:
                    d6:a3:52:1a:69:e2:6d:59:8c:ee:20:a0:f5:54:8d:
                    85:63:f4:ae:ce:09:6a:72:1d:6c:77:91:11:65:04:
                    4d:55:6f:41:b9:5c:ca:5a:9d:d1:93:15:0f:5a:30:
                    d6:6f:c6:cb:a3:fb:a3:40:7b:bc:4b:c8:2e:40:6d:
                    77:ae:65:7f:b9:6d:b9:b9:36:6c:cd:9b:a4:f9:58:
                    b0:e7:58:a2:4b:39:0d:a1:ae:87:9e:3d:bd:a1:1b:
                    22:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:80:3A:EC:B1:82:05:6F:A0:F4:4A:F1:BD:5D:3B:27:53:99:DC:9A
            X509v3 Authority Key Identifier:
                keyid:BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3133382e3235352e3139362e302f32332d3233203d3e20323632383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:17:17:df:a8:b7:8f:f8:f9:ab:c8:26:e4:96:c3:f2:7f:16:
         0c:7a:df:69:8d:eb:ec:00:cb:2e:31:cc:36:33:43:d4:c3:04:
         6e:57:b0:c2:e1:c9:ac:52:d3:36:91:be:ba:d1:55:b4:2f:32:
         1d:dc:f8:73:7d:2d:78:10:8f:f1:cb:88:64:d8:ce:94:3e:84:
         7b:5e:e9:99:ed:3d:f3:6a:30:03:24:45:e8:2e:c9:56:8e:8c:
         0c:73:87:85:bf:86:7e:d5:ba:14:f3:47:16:86:6c:d8:76:d9:
         83:eb:1e:dc:be:71:57:e2:4f:65:61:cf:a2:10:0c:3e:55:a6:
         b5:bc:45:cc:4e:d3:f4:87:7d:68:67:37:4c:72:80:8a:d4:4a:
         61:3d:fb:85:77:ba:ba:c9:69:70:95:8e:05:f4:88:59:f8:4c:
         af:be:8c:d7:dd:50:b5:1e:7e:1c:78:91:c9:cb:dc:d4:7d:ec:
         ce:20:a1:c6:fa:f9:4f:89:59:85:8a:eb:67:d8:cd:81:ee:6a:
         66:63:58:70:65:cb:56:f4:d5:e9:93:94:f3:63:2c:d5:30:26:
         81:71:b3:d4:70:d6:c4:d6:0b:7c:62:35:29:a5:98:be:f0:be:
         4b:28:ba:d8:eb:ba:5b:cc:8e:ec:b0:67:c5:04:c5:8e:fe:41:
         57:db:69:b1
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUAh7r7JeHAZxTaY0WI4xgePX4UI8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkFFMkQ1NEQ2QzE3OTNCN0RDRDc3NDY5OTIxNkQzMTZF
OEM3NTM1MTAeFw0yNjAyMDUxMTM1MzRaFw0yNzAyMDQxMTQwMzRaMDMxMTAvBgNV
BAMTKEFFODAzQUVDQjE4MjA1NkZBMEY0NEFGMUJENUQzQjI3NTM5OURDOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEcWmM0wv6ch6WfuC1unT0e8V+
2mO9kwqOJUvT09JFYjAhegtjc7ehn/HrWa/MwelZsZXdNu2ngcOES80QtwasmlP0
ND+khpAEsemF89iKgCE47dzGymlNQ4Ww5gXaX4yvcbDXy5PeMG0VAdqHsNS+/n2S
0OhUsb7Bjp8b+yQ1+T6QzmIpVDfLf29cwRQOoEqkeGk37zoSYNxtjkqbn3ActVpF
HNajUhpp4m1ZjO4goPVUjYVj9K7OCWpyHWx3kRFlBE1Vb0G5XMpandGTFQ9aMNZv
xsuj+6NAe7xLyC5AbXeuZX+5bbm5NmzNm6T5WLDnWKJLOQ2hroeePb2hGyKJAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUroA67LGCBW+g9ErxvV07J1OZ3JowHwYDVR0j
BBgwFoAUuuLVTWwXk7fc13RpkhbTFujHU1EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjRUV1E4NFN3Z2k1cTg1SnQ3WGRFU0UxNlZQenZicE50dWpIVjZ5enpL
d0EvMS9CQUUyRDU0RDZDMTc5M0I3RENENzc0Njk5MjE2RDMxNkU4Qzc1MzUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBRTJENTRENkMxNzkzQjdE
Q0Q3NzQ2OTkyMTZEMzE2RThDNzUzNTEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY0VFdRODRTd2dpNXE4NUp0N1hkRVNFMTZWUHp2YnBOdHVqSFY2eXp6S3dBLzEv
MzEzMzM4MmUzMjM1MzUyZTMxMzkzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjM4MzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYr/xDANBgkqhkiG9w0BAQsFAAOCAQEAcxcX
36i3j/j5q8gm5JbD8n8WDHrfaY3r7ADLLjHMNjND1MMEblewwuHJrFLTNpG+utFV
tC8yHdz4c30teBCP8cuIZNjOlD6Ee17pme0982owAyRF6C7JVo6MDHOHhb+GftW6
FPNHFoZs2HbZg+se3L5xV+JPZWHPohAMPlWmtbxFzE7T9Id9aGc3THKAitRKYT37
hXe6uslpcJWOBfSIWfhMr76M191QtR5+HHiRycvc1H3sziChxvr5T4lZhYrrZ9jN
ge5qZmNYcGXLVvTV6ZOU82Ms1TAmgXGz1HDWxNYLfGI1KaWYvvC+Syi62Ou6W8yO
7LBnxQTFjv5BV9tpsQ==
-----END CERTIFICATE-----
Generated at Thu Feb 19 23:06:02 2026 by rpki-client