Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/3133382e3131382e3130322e302f32332d3233203d3e203532373038.roa
File:                     3133382e3131382e3130322e302f32332d3233203d3e203532373038.roa (raw, json)
Hash identifier:          mXlWsnNl6DaiIw+Xl/HfhoLmtwwTFHKJPvH+nyhg7xs=
Subject key identifier:   77:A4:EB:3F:FF:A4:E2:67:22:23:FF:66:A5:7A:29:F8:4A:2C:57:1E
Certificate issuer:       /CN=5AB6409191BC25DA93A86CB1B79F23A5B47FAABE
Certificate serial:       420280799638F95738F41EBF1F1290CB02798301
Authority key identifier: 5A:B6:40:91:91:BC:25:DA:93:A8:6C:B1:B7:9F:23:A5:B4:7F:AA:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB6409191BC25DA93A86CB1B79F23A5B47FAABE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/3133382e3131382e3130322e302f32332d3233203d3e203532373038.roa
Signing time:             Fri 30 Jan 2026 06:49:28 +0000
ROA not before:           Fri 30 Jan 2026 06:44:28 +0000
ROA not after:            Fri 29 Jan 2027 06:49:28 +0000
asID:                     52708
IP address blocks:        138.118.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/5AB6409191BC25DA93A86CB1B79F23A5B47FAABE.crl
                          rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/5AB6409191BC25DA93A86CB1B79F23A5B47FAABE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB6409191BC25DA93A86CB1B79F23A5B47FAABE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:31:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:02:80:79:96:38:f9:57:38:f4:1e:bf:1f:12:90:cb:02:79:83:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AB6409191BC25DA93A86CB1B79F23A5B47FAABE
        Validity
            Not Before: Jan 30 06:44:28 2026 GMT
            Not After : Jan 29 06:49:28 2027 GMT
        Subject: CN=77A4EB3FFFA4E2672223FF66A57A29F84A2C571E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:56:ed:26:7e:24:fb:22:4b:55:f4:ec:36:0b:
                    61:9d:20:c2:01:a4:4b:87:8e:4c:1d:0e:bb:9c:be:
                    7b:c8:d3:a4:83:84:14:e4:3d:35:8e:13:89:76:ac:
                    0e:39:30:36:4b:09:ce:ed:d1:f0:12:e1:c3:85:3e:
                    6b:c6:2a:8c:5a:2f:ce:47:80:c2:7e:f9:c9:75:c3:
                    4b:1a:75:eb:57:dc:12:33:4c:22:ee:db:a8:e0:ac:
                    26:07:a4:44:39:22:fa:1f:51:3a:f8:49:de:82:ba:
                    d8:2c:5b:d6:f3:14:be:01:fb:5c:e9:ca:5d:a5:68:
                    73:5c:b4:6a:88:ca:fc:23:5b:71:b5:86:ac:78:27:
                    47:3d:24:5c:ed:70:23:eb:41:5a:ed:31:f2:51:ae:
                    a2:ad:8a:bd:fb:ca:fb:95:06:5f:f9:9a:13:42:20:
                    0e:19:9b:02:fd:a3:84:16:42:9a:f6:af:70:d9:be:
                    73:f7:b7:44:14:ff:2d:f8:27:69:87:52:b9:47:df:
                    bd:73:cb:88:91:b3:8f:f7:8d:78:bf:f4:75:5a:9e:
                    7e:33:88:8b:c3:f4:0f:28:0f:26:d2:fa:79:4a:ec:
                    e3:b9:66:62:58:49:1c:fc:15:3a:35:0a:13:86:e0:
                    1a:6d:35:34:ec:d4:5a:7c:e5:34:6b:93:40:34:2b:
                    68:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A4:EB:3F:FF:A4:E2:67:22:23:FF:66:A5:7A:29:F8:4A:2C:57:1E
            X509v3 Authority Key Identifier:
                keyid:5A:B6:40:91:91:BC:25:DA:93:A8:6C:B1:B7:9F:23:A5:B4:7F:AA:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/5AB6409191BC25DA93A86CB1B79F23A5B47FAABE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB6409191BC25DA93A86CB1B79F23A5B47FAABE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/3133382e3131382e3130322e302f32332d3233203d3e203532373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:a4:a2:24:fd:1f:8c:56:7e:7c:47:95:36:00:6e:f1:64:a3:
         01:6d:03:eb:15:13:dc:39:fc:45:79:30:14:ea:5f:17:70:b2:
         26:6e:78:45:bb:9e:59:3d:ef:2b:74:83:74:44:a3:33:af:f2:
         25:f7:c3:60:f4:4a:da:18:2c:21:11:10:47:eb:f8:ad:b4:8a:
         79:20:c3:f6:f2:78:11:94:e6:ff:95:b5:e1:ed:42:8e:9a:0b:
         2f:87:35:91:80:87:f7:0a:a8:aa:22:39:dd:2d:72:cb:58:a5:
         0c:a8:e2:8e:00:8c:55:c8:20:d9:aa:0c:16:2a:fd:de:c0:c0:
         d6:ae:5e:3b:14:73:4a:02:46:51:c5:32:d0:72:a3:e1:2b:bd:
         79:cf:6f:7a:ac:f2:8a:29:a6:67:a2:63:93:6d:a4:dd:8c:80:
         d9:fc:24:e1:23:d3:c0:41:38:6e:5d:e5:38:22:51:e6:5e:e6:
         d5:b4:d6:c3:de:95:1b:54:77:48:c8:0e:af:35:b2:17:f7:63:
         e5:d0:27:90:fc:0d:35:8e:c5:56:11:5c:54:cb:15:0d:b0:89:
         67:8c:67:d1:d3:c2:eb:18:e6:ed:dd:a8:85:fc:5a:3c:0e:aa:
         9e:2a:dd:93:b3:84:f9:b2:08:2a:c6:60:20:03:61:91:2f:da:
         a2:53:d6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 13:13:52 2026 by rpki-client