Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6etm44QjWrR5EfTWAV3qzNSnqZHTSM9JM6c27XkWkag1/1/3133382e39392e37362e302f32322d3234203d3e20323634313537.roa
File:                     3133382e39392e37362e302f32322d3234203d3e20323634313537.roa (raw, json)
Hash identifier:          D115guBQYlKSFU9rLLmIucl8oNwdZjXpBXf1BIyU/Bk=
Subject key identifier:   BC:99:D8:26:7F:9D:F2:F5:4C:05:38:97:DD:D9:34:A9:07:E3:7F:93
Certificate issuer:       /CN=8E9DBEB91BAD24BEDB971D083305707C8D38F623
Certificate serial:       2347415221727CE72A8BD38A447B0726A4AFA54F
Authority key identifier: 8E:9D:BE:B9:1B:AD:24:BE:DB:97:1D:08:33:05:70:7C:8D:38:F6:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E9DBEB91BAD24BEDB971D083305707C8D38F623.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6etm44QjWrR5EfTWAV3qzNSnqZHTSM9JM6c27XkWkag1/1/3133382e39392e37362e302f32322d3234203d3e20323634313537.roa
Signing time:             Thu 05 Feb 2026 14:05:43 +0000
ROA not before:           Thu 05 Feb 2026 14:00:43 +0000
ROA not after:            Thu 04 Feb 2027 14:05:43 +0000
asID:                     264157
IP address blocks:        138.99.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6etm44QjWrR5EfTWAV3qzNSnqZHTSM9JM6c27XkWkag1/1/8E9DBEB91BAD24BEDB971D083305707C8D38F623.crl
                          rsync://rpki-repo.registro.br/repo/6etm44QjWrR5EfTWAV3qzNSnqZHTSM9JM6c27XkWkag1/1/8E9DBEB91BAD24BEDB971D083305707C8D38F623.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E9DBEB91BAD24BEDB971D083305707C8D38F623.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 05:30:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:47:41:52:21:72:7c:e7:2a:8b:d3:8a:44:7b:07:26:a4:af:a5:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9DBEB91BAD24BEDB971D083305707C8D38F623
        Validity
            Not Before: Feb  5 14:00:43 2026 GMT
            Not After : Feb  4 14:05:43 2027 GMT
        Subject: CN=BC99D8267F9DF2F54C053897DDD934A907E37F93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3f:3c:b1:af:cc:55:fc:09:90:e8:97:68:67:
                    61:70:77:f2:9a:0f:dd:fa:ff:f8:c5:0f:95:8e:c4:
                    74:f2:f9:23:87:c0:af:17:2e:12:39:31:21:56:10:
                    e6:06:3c:19:53:39:ed:0d:dd:f6:0a:5c:fb:0d:c8:
                    5f:3e:13:50:fe:ec:21:96:02:c3:98:33:a9:f4:82:
                    ac:1d:14:8d:ca:92:7c:31:40:7e:6e:d0:d8:01:cb:
                    64:9f:62:e7:11:1f:b2:1c:30:2e:47:53:c3:e4:5a:
                    3f:8b:04:5b:a9:4d:34:80:f6:1c:e0:33:45:ff:ac:
                    ad:fa:4c:d5:2b:83:a5:00:c8:1c:ad:7d:f2:d4:fb:
                    2c:65:ee:3a:46:1f:31:e5:98:90:6d:3b:9d:a7:8b:
                    80:dc:51:76:d1:0e:d4:b6:43:73:b9:d3:c6:a2:67:
                    ac:5a:91:73:99:3a:02:5d:c4:96:51:ef:ba:70:d4:
                    45:4c:99:6c:3b:cf:c6:a5:85:14:66:56:be:39:1c:
                    40:6f:c1:09:43:02:1e:dc:18:23:b0:44:b5:dc:1c:
                    ac:0b:bc:80:3c:c5:24:7c:2b:9e:86:78:73:09:36:
                    bd:4b:8d:95:f3:d9:5d:85:ac:72:9c:41:76:e6:87:
                    05:a5:9d:27:ec:2b:8d:6b:d0:7f:a2:b3:7b:a7:64:
                    fe:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:99:D8:26:7F:9D:F2:F5:4C:05:38:97:DD:D9:34:A9:07:E3:7F:93
            X509v3 Authority Key Identifier:
                keyid:8E:9D:BE:B9:1B:AD:24:BE:DB:97:1D:08:33:05:70:7C:8D:38:F6:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6etm44QjWrR5EfTWAV3qzNSnqZHTSM9JM6c27XkWkag1/1/8E9DBEB91BAD24BEDB971D083305707C8D38F623.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E9DBEB91BAD24BEDB971D083305707C8D38F623.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6etm44QjWrR5EfTWAV3qzNSnqZHTSM9JM6c27XkWkag1/1/3133382e39392e37362e302f32322d3234203d3e20323634313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:08:56:f7:b3:ac:29:8f:8a:ce:4b:f7:26:99:44:35:65:2d:
         50:2b:81:ef:41:22:f3:19:43:df:cd:f4:a8:1c:d8:0c:e7:34:
         82:08:55:30:17:b5:31:a8:de:7e:e7:19:e4:ea:d6:a3:d7:db:
         1c:37:b8:18:71:1c:99:28:7a:1b:5e:d2:cd:5e:9a:5b:6e:af:
         d3:b6:ce:56:be:f8:94:56:af:25:33:48:f8:89:3b:db:fc:f9:
         2e:4c:94:e0:6b:4d:8b:71:d1:6f:ce:1b:73:b7:91:d5:60:42:
         22:72:0c:92:de:27:ee:81:51:38:3e:8f:d8:d7:e4:29:30:bd:
         eb:3f:72:83:10:d0:05:d8:a5:25:b9:00:57:5b:6e:99:ec:03:
         1a:fe:80:db:d9:5e:59:d6:93:95:11:a8:27:55:14:10:a2:12:
         17:8e:98:02:db:b7:52:95:6a:cb:79:33:51:ef:d3:4f:3c:38:
         b7:21:67:89:ff:d3:56:8e:d3:61:d2:f5:06:8e:4a:aa:53:92:
         b6:10:7a:0d:48:42:6a:ae:d5:b2:9c:0f:b7:06:a7:48:82:8d:
         ba:f4:e9:2b:1d:20:0a:7b:1f:56:f8:c4:db:2d:6c:1c:b3:f8:
         86:32:c5:7c:10:27:38:d9:ce:35:1c:93:96:c8:38:83:fa:2b:
         a6:97:34:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:08:12 2026 by rpki-client