Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/3133382e35392e34322e302f32332d3234203d3e20323634353936.roa
File:                     3133382e35392e34322e302f32332d3234203d3e20323634353936.roa (raw, json)
Hash identifier:          keJaZ8kAB7Es0UHhn4B2kisQqsML1zlhgN1Db442CDU=
Subject key identifier:   AA:B0:7C:AB:96:94:18:6F:BB:D8:AF:90:FF:82:C1:A2:5C:19:66:B2
Certificate issuer:       /CN=D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7
Certificate serial:       2D149B25E4527A4FAAEC9B48B3726BFF65B20705
Authority key identifier: D8:3B:D8:1B:DC:0A:01:D1:AE:F1:AF:D4:0B:C6:A4:E7:2C:94:11:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/3133382e35392e34322e302f32332d3234203d3e20323634353936.roa
Signing time:             Thu 05 Feb 2026 18:46:28 +0000
ROA not before:           Thu 05 Feb 2026 18:41:28 +0000
ROA not after:            Thu 04 Feb 2027 18:46:28 +0000
asID:                     264596
IP address blocks:        138.59.42.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.crl
                          rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 08:33:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:14:9b:25:e4:52:7a:4f:aa:ec:9b:48:b3:72:6b:ff:65:b2:07:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7
        Validity
            Not Before: Feb  5 18:41:28 2026 GMT
            Not After : Feb  4 18:46:28 2027 GMT
        Subject: CN=AAB07CAB9694186FBBD8AF90FF82C1A25C1966B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6a:f8:b9:0e:c7:c2:ee:7b:78:89:75:b6:e8:
                    c7:90:0b:af:3d:5a:b0:cc:dc:24:8f:b9:4d:3d:fc:
                    ef:ee:0f:7e:f5:d6:d6:90:76:af:9e:0b:6d:92:b3:
                    84:ee:fb:30:1e:95:07:b8:0a:83:75:1d:fc:49:d9:
                    98:05:c3:c7:eb:98:c2:e2:44:4d:6b:a5:97:2a:77:
                    9c:35:cd:db:87:a6:a9:7f:13:84:de:fa:2a:e0:15:
                    f2:11:ed:a6:d1:1e:3b:ca:ed:cc:ae:5c:ee:54:b3:
                    ee:26:bd:d0:34:2b:1e:ec:0a:ab:c9:bd:36:b3:b1:
                    ea:2b:ea:cc:4d:46:85:9a:8d:2e:94:ec:61:bc:10:
                    8e:46:3f:28:df:a9:b8:95:c6:60:ec:6c:3b:75:b9:
                    c2:55:57:66:0f:20:90:c2:01:f5:15:2a:a9:17:07:
                    4a:82:6f:eb:62:2a:b7:a8:58:6a:1a:1f:55:b4:da:
                    28:50:51:1f:60:bf:25:e0:58:25:b4:48:ca:35:88:
                    35:ee:89:68:4f:6b:49:07:65:86:ed:e1:d0:f3:e3:
                    eb:08:95:9e:aa:bb:a3:6b:82:79:bc:33:f6:68:19:
                    bf:6b:1b:ed:0d:07:8e:76:5d:9c:14:c3:1e:1f:c6:
                    4d:74:18:9f:f1:f7:8a:3c:3c:4e:78:e9:49:19:2b:
                    6b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B0:7C:AB:96:94:18:6F:BB:D8:AF:90:FF:82:C1:A2:5C:19:66:B2
            X509v3 Authority Key Identifier:
                keyid:D8:3B:D8:1B:DC:0A:01:D1:AE:F1:AF:D4:0B:C6:A4:E7:2C:94:11:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/3133382e35392e34322e302f32332d3234203d3e20323634353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:2e:9f:41:01:c2:bc:36:44:c2:f4:db:93:93:4a:8d:51:23:
         e4:74:d0:0a:51:14:48:76:70:38:aa:d3:a6:cb:e2:30:c7:b3:
         6b:40:b3:72:25:44:da:50:b4:1f:9a:58:d6:60:03:f9:11:5f:
         ff:7a:5e:f6:c9:4e:5e:80:e9:ec:50:6a:d5:e8:b7:14:b1:7d:
         b7:48:9b:5a:8c:e0:bd:17:ef:86:ef:4a:2b:73:97:b5:e1:6e:
         60:85:f3:55:c4:d0:f8:21:30:72:cf:f2:e3:7d:a1:83:c5:c0:
         c1:35:07:9f:8a:30:9c:c7:eb:d3:17:12:cc:76:60:5c:74:1e:
         b6:2b:89:70:4f:6c:7d:32:d2:06:d2:4a:5b:02:9b:38:ad:17:
         8e:9a:e4:ad:b8:f4:fa:b6:ac:18:dc:67:08:10:23:a6:48:9a:
         5b:88:2f:fe:de:ce:2c:a0:59:8d:59:65:7a:f9:36:4a:04:62:
         31:38:91:90:30:d0:2a:c5:71:86:79:bb:c9:86:81:0c:05:a2:
         fd:27:9d:d1:32:18:ed:80:0b:98:b8:49:b6:1a:ce:77:f8:37:
         e0:f3:f7:9f:79:52:b0:56:e3:57:e0:1c:11:54:2e:53:e6:a5:
         87:1f:da:79:b6:9a:36:79:b2:ac:c5:8e:dc:a7:e0:1c:94:01:
         4d:ea:73:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 12:55:54 2026 by rpki-client