Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/1/3133382e3138362e3139362e302f32322d3234203d3e20323633383639.roa
File:                     3133382e3138362e3139362e302f32322d3234203d3e20323633383639.roa (raw, json)
Hash identifier:          RoQfLojjxs4Go9NvVNqCM4tyg/i/cKgZvazNzDuKazE=
Subject key identifier:   24:95:36:DE:99:8C:E5:4E:8E:CF:D2:C9:20:4D:86:EF:74:A6:A3:A6
Certificate issuer:       /CN=3E3635534C5268C5F8F31D910454018D21BBA954
Certificate serial:       565F9BBBB78DC190E07B40699C745C9630EF55D8
Authority key identifier: 3E:36:35:53:4C:52:68:C5:F8:F3:1D:91:04:54:01:8D:21:BB:A9:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E3635534C5268C5F8F31D910454018D21BBA954.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/1/3133382e3138362e3139362e302f32322d3234203d3e20323633383639.roa
Signing time:             Wed 04 Feb 2026 20:00:02 +0000
ROA not before:           Wed 04 Feb 2026 19:55:02 +0000
ROA not after:            Wed 03 Feb 2027 20:00:02 +0000
asID:                     263869
IP address blocks:        138.186.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/1/3E3635534C5268C5F8F31D910454018D21BBA954.crl
                          rsync://rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/1/3E3635534C5268C5F8F31D910454018D21BBA954.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E3635534C5268C5F8F31D910454018D21BBA954.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:5f:9b:bb:b7:8d:c1:90:e0:7b:40:69:9c:74:5c:96:30:ef:55:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E3635534C5268C5F8F31D910454018D21BBA954
        Validity
            Not Before: Feb  4 19:55:02 2026 GMT
            Not After : Feb  3 20:00:02 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a5:c7:b1:3d:d1:d6:c4:b6:98:5c:af:71:d2:
                    fd:3b:6a:96:e2:46:8c:38:8c:9c:04:ca:fe:cd:d9:
                    79:1b:1a:ad:47:52:7b:62:a8:70:90:a3:4d:f2:2c:
                    d3:71:0f:0d:5f:e8:f6:e0:a1:61:ef:e0:be:d3:87:
                    99:43:2b:23:a3:c7:88:16:67:86:39:46:94:1a:5c:
                    58:9e:a2:d3:3a:4c:89:8b:fb:9c:c8:b2:0c:36:ec:
                    a1:fa:df:4e:c2:24:b9:06:a3:fa:30:d4:11:3f:de:
                    5c:9b:34:6a:3a:f6:eb:6c:58:1a:19:59:87:a6:6c:
                    e0:09:63:03:15:7b:d8:d9:71:c7:a3:dc:d6:cb:2e:
                    94:01:cc:37:1b:41:d6:f4:02:48:f6:79:b0:76:1f:
                    8c:11:81:f9:0b:b6:3f:80:00:4d:cb:36:ca:af:fb:
                    b3:ec:3f:d5:66:83:f1:6f:00:68:8b:ab:4f:10:fd:
                    42:6b:53:a8:c3:94:c7:32:74:1b:19:89:66:df:35:
                    30:d3:0d:cf:1f:93:eb:33:67:e1:72:a4:74:95:c4:
                    f4:70:69:a6:b1:bc:2f:cc:c8:7a:59:78:49:d6:84:
                    90:a8:01:3a:59:3a:b6:fd:86:03:72:a6:1b:5e:c2:
                    9b:8a:31:55:9e:89:42:32:bc:c9:97:39:2c:3e:bd:
                    97:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:95:36:DE:99:8C:E5:4E:8E:CF:D2:C9:20:4D:86:EF:74:A6:A3:A6
            X509v3 Authority Key Identifier:
                keyid:3E:36:35:53:4C:52:68:C5:F8:F3:1D:91:04:54:01:8D:21:BB:A9:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/1/3E3635534C5268C5F8F31D910454018D21BBA954.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E3635534C5268C5F8F31D910454018D21BBA954.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/1/3133382e3138362e3139362e302f32322d3234203d3e20323633383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:f9:5f:ee:5c:20:31:93:e6:f7:00:f8:dd:54:b1:bd:9c:68:
         6a:35:b7:d3:a3:55:bb:71:64:f5:28:0f:b5:54:ac:bf:06:a2:
         a9:91:99:46:42:11:20:7c:b2:5e:87:be:e9:30:20:e9:56:c1:
         ca:1a:51:e3:cc:be:8c:fa:bc:af:3f:cd:48:82:91:ce:74:33:
         a0:96:cd:38:d8:ab:7a:2f:0b:85:d4:73:23:c0:5a:54:d3:85:
         6d:6f:8e:c3:97:43:66:ab:0a:ef:fe:75:19:03:35:e3:75:7f:
         5b:23:b0:07:75:02:65:8e:60:7d:e3:39:d7:82:0b:d5:47:31:
         74:3e:9f:12:c0:11:56:6a:dd:08:19:a4:b6:03:f5:b5:82:a7:
         a6:03:cb:62:41:f9:72:d9:b7:1a:81:6c:37:9f:e4:dc:b4:c4:
         ca:19:58:b3:95:89:69:00:ff:6f:62:56:ba:ab:e7:8d:4b:35:
         56:ed:99:2d:60:0c:98:11:04:f7:57:a1:b8:1e:95:2c:83:9d:
         84:ae:47:6f:38:c9:1d:ec:cb:ff:77:01:a6:cd:54:26:b0:d7:
         13:72:e3:e3:ee:2f:d3:19:18:47:ef:47:e1:1a:09:d2:76:95:
         20:84:18:b5:d1:9a:ba:87:8e:be:49:10:64:a2:39:50:c2:f5:
         61:56:67:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 06:12:02 2026 by rpki-client