Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/3133382e3235352e3232322e302f32342d3234203d3e20323633393934.roa
File:                     3133382e3235352e3232322e302f32342d3234203d3e20323633393934.roa (raw, json)
Hash identifier:          cAzlYh8b6RCiGbn91HtPJeqh7dwk9+M458xJfiyPWy0=
Subject key identifier:   1A:52:87:6B:D8:AD:27:99:8E:6D:90:81:A1:FC:F5:CB:54:E8:6F:CE
Certificate issuer:       /CN=6933A3E9616B92D4A6606885C3C206355CC19035
Certificate serial:       21AA33EE3C5DB99417C59D554BA9E37464330A01
Authority key identifier: 69:33:A3:E9:61:6B:92:D4:A6:60:68:85:C3:C2:06:35:5C:C1:90:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6933A3E9616B92D4A6606885C3C206355CC19035.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/3133382e3235352e3232322e302f32342d3234203d3e20323633393934.roa
Signing time:             Wed 04 Feb 2026 19:00:00 +0000
ROA not before:           Wed 04 Feb 2026 18:55:00 +0000
ROA not after:            Wed 03 Feb 2027 19:00:00 +0000
asID:                     263994
IP address blocks:        138.255.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/6933A3E9616B92D4A6606885C3C206355CC19035.crl
                          rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/6933A3E9616B92D4A6606885C3C206355CC19035.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6933A3E9616B92D4A6606885C3C206355CC19035.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 09:28:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:aa:33:ee:3c:5d:b9:94:17:c5:9d:55:4b:a9:e3:74:64:33:0a:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6933A3E9616B92D4A6606885C3C206355CC19035
        Validity
            Not Before: Feb  4 18:55:00 2026 GMT
            Not After : Feb  3 19:00:00 2027 GMT
        Subject: CN=1A52876BD8AD27998E6D9081A1FCF5CB54E86FCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b9:a4:46:47:d2:98:85:cc:f6:49:52:a6:da:
                    b7:74:72:75:7f:74:23:47:be:ca:53:2f:41:ae:6b:
                    8b:ee:33:41:8a:7e:ca:d0:a9:04:04:37:55:56:f6:
                    3c:17:56:be:fd:c5:eb:eb:eb:ad:5f:50:cc:bf:de:
                    46:01:76:2d:8d:20:5f:2f:95:b5:28:f6:c0:7e:a0:
                    7a:5d:98:69:00:1a:1a:89:66:bc:0d:c6:33:06:4c:
                    98:8a:f8:e0:cc:ec:1c:09:fe:20:f2:73:13:8e:b6:
                    f1:7d:49:6e:a3:ed:54:e9:3d:cb:93:f4:84:ea:b1:
                    9d:08:4b:96:59:34:8d:b3:c3:20:33:ba:10:93:29:
                    76:16:9e:d9:9d:89:bf:05:4d:ed:06:a7:a8:99:94:
                    df:c1:2b:69:d1:2b:86:6f:65:f3:de:99:95:60:0c:
                    ad:8d:2e:79:dd:73:dd:9d:8e:8c:1c:98:40:2d:cd:
                    98:0f:4b:9d:ef:4d:7d:72:f9:6c:8c:fc:30:a9:de:
                    10:bd:ec:ea:2c:4e:7d:fa:06:1f:f5:79:dc:85:cf:
                    b2:65:8e:ae:b9:fb:5f:db:43:1d:f2:4d:41:6f:01:
                    0a:42:b4:0c:3e:4c:ac:32:be:03:f8:d7:67:2a:f3:
                    2d:93:55:b3:98:d7:83:42:10:aa:05:33:e6:4a:ef:
                    7f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:52:87:6B:D8:AD:27:99:8E:6D:90:81:A1:FC:F5:CB:54:E8:6F:CE
            X509v3 Authority Key Identifier:
                keyid:69:33:A3:E9:61:6B:92:D4:A6:60:68:85:C3:C2:06:35:5C:C1:90:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/6933A3E9616B92D4A6606885C3C206355CC19035.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6933A3E9616B92D4A6606885C3C206355CC19035.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/3133382e3235352e3232322e302f32342d3234203d3e20323633393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:48:ad:22:3a:3b:b0:47:63:9b:58:90:a1:1e:fb:ae:32:0e:
         62:12:71:19:ab:af:26:8e:4b:ee:da:9f:b5:cf:b5:3e:6c:bb:
         3d:ca:24:7c:0c:a5:77:0b:5a:34:bc:8a:9a:f6:85:6d:5d:73:
         ec:a3:82:a1:00:46:df:87:f9:fa:f8:ae:86:ff:cc:d3:81:61:
         2a:a5:10:55:b7:11:a2:5a:13:7e:60:74:35:b8:51:4d:27:4d:
         8b:70:88:ab:5e:cd:4e:81:10:81:3b:b2:ba:34:a5:b5:6d:39:
         72:e5:0b:d4:56:84:38:27:3c:08:c2:4e:ef:e8:38:bb:84:b4:
         12:32:96:11:b8:ca:98:80:c3:b8:e8:0d:2c:07:6d:d2:2e:38:
         0c:db:26:54:ab:c0:8d:dc:64:f3:c9:8b:83:8d:2b:77:98:3e:
         bc:25:63:d1:f8:f6:96:0c:7b:3a:f9:f8:63:d3:43:6a:80:9d:
         51:8b:0b:8a:50:4d:d3:d6:0c:62:12:fe:5e:c4:f1:92:15:58:
         de:01:64:28:df:74:c4:50:47:f9:60:cc:a7:8f:25:63:df:48:
         d3:ee:0f:d3:6e:2b:02:d3:8d:71:ed:c4:ac:c7:8a:6f:d6:b4:
         6a:5e:2d:90:e2:84:7c:d3:e4:e1:e1:8e:30:a5:af:99:e3:73:
         36:74:91:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:02:47 2026 by rpki-client