Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/3133382e39372e3133322e302f32322d3234203d3e20323632363435.roa
File:                     3133382e39372e3133322e302f32322d3234203d3e20323632363435.roa (raw, json)
Hash identifier:          5BTZmZuCvcsLOksdJGRGpvHSqtcq+Rph0+LGcv7Qpvs=
Subject key identifier:   C8:27:C1:29:59:E9:28:5C:BA:0A:97:90:53:B9:10:D3:B9:FD:70:C1
Certificate issuer:       /CN=E09F2B81ED12D4B02A5B104DB200DEF0A03303AD
Certificate serial:       4F4B75CB3FE6D6B6CFAE5A0C389D974398645F21
Authority key identifier: E0:9F:2B:81:ED:12:D4:B0:2A:5B:10:4D:B2:00:DE:F0:A0:33:03:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/3133382e39372e3133322e302f32322d3234203d3e20323632363435.roa
Signing time:             Thu 05 Feb 2026 08:26:09 +0000
ROA not before:           Thu 05 Feb 2026 08:21:09 +0000
ROA not after:            Thu 04 Feb 2027 08:26:09 +0000
asID:                     262645
IP address blocks:        138.97.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.crl
                          rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 12:40:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:4b:75:cb:3f:e6:d6:b6:cf:ae:5a:0c:38:9d:97:43:98:64:5f:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E09F2B81ED12D4B02A5B104DB200DEF0A03303AD
        Validity
            Not Before: Feb  5 08:21:09 2026 GMT
            Not After : Feb  4 08:26:09 2027 GMT
        Subject: CN=C827C12959E9285CBA0A979053B910D3B9FD70C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:31:46:2c:a0:ef:0e:fe:05:8b:63:4f:2e:f7:
                    15:ea:a0:08:46:eb:e2:81:89:35:41:40:6f:8a:70:
                    cf:80:af:99:ab:7b:49:a4:77:fd:79:fd:b8:92:76:
                    92:12:dc:3a:93:5a:9f:cd:a3:4f:65:60:05:6c:7f:
                    c3:0a:8e:e9:85:90:0a:aa:69:b2:9c:b7:d4:d9:bc:
                    48:47:b2:89:16:0a:5c:d2:79:e1:4f:36:0b:18:b2:
                    2c:99:e0:93:8e:a4:f0:ad:ce:1d:06:09:48:45:e9:
                    bf:48:81:52:30:ad:76:19:fe:b7:41:ce:d8:b3:54:
                    2f:00:c1:97:32:1e:fb:45:95:8a:3f:02:fd:60:01:
                    e9:82:fd:7a:70:7d:ba:43:70:77:b1:ac:f5:1d:8e:
                    be:82:a5:8b:c4:21:06:7d:08:27:3d:4c:9c:42:93:
                    00:8d:59:c1:e8:80:73:cd:24:e1:cf:7a:7d:2c:44:
                    fc:1e:02:29:6e:30:63:80:63:66:a8:e9:f2:37:25:
                    2c:ba:05:fd:d4:a7:58:7e:5c:98:cc:9a:72:f2:f0:
                    ec:fe:0d:51:5e:e1:08:2e:bb:e3:74:90:08:44:13:
                    35:21:59:3d:e3:db:bd:c5:f7:c2:cd:4c:3a:19:c7:
                    f4:19:ba:9a:1f:33:9c:8e:10:7e:23:7c:8e:06:81:
                    a7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:27:C1:29:59:E9:28:5C:BA:0A:97:90:53:B9:10:D3:B9:FD:70:C1
            X509v3 Authority Key Identifier:
                keyid:E0:9F:2B:81:ED:12:D4:B0:2A:5B:10:4D:B2:00:DE:F0:A0:33:03:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/3133382e39372e3133322e302f32322d3234203d3e20323632363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:cb:f5:ae:b4:3e:64:22:64:76:01:2a:90:25:5e:6c:e3:4a:
         60:dd:46:68:de:d2:dd:9e:66:a4:40:6f:af:62:0a:d0:90:d8:
         70:8e:a6:af:ab:f7:eb:8c:21:5a:f4:e4:1d:5e:44:e7:24:c8:
         11:87:e9:45:1e:2b:74:37:fe:c7:1e:ed:ce:c6:69:62:9f:93:
         51:34:03:cd:bb:57:17:23:1f:4d:4f:c8:32:b9:fe:b9:7a:9e:
         dd:23:ea:d2:c4:53:e2:02:11:50:d2:3f:59:f1:22:0b:d5:f5:
         9b:8f:08:5a:6e:4e:d7:9d:48:87:dd:2e:17:87:e9:0a:eb:5e:
         7d:3d:bb:3f:dd:bf:31:f9:47:a2:23:2c:91:5c:a1:75:ea:59:
         32:e7:9c:06:0c:82:03:28:76:bc:91:05:5f:47:e6:15:3d:4c:
         6d:76:9d:f7:df:46:b8:d5:c3:a0:dc:11:14:a6:f1:5e:3d:b8:
         b8:f9:c9:65:62:64:50:c6:70:13:e2:3a:1f:f4:40:fc:f9:83:
         79:56:c0:89:f7:14:84:31:41:f9:3b:59:c3:9c:e9:15:dc:8f:
         8d:22:ee:27:e0:cc:98:ec:7d:d5:81:90:ad:12:e2:f5:1a:ab:
         95:2f:60:55:78:87:ba:17:8f:0b:aa:54:35:7f:34:f0:f9:9a:
         a8:c0:0b:fb
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUT0t1yz/m1rbPrloMOJ2XQ5hkXyEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTA5RjJCODFFRDEyRDRCMDJBNUIxMDREQjIwMERFRjBB
MDMzMDNBRDAeFw0yNjAyMDUwODIxMDlaFw0yNzAyMDQwODI2MDlaMDMxMTAvBgNV
BAMTKEM4MjdDMTI5NTlFOTI4NUNCQTBBOTc5MDUzQjkxMEQzQjlGRDcwQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4MUYsoO8O/gWLY08u9xXqoAhG
6+KBiTVBQG+KcM+Ar5mre0mkd/15/biSdpIS3DqTWp/No09lYAVsf8MKjumFkAqq
abKct9TZvEhHsokWClzSeeFPNgsYsiyZ4JOOpPCtzh0GCUhF6b9IgVIwrXYZ/rdB
ztizVC8AwZcyHvtFlYo/Av1gAemC/XpwfbpDcHexrPUdjr6CpYvEIQZ9CCc9TJxC
kwCNWcHogHPNJOHPen0sRPweAiluMGOAY2ao6fI3JSy6Bf3Up1h+XJjMmnLy8Oz+
DVFe4Qguu+N0kAhEEzUhWT3j273F98LNTDoZx/QZupofM5yOEH4jfI4GgaeLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUyCfBKVnpKFy6CpeQU7kQ07n9cMEwHwYDVR0j
BBgwFoAU4J8rge0S1LAqWxBNsgDe8KAzA60wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU1mSFJ6elNaMjY5Y25RYm96Z3lSYk5wd3A0Z0xuV0JOV0ZQV1pFbVdH
WHMvMS9FMDlGMkI4MUVEMTJENEIwMkE1QjEwNERCMjAwREVGMEEwMzMwM0FELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UwOUYyQjgxRUQxMkQ0QjAy
QTVCMTA0REIyMDBERUYwQTAzMzAzQUQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlNZkhSenpTWjI2OWNuUWJvemd5UmJOcHdwNGdMbldCTldGUFdaRW1XR1hzLzEv
MzEzMzM4MmUzOTM3MmUzMTMzMzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzIzNjM0MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKYYQwDQYJKoZIhvcNAQELBQADggEBAJTL9a60
PmQiZHYBKpAlXmzjSmDdRmje0t2eZqRAb69iCtCQ2HCOpq+r9+uMIVr05B1eROck
yBGH6UUeK3Q3/sce7c7GaWKfk1E0A827VxcjH01PyDK5/rl6nt0j6tLEU+ICEVDS
P1nxIgvV9ZuPCFpuTtedSIfdLheH6QrrXn09uz/dvzH5R6IjLJFcoXXqWTLnnAYM
ggModryRBV9H5hU9TG12nfffRrjVw6DcERSm8V49uLj5yWViZFDGcBPiOh/0QPz5
g3lWwIn3FIQxQfk7WcOc6RXcj40i7ifgzJjsfdWBkK0S4vUaq5UvYFV4h7oXjwuq
VDV/NPD5mqjAC/s=
-----END CERTIFICATE-----
Generated at Fri Feb 20 02:24:12 2026 by rpki-client