Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/3133382e3132312e3233362e302f32322d3332203d3e203631363332.roa
File:                     3133382e3132312e3233362e302f32322d3332203d3e203631363332.roa (raw, json)
Hash identifier:          fH/4ytZBYXlLBYEmgdp3yGKS2V/bkHki/WYFBUpiIro=
Subject key identifier:   DD:95:1C:08:73:95:0F:FC:53:14:C7:4A:B3:85:8C:D1:AF:FF:ED:F7
Certificate issuer:       /CN=1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E
Certificate serial:       29AE04EA65769F8351CA2792649B9990F1BF7C91
Authority key identifier: 1F:32:93:CF:E3:82:AB:CE:81:F3:DC:5E:9B:FE:E1:8E:F0:B4:00:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/3133382e3132312e3233362e302f32322d3332203d3e203631363332.roa
Signing time:             Wed 31 Dec 2025 13:59:25 +0000
ROA not before:           Wed 31 Dec 2025 13:54:25 +0000
ROA not after:            Wed 30 Dec 2026 13:59:25 +0000
asID:                     61632
IP address blocks:        138.121.236.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E.crl
                          rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 10:46:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ae:04:ea:65:76:9f:83:51:ca:27:92:64:9b:99:90:f1:bf:7c:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E
        Validity
            Not Before: Dec 31 13:54:25 2025 GMT
            Not After : Dec 30 13:59:25 2026 GMT
        Subject: CN=DD951C0873950FFC5314C74AB3858CD1AFFFEDF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a6:44:fd:3a:ac:0b:71:0d:98:71:4f:cb:94:
                    93:8d:13:fd:4f:61:40:a4:2d:00:29:c9:75:0a:6c:
                    9e:9e:f3:d0:27:a2:cc:96:b5:1b:a5:b0:9d:44:ea:
                    dc:13:b5:b3:4a:05:73:91:33:96:50:b5:a0:cf:70:
                    17:43:5e:0f:e0:04:a5:79:31:b9:9e:2c:c4:1f:79:
                    d9:19:8a:85:31:59:99:ff:9a:71:3e:45:64:9e:e4:
                    11:66:a7:3a:e1:12:22:da:96:8d:90:d8:c6:b4:03:
                    a4:fa:bc:37:a7:15:1a:e1:3f:e7:f5:74:1b:ac:9e:
                    d6:96:42:93:12:ec:50:fd:1e:0b:3c:10:ac:e7:b1:
                    1f:8b:59:5b:80:02:e7:1f:e6:0f:57:93:fc:da:3c:
                    10:28:c3:3b:b0:5a:b1:e3:0f:1b:0b:30:46:e7:ac:
                    b4:7b:59:f4:15:43:5b:7e:fd:87:58:63:d9:a0:94:
                    b5:02:00:67:d3:05:f2:6e:3c:6b:a4:de:bb:e1:0e:
                    a1:e0:c6:ac:01:3c:8e:24:9c:09:00:b3:b8:ee:b8:
                    4c:8c:4e:6e:a0:0a:48:01:e9:d7:80:03:b3:75:fb:
                    d1:5b:b0:c2:bf:1e:58:94:15:4e:26:0e:2e:4b:41:
                    79:fb:73:38:65:80:53:8c:59:0d:05:d1:d3:ce:14:
                    38:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:95:1C:08:73:95:0F:FC:53:14:C7:4A:B3:85:8C:D1:AF:FF:ED:F7
            X509v3 Authority Key Identifier:
                keyid:1F:32:93:CF:E3:82:AB:CE:81:F3:DC:5E:9B:FE:E1:8E:F0:B4:00:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/3133382e3132312e3233362e302f32322d3332203d3e203631363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:62:ba:60:6d:a8:30:38:9b:07:bc:f8:2a:a2:12:09:4a:b4:
         bd:84:af:9e:d0:26:2f:9d:0c:94:e2:55:27:d6:f6:da:79:83:
         fa:ec:84:9d:91:8d:e3:1c:79:5a:a8:91:73:62:b9:81:61:3e:
         2d:50:95:51:d2:15:b8:d2:db:f6:da:4a:33:46:93:45:df:4c:
         c8:05:5e:04:d4:f9:35:6f:87:8e:7f:81:fe:af:6b:70:c9:9f:
         0e:e3:f8:73:b9:04:38:5f:32:4e:03:da:db:92:b1:c7:32:f9:
         5e:10:02:23:e5:42:5d:89:90:b0:c4:86:5e:bc:94:cd:e4:36:
         98:53:58:8b:4c:fc:d0:af:47:19:0c:28:72:0f:7c:63:2d:9f:
         7e:7c:eb:b4:86:1b:a3:68:be:33:c1:2b:66:38:39:74:0f:35:
         c9:27:44:16:af:ae:63:a2:ec:dc:d5:f3:39:bb:4b:33:a6:90:
         d9:65:3d:1f:47:22:dd:1f:cd:78:0a:56:af:ad:07:a6:a6:dd:
         33:21:8d:5f:f7:b7:1a:36:a4:d7:0e:fd:f9:e6:c5:c5:b5:cd:
         1d:13:f3:77:20:7c:83:4f:6c:92:29:f8:a3:bd:3a:f2:34:42:
         f2:53:f9:fd:85:53:43:c5:57:e4:8b:72:f4:e4:84:77:47:11:
         8e:4b:8c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:20:31 2026 by rpki-client