Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/3133382e3235352e3232302e302f32332d3233203d3e20323633393934.roa
File:                     3133382e3235352e3232302e302f32332d3233203d3e20323633393934.roa (raw, json)
Hash identifier:          2f9g01RESvHHu+LczLkOSZeRFpFhquSwzXumF0RBcqg=
Subject key identifier:   DD:0E:32:85:D3:63:57:16:B5:CE:16:F3:A1:49:11:CA:84:EE:C2:C2
Certificate issuer:       /CN=6933A3E9616B92D4A6606885C3C206355CC19035
Certificate serial:       678A057D0C7BCD3CF3BB065B313059C08B253B33
Authority key identifier: 69:33:A3:E9:61:6B:92:D4:A6:60:68:85:C3:C2:06:35:5C:C1:90:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6933A3E9616B92D4A6606885C3C206355CC19035.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/3133382e3235352e3232302e302f32332d3233203d3e20323633393934.roa
Signing time:             Wed 04 Feb 2026 19:00:00 +0000
ROA not before:           Wed 04 Feb 2026 18:55:00 +0000
ROA not after:            Wed 03 Feb 2027 19:00:00 +0000
asID:                     263994
IP address blocks:        138.255.220.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/6933A3E9616B92D4A6606885C3C206355CC19035.crl
                          rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/6933A3E9616B92D4A6606885C3C206355CC19035.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6933A3E9616B92D4A6606885C3C206355CC19035.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 09:28:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:8a:05:7d:0c:7b:cd:3c:f3:bb:06:5b:31:30:59:c0:8b:25:3b:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6933A3E9616B92D4A6606885C3C206355CC19035
        Validity
            Not Before: Feb  4 18:55:00 2026 GMT
            Not After : Feb  3 19:00:00 2027 GMT
        Subject: CN=DD0E3285D3635716B5CE16F3A14911CA84EEC2C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ed:39:c4:62:c9:49:39:db:38:a5:d2:53:ca:
                    25:3f:cc:ef:a5:02:29:50:e8:72:85:82:0a:72:d1:
                    43:42:07:d3:2b:91:2a:74:8f:14:b5:19:9b:fb:ea:
                    b6:84:4c:8a:e3:aa:02:9c:c7:bd:41:2f:d9:ce:0b:
                    6b:47:d3:8e:05:91:4f:97:57:d0:47:3c:f5:ff:60:
                    3a:22:02:cc:5c:a1:4a:90:3e:06:6d:08:b8:b4:7a:
                    46:dd:6c:fb:26:10:ef:3c:e6:98:d6:f3:9e:76:37:
                    fb:3f:4b:73:f9:d5:3b:7e:80:2b:02:77:af:b7:1a:
                    c2:b2:a4:ce:3d:99:03:cb:f0:42:92:7a:64:14:78:
                    36:17:cc:42:b4:7e:01:92:be:85:97:bd:ae:bb:f6:
                    8e:68:29:d6:c7:81:bc:8f:92:03:5a:6d:c4:a6:4d:
                    cb:8b:20:0d:17:c3:8c:3c:c0:48:c1:3e:8f:ca:eb:
                    2d:45:54:dc:fd:6d:b8:20:f1:7f:da:c3:e9:cc:29:
                    d5:ca:89:18:c8:a4:ad:4d:cb:6b:28:24:c4:09:72:
                    60:c5:6a:3e:5b:55:dd:b8:8c:a0:40:9d:cf:b4:2b:
                    3c:14:47:71:bd:46:81:a2:a7:42:d4:52:83:f0:f8:
                    88:e8:da:41:ab:07:23:d1:54:21:cc:c0:34:29:e0:
                    03:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:0E:32:85:D3:63:57:16:B5:CE:16:F3:A1:49:11:CA:84:EE:C2:C2
            X509v3 Authority Key Identifier:
                keyid:69:33:A3:E9:61:6B:92:D4:A6:60:68:85:C3:C2:06:35:5C:C1:90:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/6933A3E9616B92D4A6606885C3C206355CC19035.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6933A3E9616B92D4A6606885C3C206355CC19035.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/3133382e3235352e3232302e302f32332d3233203d3e20323633393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:31:a5:9b:fa:ec:63:00:2b:08:2c:94:d4:6b:de:38:70:a8:
         c9:2a:7b:d7:e2:f3:ae:1d:7b:84:e8:5c:20:96:91:63:37:34:
         be:36:30:7f:20:a5:27:af:81:ee:02:ab:cf:e7:56:13:cf:c7:
         45:5e:7d:b9:5f:e8:c8:12:76:80:5e:38:75:ef:ad:00:0d:ea:
         62:b3:3d:f5:0e:be:da:b5:53:be:d2:95:40:e5:61:02:4b:60:
         f6:12:00:b4:b0:32:98:ec:1e:6b:53:1f:5f:fe:35:4f:32:39:
         76:28:05:87:91:c6:10:fb:9f:34:1c:83:80:31:fd:65:06:16:
         0c:d5:a4:93:80:12:c5:25:0c:ff:ab:95:6b:8f:e2:05:96:d5:
         a9:f0:9e:e3:41:08:43:9d:bb:8d:e7:b0:96:7c:cc:5b:a0:fe:
         fe:b4:2e:fe:37:c8:fa:e6:f2:32:42:93:93:db:d9:8d:11:6f:
         29:c4:00:4d:6a:f5:c8:5f:1d:6b:eb:7b:cb:9b:8a:30:62:25:
         af:ec:de:0d:53:8b:f5:45:76:6b:b4:3d:4d:a1:47:cc:d1:db:
         0c:45:6a:7d:1f:1a:22:54:dd:a9:00:ed:11:3b:69:4c:63:d3:
         c7:29:9a:b5:09:42:0e:62:05:c8:52:ab:76:35:8a:ae:80:01:
         4c:18:08:bc
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUZ4oFfQx7zTzzuwZbMTBZwIslOzMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjkzM0EzRTk2MTZCOTJENEE2NjA2ODg1QzNDMjA2MzU1
Q0MxOTAzNTAeFw0yNjAyMDQxODU1MDBaFw0yNzAyMDMxOTAwMDBaMDMxMTAvBgNV
BAMTKEREMEUzMjg1RDM2MzU3MTZCNUNFMTZGM0ExNDkxMUNBODRFRUMyQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDx7TnEYslJOds4pdJTyiU/zO+l
AilQ6HKFggpy0UNCB9MrkSp0jxS1GZv76raETIrjqgKcx71BL9nOC2tH044FkU+X
V9BHPPX/YDoiAsxcoUqQPgZtCLi0ekbdbPsmEO885pjW8552N/s/S3P51Tt+gCsC
d6+3GsKypM49mQPL8EKSemQUeDYXzEK0fgGSvoWXva679o5oKdbHgbyPkgNabcSm
TcuLIA0Xw4w8wEjBPo/K6y1FVNz9bbgg8X/aw+nMKdXKiRjIpK1Ny2soJMQJcmDF
aj5bVd24jKBAnc+0KzwUR3G9RoGip0LUUoPw+Ijo2kGrByPRVCHMwDQp4AN3AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU3Q4yhdNjVxa1zhbzoUkRyoTuwsIwHwYDVR0j
BBgwFoAUaTOj6WFrktSmYGiFw8IGNVzBkDUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWhjU1ZnQTdHVUg0cWtBc2tzanJDYlhGdUdOeFdTZmtDTVFaNUxVVTZ4
dmkvMS82OTMzQTNFOTYxNkI5MkQ0QTY2MDY4ODVDM0MyMDYzNTVDQzE5MDM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY5MzNBM0U5NjE2QjkyRDRB
NjYwNjg4NUMzQzIwNjM1NUNDMTkwMzUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FoY1NWZ0E3R1VINHFrQXNrc2pyQ2JYRnVHTnhXU2ZrQ01RWjVMVVU2eHZpLzEv
MzEzMzM4MmUzMjM1MzUyZTMyMzIzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMzM5MzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYr/3DANBgkqhkiG9w0BAQsFAAOCAQEAqjGl
m/rsYwArCCyU1GveOHCoySp71+Lzrh17hOhcIJaRYzc0vjYwfyClJ6+B7gKrz+dW
E8/HRV59uV/oyBJ2gF44de+tAA3qYrM99Q6+2rVTvtKVQOVhAktg9hIAtLAymOwe
a1MfX/41TzI5digFh5HGEPufNByDgDH9ZQYWDNWkk4ASxSUM/6uVa4/iBZbVqfCe
40EIQ527jeewlnzMW6D+/rQu/jfI+ubyMkKTk9vZjRFvKcQATWr1yF8da+t7y5uK
MGIlr+zeDVOL9UV2a7Q9TaFHzNHbDEVqfR8aIlTdqQDtETtpTGPTxymatQlCDmIF
yFKrdjWKroABTBgIvA==
-----END CERTIFICATE-----
Generated at Thu Feb 19 01:35:16 2026 by rpki-client