Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/3133382e3235352e3233302e302f32342d3234203d3e20323633393935.roa
File:                     3133382e3235352e3233302e302f32342d3234203d3e20323633393935.roa (raw, json)
Hash identifier:          99Zdyw7MpPTk0rN2mfzd7WYuEGKE7Ak0RKoNlKH8Flk=
Subject key identifier:   A5:D4:15:D5:1D:F9:12:B8:AC:A9:23:5E:F9:69:58:DC:7E:05:28:FA
Certificate issuer:       /CN=F5FDFFF7EB44AA11B6419FC83DFF9C7046543EC4
Certificate serial:       6FE23D2212455E439A7F8BDD373B316058C23791
Authority key identifier: F5:FD:FF:F7:EB:44:AA:11:B6:41:9F:C8:3D:FF:9C:70:46:54:3E:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5FDFFF7EB44AA11B6419FC83DFF9C7046543EC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/3133382e3235352e3233302e302f32342d3234203d3e20323633393935.roa
Signing time:             Thu 12 Feb 2026 16:28:43 +0000
ROA not before:           Thu 12 Feb 2026 16:23:43 +0000
ROA not after:            Thu 11 Feb 2027 16:28:43 +0000
asID:                     263995
IP address blocks:        138.255.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/F5FDFFF7EB44AA11B6419FC83DFF9C7046543EC4.crl
                          rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/F5FDFFF7EB44AA11B6419FC83DFF9C7046543EC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5FDFFF7EB44AA11B6419FC83DFF9C7046543EC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:17:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e2:3d:22:12:45:5e:43:9a:7f:8b:dd:37:3b:31:60:58:c2:37:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5FDFFF7EB44AA11B6419FC83DFF9C7046543EC4
        Validity
            Not Before: Feb 12 16:23:43 2026 GMT
            Not After : Feb 11 16:28:43 2027 GMT
        Subject: CN=A5D415D51DF912B8ACA9235EF96958DC7E0528FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4d:8a:07:b1:95:84:68:32:89:ac:4a:5a:9c:
                    5c:c6:20:df:52:66:6a:3c:4e:76:36:fd:64:94:19:
                    e0:cd:02:2f:b6:5f:8c:17:83:3c:3a:e1:45:a9:5b:
                    8a:48:9e:09:72:13:bc:cd:ba:a8:d0:a9:c0:26:19:
                    2d:29:23:a9:46:c0:bc:c7:83:67:d7:9c:ae:86:bc:
                    86:d9:c0:20:bb:58:cc:17:c9:a4:e0:80:49:8c:43:
                    e2:83:54:4f:58:1d:4e:cc:3c:ea:35:cc:44:65:75:
                    3d:f6:71:6f:a5:30:ff:40:72:65:8b:4e:7a:64:42:
                    3f:a4:f3:f9:51:10:2c:ba:a6:10:9b:a7:95:74:bf:
                    74:d3:cd:76:f2:e3:4e:b3:2f:9e:89:07:5c:b9:21:
                    be:4a:2f:f2:58:b4:63:ed:fd:a9:5e:32:8d:65:99:
                    86:80:9a:e7:73:5c:02:80:e1:cd:74:1b:51:f1:0f:
                    50:09:97:e6:24:05:e4:34:40:59:a2:88:bc:48:4b:
                    aa:81:f2:d5:34:a9:26:2a:13:56:06:51:21:5b:da:
                    33:76:36:56:10:8a:88:63:5c:11:61:7a:ba:d6:c3:
                    d7:16:66:18:f4:f0:c1:cc:68:8c:67:fb:2b:91:47:
                    7e:7f:d1:c9:42:a0:65:0f:0f:e3:c8:2d:66:42:8d:
                    12:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D4:15:D5:1D:F9:12:B8:AC:A9:23:5E:F9:69:58:DC:7E:05:28:FA
            X509v3 Authority Key Identifier:
                keyid:F5:FD:FF:F7:EB:44:AA:11:B6:41:9F:C8:3D:FF:9C:70:46:54:3E:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/F5FDFFF7EB44AA11B6419FC83DFF9C7046543EC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5FDFFF7EB44AA11B6419FC83DFF9C7046543EC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/3133382e3235352e3233302e302f32342d3234203d3e20323633393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:2a:3e:ac:a1:22:8e:d3:2f:cc:59:65:6a:56:82:de:b4:06:
         d1:b3:cf:6b:91:4e:69:45:5b:5e:b2:bb:80:72:9e:17:48:d1:
         97:59:42:96:f8:9e:58:92:34:29:df:da:14:8c:e7:3c:fa:9d:
         a6:ca:b3:40:bc:04:53:ba:70:40:ea:f5:86:31:5c:18:fc:e1:
         a7:fc:02:a9:d6:c2:48:85:11:a0:39:f3:81:50:9e:79:34:60:
         fd:de:56:c8:6a:dc:e2:fe:60:76:a1:0c:5a:6c:0f:ee:03:32:
         d5:f6:3e:e5:7e:ce:a3:85:63:44:95:48:2e:97:0b:6d:d8:a8:
         b9:00:1a:ba:e3:99:e4:cb:fb:ea:fc:ea:e2:2b:0a:42:cd:e9:
         68:a5:5e:a9:26:a5:e8:53:5c:d1:29:53:2e:d2:0f:d4:2d:4a:
         ce:35:ff:9d:d9:e8:2e:ff:80:3a:a6:00:e4:a2:d5:0a:1c:e5:
         07:ff:a3:b2:5a:a3:81:81:a2:54:96:13:13:a1:1b:35:90:17:
         48:a8:f5:bd:47:11:4b:b6:3b:cd:bc:69:3f:37:d3:3f:83:39:
         ed:68:3d:8b:fe:da:82:65:87:b0:b9:20:56:11:84:ea:65:45:
         57:dc:44:f3:03:3b:10:72:58:ca:7e:5c:6c:db:14:76:9c:0b:
         7f:1d:9c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 07:21:27 2026 by rpki-client