Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/3133382e3235352e3232382e302f32342d3234203d3e20323633393935.roa
File:                     3133382e3235352e3232382e302f32342d3234203d3e20323633393935.roa (raw, json)
Hash identifier:          kfUQwanMG6ToYU/OozuwqVWwQuepYLnU3NSZy+Uft0I=
Subject key identifier:   AA:A6:1A:D5:17:D6:B6:5C:95:66:E2:8E:CA:84:53:50:A2:27:AE:C9
Certificate issuer:       /CN=F5FDFFF7EB44AA11B6419FC83DFF9C7046543EC4
Certificate serial:       67EEFD253678AEBC5A43EE47646066A9239E56B9
Authority key identifier: F5:FD:FF:F7:EB:44:AA:11:B6:41:9F:C8:3D:FF:9C:70:46:54:3E:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5FDFFF7EB44AA11B6419FC83DFF9C7046543EC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/3133382e3235352e3232382e302f32342d3234203d3e20323633393935.roa
Signing time:             Thu 12 Feb 2026 16:28:46 +0000
ROA not before:           Thu 12 Feb 2026 16:23:46 +0000
ROA not after:            Thu 11 Feb 2027 16:28:46 +0000
asID:                     263995
IP address blocks:        138.255.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/F5FDFFF7EB44AA11B6419FC83DFF9C7046543EC4.crl
                          rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/F5FDFFF7EB44AA11B6419FC83DFF9C7046543EC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5FDFFF7EB44AA11B6419FC83DFF9C7046543EC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 13:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ee:fd:25:36:78:ae:bc:5a:43:ee:47:64:60:66:a9:23:9e:56:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5FDFFF7EB44AA11B6419FC83DFF9C7046543EC4
        Validity
            Not Before: Feb 12 16:23:46 2026 GMT
            Not After : Feb 11 16:28:46 2027 GMT
        Subject: CN=AAA61AD517D6B65C9566E28ECA845350A227AEC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:04:48:9c:dd:f3:02:3b:e8:ba:be:ff:2a:9d:
                    74:32:bc:44:ac:71:33:e3:26:69:3d:29:e0:cd:9b:
                    5f:e4:02:62:8a:c9:5e:31:31:7a:b9:0d:61:4c:58:
                    4e:35:98:da:be:81:e8:e5:a9:b4:ce:bf:7e:69:51:
                    b8:ee:39:85:e2:69:bf:24:f2:dd:ac:63:42:9b:ac:
                    15:8f:a4:40:a4:53:b5:d3:16:36:b2:25:89:64:7d:
                    c0:f3:54:f3:66:99:59:b9:2b:73:25:9a:df:81:12:
                    1c:b0:f0:02:50:3c:a5:cd:36:f2:93:65:11:3a:56:
                    c9:a5:1f:c8:b0:78:02:9a:de:a0:d8:ad:ee:9c:cd:
                    d0:8f:49:60:0a:a4:13:ff:81:ca:b5:19:a3:d6:a9:
                    20:15:13:e2:f9:0c:9b:76:cb:81:75:4c:23:a9:8b:
                    5d:1f:5f:5d:33:da:f3:9c:59:67:56:8f:56:15:4c:
                    f0:0b:bb:3b:4c:22:c4:ce:cb:1f:e3:c8:95:ed:51:
                    83:f1:75:23:c4:8e:06:0a:b2:a2:65:52:28:2c:6e:
                    a4:ce:ff:7e:7a:67:0f:d7:45:a1:9c:75:0d:9e:8d:
                    f8:8e:94:cd:10:c1:08:af:05:55:87:74:e9:73:05:
                    36:f4:57:1e:b3:e6:51:ef:f5:a0:fc:63:af:b3:fb:
                    a4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A6:1A:D5:17:D6:B6:5C:95:66:E2:8E:CA:84:53:50:A2:27:AE:C9
            X509v3 Authority Key Identifier:
                keyid:F5:FD:FF:F7:EB:44:AA:11:B6:41:9F:C8:3D:FF:9C:70:46:54:3E:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/F5FDFFF7EB44AA11B6419FC83DFF9C7046543EC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5FDFFF7EB44AA11B6419FC83DFF9C7046543EC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/3133382e3235352e3232382e302f32342d3234203d3e20323633393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:01:55:e1:28:ec:e2:07:ea:22:7f:8e:03:e3:b4:b0:b8:fe:
         45:b4:32:43:8c:6e:b5:a4:bc:f6:6c:8e:db:e1:73:ce:e3:f1:
         e5:d4:81:ef:a4:64:e0:84:9d:33:69:81:6e:1d:29:5e:01:ad:
         91:93:87:44:8a:16:c5:ff:6d:e8:47:f6:3c:dd:86:7a:f9:20:
         15:f3:fe:d4:4d:a9:11:e5:66:8f:f3:d5:b3:c3:60:f1:e2:52:
         70:bc:f3:e6:18:99:c1:83:d9:66:24:bc:25:0c:84:8d:fd:d5:
         4d:91:5e:0f:2d:6c:85:f2:3a:45:3f:b5:7c:21:de:9a:af:ae:
         f5:e7:af:51:1f:85:e2:df:44:0d:b2:10:69:89:53:2d:e3:c1:
         45:85:ea:a0:cb:5a:c3:34:16:30:78:13:58:6c:25:d7:06:67:
         bb:56:b5:03:45:f6:ce:c3:8c:14:b4:01:1a:f0:1f:3a:98:bb:
         d5:39:ee:5d:39:bc:81:f3:6a:c8:40:14:3b:d1:f4:a5:15:bc:
         17:ec:b9:4c:0e:20:1a:43:be:a5:7f:d6:35:5b:72:ac:6f:f3:
         01:66:a8:f0:5e:1f:7e:47:2a:8b:36:e8:24:c9:a2:82:ed:b8:
         cc:44:95:2c:75:5b:92:79:f0:23:bc:72:dd:f8:8e:4f:c9:e1:
         fa:4e:40:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:33:47 2026 by rpki-client