Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/1/3133382e3235352e3132382e302f32322d3234203d3e20323633393732.roa
File:                     3133382e3235352e3132382e302f32322d3234203d3e20323633393732.roa (raw, json)
Hash identifier:          4S9KAJ/asXOSVLYDBS9UU6azhogTakzEiTbFXAFmkbM=
Subject key identifier:   C4:EE:24:0E:E8:89:3A:F3:0E:02:52:9A:D0:17:A0:8E:66:3D:D9:B4
Certificate issuer:       /CN=B20E3C8281FB009A48EDFE56131C930D739F11C4
Certificate serial:       7A1D22C206033C9EA0D2E9B4AF205DCBBA834564
Authority key identifier: B2:0E:3C:82:81:FB:00:9A:48:ED:FE:56:13:1C:93:0D:73:9F:11:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/1/3133382e3235352e3132382e302f32322d3234203d3e20323633393732.roa
Signing time:             Thu 05 Feb 2026 02:50:44 +0000
ROA not before:           Thu 05 Feb 2026 02:45:44 +0000
ROA not after:            Thu 04 Feb 2027 02:50:44 +0000
asID:                     263972
IP address blocks:        138.255.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.crl
                          rsync://rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:56:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:1d:22:c2:06:03:3c:9e:a0:d2:e9:b4:af:20:5d:cb:ba:83:45:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B20E3C8281FB009A48EDFE56131C930D739F11C4
        Validity
            Not Before: Feb  5 02:45:44 2026 GMT
            Not After : Feb  4 02:50:44 2027 GMT
        Subject: CN=C4EE240EE8893AF30E02529AD017A08E663DD9B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:25:50:17:14:13:3a:30:85:57:38:f2:92:51:
                    20:87:c4:5b:a7:a3:7f:24:70:5d:42:9f:de:16:10:
                    4b:71:3d:e3:f7:af:e9:20:ae:c5:c0:6e:fd:9c:cb:
                    fa:22:07:fc:01:d4:09:14:c4:2c:c1:3b:9a:2c:e4:
                    39:17:b5:91:1c:4d:08:55:e6:40:47:64:bf:44:2e:
                    fe:85:e4:36:dd:c6:7d:60:d4:20:ea:59:37:0b:9d:
                    2e:1f:29:3c:0d:0c:be:0d:b6:7a:2d:77:07:26:f6:
                    ca:49:df:f1:47:3f:34:1e:e5:db:ef:5b:8b:b6:f9:
                    52:05:50:00:60:e3:9d:59:9d:57:56:8d:10:4a:f8:
                    7c:bf:10:b2:5f:9c:50:08:e7:4c:d2:b1:9f:44:ae:
                    2c:d0:c0:b6:2f:c0:6f:17:e1:33:72:56:94:88:52:
                    a5:5f:f3:e1:19:f8:11:10:e2:11:de:26:ae:b0:cd:
                    db:e7:3b:3b:0c:d6:82:ee:3b:1b:b9:f9:10:24:4b:
                    21:8e:92:a3:1b:c8:97:d9:c9:d8:cf:27:ae:58:2a:
                    8c:5f:22:e2:fe:05:11:1e:f0:a1:cc:6a:bb:1a:55:
                    69:3a:99:3f:df:06:39:ca:96:7b:0a:63:e6:f4:99:
                    80:13:ec:fc:fa:5c:a6:2a:79:61:6d:5c:68:15:b7:
                    14:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:EE:24:0E:E8:89:3A:F3:0E:02:52:9A:D0:17:A0:8E:66:3D:D9:B4
            X509v3 Authority Key Identifier:
                keyid:B2:0E:3C:82:81:FB:00:9A:48:ED:FE:56:13:1C:93:0D:73:9F:11:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/1/3133382e3235352e3132382e302f32322d3234203d3e20323633393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:1f:06:3f:ce:9a:c5:97:55:d9:50:65:72:53:4c:80:3a:dd:
         c2:b8:a1:df:70:ed:e0:b2:a5:31:c6:e5:f1:f5:52:9b:7c:78:
         51:9d:63:d4:6c:aa:be:5d:32:99:24:07:68:ef:cb:2f:d7:b6:
         28:3a:0d:57:bf:1b:c2:ce:fb:37:67:3d:6c:c0:9b:af:97:7c:
         f7:4f:a5:30:b5:4a:4a:13:e5:d2:4d:08:5b:c7:b8:34:55:f7:
         77:db:b3:b5:0c:e6:17:2b:d9:bc:8f:03:91:e5:88:39:38:4b:
         05:23:04:a4:d1:00:6f:3f:07:a5:da:e3:d8:86:bb:d5:5b:d2:
         69:46:b2:fe:b0:13:5e:c9:aa:94:bb:8a:3c:a7:72:93:9f:dd:
         cb:63:05:70:40:b9:5f:af:97:ac:1a:9f:db:d3:24:55:89:23:
         b9:ec:99:66:51:2a:60:98:4c:cc:9e:f9:07:b9:47:bf:d9:63:
         d8:b8:80:e1:79:bd:73:9a:14:33:b9:9d:9d:a1:d3:6b:a2:fb:
         d0:09:4f:a5:bd:e4:21:da:54:b8:13:e7:73:07:13:3a:e1:2d:
         03:f5:3f:ce:a9:ed:5d:a9:b1:c3:a6:7e:70:ea:2a:c1:7d:bb:
         da:73:0f:c0:46:fc:77:4a:08:dc:f7:2d:3a:aa:7a:3e:6d:51:
         4c:f0:18:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 14:23:30 2026 by rpki-client