Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/3133382e3131382e3130302e302f32322d3232203d3e203532373038.roa
File:                     3133382e3131382e3130302e302f32322d3232203d3e203532373038.roa (raw, json)
Hash identifier:          HmXMINvYuED9jEOP1Wf0teHPDFCTLwqcS18Z41EqCf8=
Subject key identifier:   4C:83:11:0C:BD:80:84:38:53:2F:12:C3:23:84:07:C2:07:13:6A:6F
Certificate issuer:       /CN=5AB6409191BC25DA93A86CB1B79F23A5B47FAABE
Certificate serial:       7D6866E0BA53B41A8EE2233A1DEA1D3BC7C18204
Authority key identifier: 5A:B6:40:91:91:BC:25:DA:93:A8:6C:B1:B7:9F:23:A5:B4:7F:AA:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB6409191BC25DA93A86CB1B79F23A5B47FAABE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/3133382e3131382e3130302e302f32322d3232203d3e203532373038.roa
Signing time:             Fri 30 Jan 2026 06:39:05 +0000
ROA not before:           Fri 30 Jan 2026 06:34:05 +0000
ROA not after:            Fri 29 Jan 2027 06:39:05 +0000
asID:                     52708
IP address blocks:        138.118.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/5AB6409191BC25DA93A86CB1B79F23A5B47FAABE.crl
                          rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/5AB6409191BC25DA93A86CB1B79F23A5B47FAABE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB6409191BC25DA93A86CB1B79F23A5B47FAABE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:31:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:68:66:e0:ba:53:b4:1a:8e:e2:23:3a:1d:ea:1d:3b:c7:c1:82:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AB6409191BC25DA93A86CB1B79F23A5B47FAABE
        Validity
            Not Before: Jan 30 06:34:05 2026 GMT
            Not After : Jan 29 06:39:05 2027 GMT
        Subject: CN=4C83110CBD808438532F12C3238407C207136A6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:41:fb:04:b3:54:cb:e9:3f:76:29:1e:ef:db:
                    22:08:99:a1:e0:96:9d:53:b8:09:fe:b3:0d:22:8a:
                    88:39:5b:67:77:e7:5e:6e:57:e5:ec:01:6e:8c:a4:
                    a5:f7:e7:96:47:17:91:00:4c:f0:6b:f6:c2:71:b0:
                    85:49:b4:8c:a4:1d:94:65:81:aa:fd:b6:c3:4d:53:
                    9f:7e:12:b7:d8:40:86:d2:b9:ee:83:b1:62:38:2e:
                    a4:eb:d5:b9:b8:d1:3d:ed:92:4d:d6:d4:fb:25:79:
                    09:85:19:b3:ef:dc:bd:ad:09:2d:93:25:ac:10:d4:
                    17:47:80:be:dc:73:35:93:f0:8e:88:cc:cf:6f:81:
                    75:9c:39:50:34:a7:25:bd:76:04:32:d5:8e:91:5b:
                    07:5d:5b:51:93:48:df:75:89:05:7b:6f:63:9d:10:
                    58:5a:c5:78:c7:a2:0d:fb:22:d3:29:f9:bf:66:29:
                    63:2b:fb:e4:9e:2c:8d:3d:1a:c2:e2:62:0a:64:58:
                    95:5f:cd:89:47:a3:ba:29:31:ca:bb:3d:a8:9c:00:
                    d7:4d:30:c0:c6:d8:63:3f:6f:04:20:b3:1d:b1:19:
                    ad:8e:76:e0:81:e9:e8:86:66:6d:28:1c:2d:b5:b4:
                    03:eb:a1:bf:b7:b1:e5:21:c2:70:bd:80:af:65:c2:
                    42:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:83:11:0C:BD:80:84:38:53:2F:12:C3:23:84:07:C2:07:13:6A:6F
            X509v3 Authority Key Identifier:
                keyid:5A:B6:40:91:91:BC:25:DA:93:A8:6C:B1:B7:9F:23:A5:B4:7F:AA:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/5AB6409191BC25DA93A86CB1B79F23A5B47FAABE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB6409191BC25DA93A86CB1B79F23A5B47FAABE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/3133382e3131382e3130302e302f32322d3232203d3e203532373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:e6:1b:13:66:f9:d0:ee:52:2c:78:93:e6:24:dc:2c:87:66:
         0f:d1:2a:6d:45:77:62:01:ce:07:47:10:0e:9c:8c:03:99:0e:
         67:0f:f2:c0:d3:99:c6:f5:25:29:ab:40:95:33:8d:1b:4e:bf:
         36:3c:e2:de:c5:53:c9:96:aa:bf:57:af:5c:72:5d:ea:23:0d:
         8d:38:7d:0d:96:ee:8f:a6:a1:89:cd:ea:30:3c:f2:63:0d:96:
         27:f7:67:c3:27:02:b0:a3:ac:c6:35:a7:1d:75:28:62:0d:39:
         10:8c:8f:18:5e:6f:7a:09:67:7b:4f:8f:e9:1a:ee:1e:4a:02:
         4f:46:23:fe:af:ed:0e:71:d9:ef:ce:fc:eb:77:38:91:2b:6a:
         c5:d5:88:08:a9:ef:98:6a:f8:14:fb:2c:fa:44:da:0f:0f:33:
         90:1e:55:1a:35:34:e7:f3:c9:ae:74:fa:30:d4:3c:13:70:3a:
         28:39:56:21:d4:f2:7b:e7:d3:5b:ac:7a:2e:e4:8e:18:1b:8b:
         e5:ee:26:42:7a:81:fa:eb:d2:ae:94:fb:43:67:96:34:f6:9f:
         40:98:a8:b0:51:ba:36:b5:b2:88:0a:db:25:f2:4e:c8:db:e4:
         f0:16:db:0e:e1:ad:d4:01:38:8a:d1:c8:c6:12:b9:ab:e9:6d:
         5d:86:4d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 13:13:53 2026 by rpki-client