Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0/3133382e3230342e35322e302f32322d3234203d3e20323633393032.roa
File:                     3133382e3230342e35322e302f32322d3234203d3e20323633393032.roa (raw, json)
Hash identifier:          xY7iJx5SgJrcP/NhrWhYbZrtj+AMzBlNYlsX1PSir2E=
Subject key identifier:   B8:A4:5D:7B:11:3E:41:CE:4A:9D:31:C1:03:CE:24:8E:9E:37:03:4C
Certificate issuer:       /CN=6213D05627DB2B5D535E655FE93A5D75AF6BAE21
Certificate serial:       70DF4AD77CEA0197A12289FFD3F974B92EA814DC
Authority key identifier: 62:13:D0:56:27:DB:2B:5D:53:5E:65:5F:E9:3A:5D:75:AF:6B:AE:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6213D05627DB2B5D535E655FE93A5D75AF6BAE21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0/3133382e3230342e35322e302f32322d3234203d3e20323633393032.roa
Signing time:             Thu 29 Jan 2026 16:04:47 +0000
ROA not before:           Thu 29 Jan 2026 15:59:47 +0000
ROA not after:            Thu 28 Jan 2027 16:04:47 +0000
asID:                     263902
IP address blocks:        138.204.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0/6213D05627DB2B5D535E655FE93A5D75AF6BAE21.crl
                          rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0/6213D05627DB2B5D535E655FE93A5D75AF6BAE21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6213D05627DB2B5D535E655FE93A5D75AF6BAE21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 02:51:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:df:4a:d7:7c:ea:01:97:a1:22:89:ff:d3:f9:74:b9:2e:a8:14:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6213D05627DB2B5D535E655FE93A5D75AF6BAE21
        Validity
            Not Before: Jan 29 15:59:47 2026 GMT
            Not After : Jan 28 16:04:47 2027 GMT
        Subject: CN=B8A45D7B113E41CE4A9D31C103CE248E9E37034C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:36:82:20:ca:10:0d:6a:5e:cb:df:6a:b4:3f:
                    27:dd:df:55:bb:5b:4e:f1:b1:64:f0:ed:ff:68:6b:
                    ff:a9:34:35:04:e9:03:f1:be:ff:2b:85:4c:ad:c1:
                    ae:49:ba:4e:ef:c6:c2:ae:f1:1f:39:6e:6e:2d:d5:
                    dc:07:59:14:05:68:9a:f4:ab:d0:81:df:98:f4:8c:
                    c2:2d:0b:7f:eb:10:e2:c6:2f:5b:cc:15:f9:0e:d5:
                    fd:05:49:12:f4:5a:7a:6e:09:e5:d6:49:ea:b0:0c:
                    5f:ee:f5:00:22:72:98:9c:c5:33:7d:9e:a6:32:1c:
                    15:bb:46:4e:c7:1b:bb:33:8c:75:4b:3c:28:72:7e:
                    d1:26:7e:c9:fc:af:1c:c6:a3:96:a9:91:ea:b5:a0:
                    95:d5:a6:97:c4:43:64:df:a3:2d:29:2f:8f:d2:d1:
                    e6:a3:2f:26:de:3f:f4:e3:03:fa:97:7f:51:04:f9:
                    9e:52:19:e1:32:25:94:5e:a8:49:22:2e:0c:62:f9:
                    fa:63:fe:d7:7a:37:5e:43:c0:b8:42:f0:2b:2a:2e:
                    7e:56:f9:d3:6f:ce:67:02:05:d9:be:38:5f:e7:3b:
                    eb:86:d3:e4:ec:45:3a:9a:a7:dc:0e:da:fd:5a:82:
                    3e:59:ac:c8:e8:d5:50:99:a6:79:81:5c:6e:3b:59:
                    be:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A4:5D:7B:11:3E:41:CE:4A:9D:31:C1:03:CE:24:8E:9E:37:03:4C
            X509v3 Authority Key Identifier:
                keyid:62:13:D0:56:27:DB:2B:5D:53:5E:65:5F:E9:3A:5D:75:AF:6B:AE:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0/6213D05627DB2B5D535E655FE93A5D75AF6BAE21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6213D05627DB2B5D535E655FE93A5D75AF6BAE21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0/3133382e3230342e35322e302f32322d3234203d3e20323633393032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:c1:e5:cd:7c:ce:4a:46:b2:94:74:79:5b:f1:27:4d:de:e9:
         8e:e8:b1:df:92:b2:72:f1:33:47:4e:bf:23:72:67:5f:df:0b:
         fe:5c:10:cd:6a:b3:a8:53:51:83:e4:63:16:ea:4f:2c:11:f8:
         37:77:dc:4e:b5:8b:de:30:ef:e3:8f:df:5a:7e:2d:0b:b9:e8:
         0c:3f:44:30:ba:5e:12:0b:3b:c4:f4:cc:e7:8a:7c:6c:5b:3a:
         a0:6e:e8:72:da:fa:83:74:84:f5:f5:b4:99:21:7f:2f:a2:2c:
         26:c4:d2:43:15:59:22:56:17:a8:10:3a:93:5c:83:af:80:46:
         9d:ba:86:5e:b2:4f:f3:48:1b:69:7c:4c:5d:ab:84:5c:32:97:
         c7:28:5c:26:cc:79:eb:e8:fe:ef:e2:ba:9b:d5:0b:31:ee:7f:
         d1:de:6a:29:bb:3b:7d:92:e9:15:e3:02:1a:af:b0:9a:b9:93:
         9d:6b:89:44:1f:54:4f:3d:6d:8c:62:a8:41:5a:e6:45:d4:5d:
         ed:0e:16:3e:81:5c:e5:b3:ee:4b:64:7b:0f:97:df:01:e2:c8:
         1c:0d:0a:17:d4:20:4b:97:e5:83:25:52:51:8c:ef:fc:95:cb:
         ac:71:5f:7a:ee:8d:4e:bb:29:9b:a7:f6:c5:95:b6:03:0f:0c:
         5b:39:89:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:25:07 2026 by rpki-client