Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/3133382e3138352e3135362e302f32322d3234203d3e20323634333432.roa
File:                     3133382e3138352e3135362e302f32322d3234203d3e20323634333432.roa (raw, json)
Hash identifier:          cnzbZ+PHLAjHkOXuZZHC2S/UIcVEQHtc3vmH6IRoJoo=
Subject key identifier:   A9:BD:3A:F9:FA:75:78:DB:A5:2E:24:BE:0C:D4:A9:CB:20:45:E7:A8
Certificate issuer:       /CN=AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD
Certificate serial:       680C3814DE6D1312FA76793CFE43535C19347074
Authority key identifier: AC:9D:ED:B6:6C:13:A6:8A:FC:D2:B7:A3:76:D9:E8:14:C9:F2:0B:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/3133382e3138352e3135362e302f32322d3234203d3e20323634333432.roa
Signing time:             Wed 04 Feb 2026 20:00:10 +0000
ROA not before:           Wed 04 Feb 2026 19:55:10 +0000
ROA not after:            Wed 03 Feb 2027 20:00:10 +0000
asID:                     264342
IP address blocks:        138.185.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.crl
                          rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 12:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:0c:38:14:de:6d:13:12:fa:76:79:3c:fe:43:53:5c:19:34:70:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD
        Validity
            Not Before: Feb  4 19:55:10 2026 GMT
            Not After : Feb  3 20:00:10 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:53:10:d6:c0:b5:a4:ce:4a:42:eb:44:d0:db:
                    24:34:55:37:14:de:8d:67:e2:71:3b:6f:fb:e0:c5:
                    f1:ff:88:06:01:c7:00:7a:e7:4d:8a:32:50:08:25:
                    07:79:00:a4:11:4b:ec:3f:f8:51:c1:c0:fa:b9:e2:
                    51:f7:80:be:34:be:f5:b2:8a:86:05:03:92:06:d6:
                    0c:94:63:bd:3f:0d:87:55:09:a7:18:bb:63:4b:2f:
                    8b:55:dd:77:59:a4:ed:bf:72:28:06:8f:59:f0:46:
                    d2:5d:4d:25:a8:8a:a5:90:8d:3b:03:68:43:3b:ab:
                    6a:df:58:d5:f6:82:a6:44:f0:11:77:ca:6d:0c:6a:
                    41:69:e7:6a:70:4f:bd:65:18:54:bf:1d:32:da:30:
                    79:68:ce:30:d7:7f:3e:0d:d4:1f:00:b9:71:06:4a:
                    3e:ba:ef:42:44:b3:6b:78:e2:6c:c3:e9:f6:8c:1f:
                    6c:ed:cc:c4:40:df:70:44:0e:9f:8f:f7:af:a9:43:
                    e0:8c:fc:00:31:01:94:64:dd:08:7a:02:2b:ef:ed:
                    62:a1:f8:8c:b1:ef:15:34:b5:aa:ba:12:25:8c:3f:
                    78:bb:0a:37:aa:f2:9d:16:4b:e9:49:98:50:d1:a5:
                    aa:51:4b:44:91:12:3f:99:9b:a8:61:84:82:83:16:
                    30:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:BD:3A:F9:FA:75:78:DB:A5:2E:24:BE:0C:D4:A9:CB:20:45:E7:A8
            X509v3 Authority Key Identifier:
                keyid:AC:9D:ED:B6:6C:13:A6:8A:FC:D2:B7:A3:76:D9:E8:14:C9:F2:0B:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/3133382e3138352e3135362e302f32322d3234203d3e20323634333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:44:e0:ab:ba:4a:28:5b:22:d6:eb:4a:23:5e:3b:e0:b9:97:
         b0:1b:0c:1f:d1:75:32:ea:0c:1b:25:9b:97:11:c6:fb:be:67:
         9a:58:87:45:ce:d9:06:2f:06:88:87:b2:be:8e:f4:eb:1f:e4:
         95:ac:85:27:e6:98:a2:ef:fd:38:73:39:82:2c:13:75:6c:06:
         93:aa:0c:1f:8b:1c:7c:79:07:0a:23:f5:c3:64:63:82:74:dc:
         f1:9c:f4:d8:61:d4:2f:8a:a8:49:4f:9e:f2:1e:45:1b:d1:82:
         35:a9:b8:2b:13:be:4b:57:54:80:e5:09:c9:97:ae:84:5a:51:
         d0:d5:60:f0:5f:7a:53:1d:3b:41:c4:69:fc:28:2f:28:cf:31:
         9a:a0:87:0c:bb:a9:29:7e:76:81:2f:5a:46:15:b7:88:3e:16:
         96:07:18:64:20:6b:5b:1f:d8:e4:50:f0:30:d7:03:8b:94:dc:
         38:de:a9:85:27:41:48:87:46:44:35:ce:3b:72:f8:7d:75:d3:
         67:cf:b7:83:2e:9f:03:6e:c4:94:aa:5b:47:07:d7:63:e6:9d:
         c4:b4:fc:83:5b:95:14:49:2e:95:98:51:4c:9d:4e:08:76:22:
         1d:7a:82:de:03:a3:ff:a1:36:54:b6:41:53:bf:f1:fa:d3:0b:
         64:e5:32:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:07:26 2026 by rpki-client