Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/3133382e39372e32342e302f32322d3234203d3e20323634313138.roa
File:                     3133382e39372e32342e302f32322d3234203d3e20323634313138.roa (raw, json)
Hash identifier:          BbKjWSX1BNqL53gf1loDf0fDUnT62Bw4A5d2ZQuI+3I=
Subject key identifier:   1E:F3:F4:FF:51:8B:92:7B:2A:99:F7:8B:83:E5:1A:21:3D:BA:9C:17
Certificate issuer:       /CN=0B31CCC1E89F4389597737BE4B57373331925A2F
Certificate serial:       55CE6F63A33D84764E1674A852EC02D0A9175A21
Authority key identifier: 0B:31:CC:C1:E8:9F:43:89:59:77:37:BE:4B:57:37:33:31:92:5A:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B31CCC1E89F4389597737BE4B57373331925A2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/3133382e39372e32342e302f32322d3234203d3e20323634313138.roa
Signing time:             Thu 05 Feb 2026 22:26:27 +0000
ROA not before:           Thu 05 Feb 2026 22:21:27 +0000
ROA not after:            Thu 04 Feb 2027 22:26:27 +0000
asID:                     264118
IP address blocks:        138.97.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.crl
                          rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B31CCC1E89F4389597737BE4B57373331925A2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 14:16:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:ce:6f:63:a3:3d:84:76:4e:16:74:a8:52:ec:02:d0:a9:17:5a:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B31CCC1E89F4389597737BE4B57373331925A2F
        Validity
            Not Before: Feb  5 22:21:27 2026 GMT
            Not After : Feb  4 22:26:27 2027 GMT
        Subject: CN=1EF3F4FF518B927B2A99F78B83E51A213DBA9C17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:57:6e:57:a1:8a:97:82:20:84:9a:83:4e:35:
                    69:c7:b6:1a:3e:a4:40:e6:4f:55:d0:fa:39:83:3a:
                    f5:f9:fe:d5:b5:7c:1b:52:7c:12:16:90:ab:c6:ce:
                    ea:91:f7:e0:9f:55:ff:4c:8a:a4:17:11:8b:43:48:
                    bc:04:34:6e:cb:07:fe:87:4e:63:b8:85:78:80:c5:
                    fc:b6:b5:24:53:f9:6b:a5:bc:dc:e1:8b:0e:00:c6:
                    d9:45:b9:06:fd:e3:c5:77:e3:af:76:b6:fb:a4:43:
                    d3:72:2b:11:a6:da:6c:b7:25:d2:14:ca:ee:e4:cc:
                    61:ae:b4:4d:99:30:35:37:a5:e5:9e:2a:43:f8:a2:
                    38:d9:15:2d:53:53:2a:b7:cd:d1:a3:5b:18:8e:fc:
                    a0:9f:44:83:2c:eb:82:ae:99:36:77:20:3b:ef:00:
                    ae:69:ce:b1:7a:20:40:9c:43:a8:cc:24:0a:8d:dd:
                    f1:1c:a3:a2:b1:d9:be:db:9b:63:09:18:03:b5:08:
                    bc:ed:34:e6:fe:5e:b6:e2:3d:fa:23:8e:d8:20:92:
                    d6:26:85:40:30:8d:1c:c4:8c:be:23:46:da:c5:43:
                    9d:03:d7:fb:8c:eb:98:69:53:92:51:f8:f8:00:ce:
                    0a:f9:7c:c7:d3:9e:f8:74:c0:ef:c1:f5:62:e4:2a:
                    03:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F3:F4:FF:51:8B:92:7B:2A:99:F7:8B:83:E5:1A:21:3D:BA:9C:17
            X509v3 Authority Key Identifier:
                keyid:0B:31:CC:C1:E8:9F:43:89:59:77:37:BE:4B:57:37:33:31:92:5A:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B31CCC1E89F4389597737BE4B57373331925A2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/3133382e39372e32342e302f32322d3234203d3e20323634313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:cd:c2:f7:b4:0f:6f:41:65:cb:93:84:6e:84:30:06:fd:5c:
         29:df:f9:3e:e5:d5:8d:83:a7:f0:79:b8:c4:49:dc:1f:8e:0e:
         43:51:23:26:e1:7f:40:6a:c3:65:d6:dc:06:61:a6:04:b7:97:
         69:5e:bf:e5:fc:bd:a8:e1:1e:91:11:db:f6:7a:72:6d:8d:6a:
         56:dc:0f:bd:85:8b:b0:c6:fd:99:49:8c:13:84:89:d1:16:0d:
         95:bc:16:70:7e:ad:23:16:c1:a6:f3:d7:17:69:08:e9:22:42:
         fa:c3:58:1d:cf:31:8b:63:a2:7e:b4:b2:02:e3:53:c5:f7:d2:
         30:0d:37:ae:01:56:b9:2d:33:21:ac:05:cb:bd:2b:7e:d1:e2:
         d6:50:b6:2d:15:14:65:cf:bf:b5:67:ec:b9:37:d7:07:6e:62:
         02:d1:fb:85:bd:4f:72:f8:6d:84:a6:34:d1:42:19:05:3c:6a:
         74:13:ac:a2:ea:ff:96:c4:cd:67:17:34:b3:71:4a:38:6f:c3:
         02:7b:ec:1f:ee:73:fe:e8:e3:b5:f4:c5:61:49:a0:a2:f3:94:
         a0:10:3f:60:cd:89:3f:c1:16:4e:e6:41:dd:de:75:39:67:4d:
         ff:96:bf:fe:bb:48:39:76:6d:63:7e:67:e4:c2:aa:8d:dd:99:
         a2:bb:e0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:02:04 2026 by rpki-client