Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3133312e3235352e3131362e302f32322d3332203d3e203532373833.roa
File:                     3133312e3235352e3131362e302f32322d3332203d3e203532373833.roa (raw, json)
Hash identifier:          rhnmrS045TRrQyDAyyNJP74G7MVhcwU8A3NWp98Sq8Y=
Subject key identifier:   42:21:DE:3A:53:6D:8C:27:B1:C5:1D:16:A5:03:5E:FB:57:B4:8C:FC
Certificate issuer:       /CN=3DDE2C96A736983C4145E6A74FA601EF275DE118
Certificate serial:       60BD7D63860AD081680CEFFAA32DB3869ABBCD2F
Authority key identifier: 3D:DE:2C:96:A7:36:98:3C:41:45:E6:A7:4F:A6:01:EF:27:5D:E1:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3133312e3235352e3131362e302f32322d3332203d3e203532373833.roa
Signing time:             Thu 05 Feb 2026 23:00:44 +0000
ROA not before:           Thu 05 Feb 2026 22:55:44 +0000
ROA not after:            Thu 04 Feb 2027 23:00:44 +0000
asID:                     52783
IP address blocks:        131.255.116.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.crl
                          rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 03:45:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:bd:7d:63:86:0a:d0:81:68:0c:ef:fa:a3:2d:b3:86:9a:bb:cd:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DDE2C96A736983C4145E6A74FA601EF275DE118
        Validity
            Not Before: Feb  5 22:55:44 2026 GMT
            Not After : Feb  4 23:00:44 2027 GMT
        Subject: CN=4221DE3A536D8C27B1C51D16A5035EFB57B48CFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:26:42:7d:4d:e0:e9:11:29:f8:0b:7c:ea:8c:
                    8d:c6:5f:83:56:e8:2a:d3:c7:c1:8d:31:a6:01:35:
                    82:b7:5d:f6:a8:f9:52:10:58:8f:1a:3a:57:ed:9d:
                    87:6f:6e:f9:28:5a:2d:9e:03:18:10:32:ef:49:f5:
                    0d:20:e4:af:12:57:23:d7:24:e6:b5:3c:25:7c:72:
                    fc:95:a0:58:7b:c5:2b:36:33:30:c3:fb:3b:01:15:
                    0d:18:38:ac:e4:a2:ab:76:37:ed:92:62:3d:7c:31:
                    0a:62:02:d3:60:cc:d6:53:a7:c3:dd:5d:89:44:09:
                    ec:c7:9f:8f:4c:b6:cc:db:1c:26:99:ce:1e:de:56:
                    e0:25:2d:09:24:8f:57:0f:9e:3d:bf:39:02:b8:98:
                    29:ff:7c:29:45:bd:10:e4:fd:0e:3a:b8:ab:12:fe:
                    91:7b:3c:5a:cc:8c:a6:24:2a:0d:f9:b2:0f:26:2d:
                    eb:b2:67:ad:42:24:04:2d:60:24:ce:28:13:42:28:
                    42:d7:91:dd:33:e8:ba:63:d1:41:0c:10:99:b7:fd:
                    37:42:ae:97:34:6c:de:ad:3e:41:e8:47:28:4e:24:
                    62:9b:fb:bf:2b:04:35:94:9c:11:a6:c2:ac:39:43:
                    2f:f3:90:4d:2a:42:d8:ae:82:26:05:d7:f5:f8:22:
                    8b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:21:DE:3A:53:6D:8C:27:B1:C5:1D:16:A5:03:5E:FB:57:B4:8C:FC
            X509v3 Authority Key Identifier:
                keyid:3D:DE:2C:96:A7:36:98:3C:41:45:E6:A7:4F:A6:01:EF:27:5D:E1:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3133312e3235352e3131362e302f32322d3332203d3e203532373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:8e:b6:99:aa:d8:db:fc:b4:e7:9e:10:09:fc:ff:fe:80:e5:
         52:f4:50:ae:86:5a:ac:50:f5:da:45:2c:29:aa:4d:d2:b4:63:
         7b:7e:2c:d7:24:f7:11:6c:e2:97:00:a4:79:6d:bc:7b:65:84:
         ea:84:f2:a8:54:45:53:fc:b6:03:ee:ae:34:e2:a9:dd:9d:4d:
         a9:5e:37:ba:da:8d:e8:27:93:80:4e:f7:54:5c:6f:02:2a:d4:
         c1:c6:de:06:c0:c3:11:2f:2c:29:27:55:65:54:e4:d5:e7:d4:
         57:d0:e4:a8:6a:06:39:c3:00:c2:38:5f:56:3b:39:8d:b0:7e:
         05:43:82:ea:60:bb:b6:a5:7a:28:5d:63:bc:1b:cb:49:f8:6b:
         f8:d9:fb:ff:90:cf:65:df:02:4b:d1:64:a1:af:0a:18:c5:ef:
         ea:79:93:9e:9e:6e:41:68:40:00:24:54:85:eb:a4:89:17:4a:
         5c:47:36:60:63:ab:2b:49:cd:53:e4:c2:6d:a6:34:9a:3b:73:
         41:04:d2:43:71:4f:71:65:d8:eb:17:e4:76:02:b7:c3:0f:64:
         b6:62:4b:37:a2:d8:f6:91:09:46:6d:df:1a:66:11:cf:2c:8d:
         06:7f:60:f9:ba:f3:61:5a:80:66:6f:be:13:33:fd:73:90:1e:
         49:da:48:be
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYL19Y4YK0IFoDO/6oy2zhpq7zS8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0RERTJDOTZBNzM2OTgzQzQxNDVFNkE3NEZBNjAxRUYy
NzVERTExODAeFw0yNjAyMDUyMjU1NDRaFw0yNzAyMDQyMzAwNDRaMDMxMTAvBgNV
BAMTKDQyMjFERTNBNTM2RDhDMjdCMUM1MUQxNkE1MDM1RUZCNTdCNDhDRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzJkJ9TeDpESn4C3zqjI3GX4NW
6CrTx8GNMaYBNYK3Xfao+VIQWI8aOlftnYdvbvkoWi2eAxgQMu9J9Q0g5K8SVyPX
JOa1PCV8cvyVoFh7xSs2MzDD+zsBFQ0YOKzkoqt2N+2SYj18MQpiAtNgzNZTp8Pd
XYlECezHn49MtszbHCaZzh7eVuAlLQkkj1cPnj2/OQK4mCn/fClFvRDk/Q46uKsS
/pF7PFrMjKYkKg35sg8mLeuyZ61CJAQtYCTOKBNCKELXkd0z6Lpj0UEMEJm3/TdC
rpc0bN6tPkHoRyhOJGKb+78rBDWUnBGmwqw5Qy/zkE0qQtiugiYF1/X4IosLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUQiHeOlNtjCexxR0WpQNe+1e0jPwwHwYDVR0j
BBgwFoAUPd4slqc2mDxBReanT6YB7ydd4RgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjRNd2U4ZHhwdWZLdXJTZjJCeG5TS3ZZZTNoOFJzc2l2NTU3eEI5TjlY
WUEvMS8zRERFMkM5NkE3MzY5ODNDNDE0NUU2QTc0RkE2MDFFRjI3NURFMTE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNEREUyQzk2QTczNjk4M0M0
MTQ1RTZBNzRGQTYwMUVGMjc1REUxMTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I0TXdlOGR4cHVmS3VyU2YyQnhuU0t2WWUzaDhSc3NpdjU1N3hCOU45WFlBLzEv
MzEzMzMxMmUzMjM1MzUyZTMxMzEzNjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDM1
MzIzNzM4MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKD/3QwDQYJKoZIhvcNAQELBQADggEBAIiOtpmq
2Nv8tOeeEAn8//6A5VL0UK6GWqxQ9dpFLCmqTdK0Y3t+LNck9xFs4pcApHltvHtl
hOqE8qhURVP8tgPurjTiqd2dTaleN7rajegnk4BO91RcbwIq1MHG3gbAwxEvLCkn
VWVU5NXn1FfQ5KhqBjnDAMI4X1Y7OY2wfgVDgupgu7aleihdY7wby0n4a/jZ+/+Q
z2XfAkvRZKGvChjF7+p5k56ebkFoQAAkVIXrpIkXSlxHNmBjqytJzVPkwm2mNJo7
c0EE0kNxT3Fl2OsX5HYCt8MPZLZiSzei2PaRCUZt3xpmEc8sjQZ/YPm682FagGZv
vhMz/XOQHknaSL4=
-----END CERTIFICATE-----
Generated at Thu Feb 19 12:01:39 2026 by rpki-client