Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/0/3133382e3138352e3230302e302f32322d3234203d3e20323633383439.roa
File:                     3133382e3138352e3230302e302f32322d3234203d3e20323633383439.roa (raw, json)
Hash identifier:          EizirriPaFn6uB6uT4/lv3/GCq6+CleJ0/xcDLX8WYk=
Subject key identifier:   24:79:B6:4B:F3:14:3A:15:7B:ED:24:65:47:7F:AE:F7:A0:3B:A0:AB
Certificate issuer:       /CN=9D382AC121626FCAD8CF3A3959C2979F23FCA68C
Certificate serial:       4255BE9F1E0ABC14A51918D2C722C4F6EADE289C
Authority key identifier: 9D:38:2A:C1:21:62:6F:CA:D8:CF:3A:39:59:C2:97:9F:23:FC:A6:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D382AC121626FCAD8CF3A3959C2979F23FCA68C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/0/3133382e3138352e3230302e302f32322d3234203d3e20323633383439.roa
Signing time:             Sun 18 Jan 2026 17:40:12 +0000
ROA not before:           Sun 18 Jan 2026 17:35:12 +0000
ROA not after:            Sun 17 Jan 2027 17:40:12 +0000
asID:                     263849
IP address blocks:        138.185.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/0/9D382AC121626FCAD8CF3A3959C2979F23FCA68C.crl
                          rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/0/9D382AC121626FCAD8CF3A3959C2979F23FCA68C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D382AC121626FCAD8CF3A3959C2979F23FCA68C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 13:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:55:be:9f:1e:0a:bc:14:a5:19:18:d2:c7:22:c4:f6:ea:de:28:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D382AC121626FCAD8CF3A3959C2979F23FCA68C
        Validity
            Not Before: Jan 18 17:35:12 2026 GMT
            Not After : Jan 17 17:40:12 2027 GMT
        Subject: CN=2479B64BF3143A157BED2465477FAEF7A03BA0AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9f:9b:85:99:08:eb:bf:bc:34:de:06:17:a1:
                    af:d9:fc:30:4f:07:2b:75:f7:13:fa:45:f7:0a:09:
                    d9:59:ff:03:db:12:1d:33:4c:a8:21:f4:9c:7c:83:
                    ac:26:73:09:99:93:c8:45:d5:af:41:83:c0:88:e1:
                    ca:8f:74:b4:97:1a:40:3a:03:80:81:4b:98:1f:3c:
                    fe:cb:60:f7:47:a9:28:64:e1:0b:d6:b4:dc:54:f4:
                    b5:59:66:24:70:6c:8a:00:b0:bb:d1:2f:b6:54:bb:
                    f5:1e:c5:b2:6b:28:6d:77:fc:7f:20:02:1a:ee:e9:
                    9d:51:a0:41:23:36:c3:65:16:9d:20:79:8f:37:66:
                    c5:be:6b:53:68:8b:55:f3:79:00:52:11:36:9a:38:
                    d1:d4:55:80:c0:0c:7a:e4:85:1f:7e:6d:3b:44:64:
                    b3:f7:9e:22:ef:19:0e:98:94:37:a5:37:21:8f:35:
                    21:92:4b:0a:95:f5:76:44:70:1e:34:af:02:e9:37:
                    ef:be:55:d1:75:e6:42:a3:16:45:ad:74:c8:2f:5c:
                    3e:ac:cc:c6:c5:b8:26:da:08:d1:f0:2f:72:d2:18:
                    19:b5:81:64:cd:8e:33:c5:b2:7e:18:c9:31:e7:e9:
                    9a:5f:a3:33:f7:07:b5:d7:3f:06:2e:cd:dc:41:33:
                    b5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:79:B6:4B:F3:14:3A:15:7B:ED:24:65:47:7F:AE:F7:A0:3B:A0:AB
            X509v3 Authority Key Identifier:
                keyid:9D:38:2A:C1:21:62:6F:CA:D8:CF:3A:39:59:C2:97:9F:23:FC:A6:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/0/9D382AC121626FCAD8CF3A3959C2979F23FCA68C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D382AC121626FCAD8CF3A3959C2979F23FCA68C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/0/3133382e3138352e3230302e302f32322d3234203d3e20323633383439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:dc:55:74:c7:64:19:e4:f8:32:ef:76:c7:8c:ed:fe:72:48:
         3e:65:d1:98:36:96:f4:31:38:93:14:b3:64:b5:b8:eb:33:d7:
         d0:7d:3a:c7:fb:e9:1a:67:74:f3:9c:cf:8a:b1:e7:04:37:b5:
         e8:bd:a5:80:8e:5e:46:2b:3e:31:a7:34:49:1b:eb:f1:6d:57:
         e9:8c:7e:c5:da:a2:2e:80:9f:7b:91:1d:24:19:79:66:47:06:
         91:50:db:74:dd:a9:7d:f9:f4:fb:81:ad:26:31:a7:12:2c:8c:
         ed:e6:d8:97:89:7f:9a:2e:fc:69:27:c5:24:5d:94:7e:93:88:
         f3:43:b4:29:47:2e:53:f5:02:b5:b6:50:69:5e:44:1f:55:32:
         70:74:40:3e:e5:e7:4e:54:6b:b7:e1:5b:e5:62:ae:b2:1d:e6:
         6a:fa:9b:ca:7c:37:76:f9:59:ef:5b:7b:a4:cc:f1:df:cd:a4:
         95:d9:74:23:fe:ed:d0:d9:65:23:be:05:71:8b:13:79:f1:28:
         7f:fa:04:8c:a7:6a:8f:b5:4c:f7:11:8e:fc:21:13:d3:cc:63:
         0f:66:bc:1e:5b:22:5e:c6:cd:9f:72:1e:b7:c1:6b:e3:c9:50:
         2b:2c:33:7c:33:be:6c:8b:6c:68:2c:9d:06:8b:64:98:46:7f:
         29:0d:bd:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:05:28 2026 by rpki-client