Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/3133382e3230342e3131332e302f32342d3234203d3e20323633383937.roa
File:                     3133382e3230342e3131332e302f32342d3234203d3e20323633383937.roa (raw, json)
Hash identifier:          EQhpm5MN9mHWKjxGxpC5FAlrgzNz6lIvi76TfzeFj3Y=
Subject key identifier:   A3:3F:BF:01:D8:0A:D1:C5:7C:3C:25:FF:C6:97:49:A2:6B:C6:E0:E4
Certificate issuer:       /CN=7309159F56A47754EF99E9F4F55BD61B99CCD644
Certificate serial:       4334AE6519481C386D973BA516F4C1F62B56904C
Authority key identifier: 73:09:15:9F:56:A4:77:54:EF:99:E9:F4:F5:5B:D6:1B:99:CC:D6:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/3133382e3230342e3131332e302f32342d3234203d3e20323633383937.roa
Signing time:             Thu 05 Feb 2026 22:02:26 +0000
ROA not before:           Thu 05 Feb 2026 21:57:26 +0000
ROA not after:            Thu 04 Feb 2027 22:02:26 +0000
asID:                     263897
IP address blocks:        138.204.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.crl
                          rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 15:10:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:34:ae:65:19:48:1c:38:6d:97:3b:a5:16:f4:c1:f6:2b:56:90:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7309159F56A47754EF99E9F4F55BD61B99CCD644
        Validity
            Not Before: Feb  5 21:57:26 2026 GMT
            Not After : Feb  4 22:02:26 2027 GMT
        Subject: CN=A33FBF01D80AD1C57C3C25FFC69749A26BC6E0E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:89:c4:9c:27:9a:ae:a6:c5:37:af:ee:aa:6c:
                    ed:ac:91:ca:06:80:8f:3b:30:76:2c:4b:26:e7:44:
                    76:e6:12:1d:dd:70:7b:76:17:58:b8:05:e8:39:54:
                    ea:33:f8:f4:dc:c5:ad:4e:0e:0f:8a:d9:4f:43:9b:
                    e4:9a:56:3a:69:25:30:df:48:dd:56:be:b2:b1:77:
                    72:cf:a6:0e:15:9b:fe:e8:3d:2b:4f:e5:27:e9:21:
                    28:94:5b:24:e0:40:07:f9:b3:e6:47:a8:d1:a8:c4:
                    c6:d8:6d:d2:49:ec:62:a3:59:6b:89:b8:9a:6c:c4:
                    dd:14:d8:1c:ce:3a:48:33:ca:9b:08:24:8a:39:a6:
                    6c:0d:2a:df:d3:60:f6:dc:80:30:5d:2e:bd:8d:2b:
                    34:14:77:30:01:57:69:e1:93:71:60:db:07:0f:58:
                    ff:60:b7:e2:32:f3:2c:b7:8e:9d:a2:3e:a7:33:12:
                    cf:06:9a:00:f6:b5:e3:f1:f4:46:c9:ee:5c:ec:82:
                    12:02:f2:53:58:4d:0c:fd:1c:96:96:d0:ee:93:37:
                    b6:83:ea:ce:80:f0:71:83:5d:9f:a7:17:3e:3c:9c:
                    b9:14:a9:f3:37:73:70:5e:b3:16:30:fc:0a:fb:d2:
                    54:13:82:d7:2d:26:02:4f:b6:4a:68:af:1e:01:4a:
                    65:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:3F:BF:01:D8:0A:D1:C5:7C:3C:25:FF:C6:97:49:A2:6B:C6:E0:E4
            X509v3 Authority Key Identifier:
                keyid:73:09:15:9F:56:A4:77:54:EF:99:E9:F4:F5:5B:D6:1B:99:CC:D6:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/3133382e3230342e3131332e302f32342d3234203d3e20323633383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:17:03:29:09:83:d9:41:1a:f9:48:97:62:10:e2:04:7a:d3:
         61:e9:e4:31:65:e8:dc:cd:c0:c2:fb:8d:ae:a9:31:dd:c6:21:
         89:c9:94:da:83:65:2c:1c:da:54:89:76:4c:bf:3f:fe:44:af:
         af:89:ab:6d:13:d2:5f:c4:ca:ef:ec:b3:eb:4b:50:2d:15:b0:
         f9:4c:cf:07:e5:b4:a2:30:b8:f7:02:93:2c:28:15:ad:27:73:
         05:d3:78:32:ba:0a:85:98:85:2a:97:4e:40:67:a3:d8:00:aa:
         bb:f8:49:8f:59:79:f6:59:f6:e7:fd:cc:49:91:4b:86:2f:5b:
         a1:32:b4:1c:2a:3f:38:b3:91:8e:44:8a:dd:74:b0:76:26:43:
         a5:49:cd:10:13:e1:a8:21:0c:e5:09:fa:b9:01:3c:ef:71:ec:
         d9:12:d6:56:0a:6f:93:e5:19:74:09:3c:6b:9c:ac:56:f7:28:
         63:c7:d8:fb:fb:7b:4d:7e:de:91:46:2f:7f:fc:19:95:f4:7d:
         89:24:4e:9c:69:0c:06:fd:46:8f:a6:db:9c:d3:92:2e:7d:8f:
         9a:35:b9:ba:61:0d:83:bd:01:71:1c:94:76:ba:fc:8d:fb:68:
         36:cf:b9:9f:46:5d:21:d2:59:25:5d:86:d2:b3:11:36:03:52:
         01:99:f6:7e
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUQzSuZRlIHDhtlzulFvTB9itWkEwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzMwOTE1OUY1NkE0Nzc1NEVGOTlFOUY0RjU1QkQ2MUI5
OUNDRDY0NDAeFw0yNjAyMDUyMTU3MjZaFw0yNzAyMDQyMjAyMjZaMDMxMTAvBgNV
BAMTKEEzM0ZCRjAxRDgwQUQxQzU3QzNDMjVGRkM2OTc0OUEyNkJDNkUwRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWicScJ5qupsU3r+6qbO2skcoG
gI87MHYsSybnRHbmEh3dcHt2F1i4Beg5VOoz+PTcxa1ODg+K2U9Dm+SaVjppJTDf
SN1WvrKxd3LPpg4Vm/7oPStP5SfpISiUWyTgQAf5s+ZHqNGoxMbYbdJJ7GKjWWuJ
uJpsxN0U2BzOOkgzypsIJIo5pmwNKt/TYPbcgDBdLr2NKzQUdzABV2nhk3Fg2wcP
WP9gt+Iy8yy3jp2iPqczEs8GmgD2tePx9EbJ7lzsghIC8lNYTQz9HJaW0O6TN7aD
6s6A8HGDXZ+nFz48nLkUqfM3c3BesxYw/Ar70lQTgtctJgJPtkporx4BSmXNAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUoz+/AdgK0cV8PCX/xpdJomvG4OQwHwYDVR0j
BBgwFoAUcwkVn1akd1Tvmen09VvWG5nM1kQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmVTNFJwZFB1Vkg4c0FQemlmZ2FINzFWYkdWRlRVZnN2cktucURMbmt2
bTcvMS83MzA5MTU5RjU2QTQ3NzU0RUY5OUU5RjRGNTVCRDYxQjk5Q0NENjQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzczMDkxNTlGNTZBNDc3NTRF
Rjk5RTlGNEY1NUJENjFCOTlDQ0Q2NDQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JlUzRScGRQdVZIOHNBUHppZmdhSDcxVmJHVkZUVWZzdnJLbnFETG5rdm03LzEv
MzEzMzM4MmUzMjMwMzQyZTMxMzEzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM4MzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIrMcTANBgkqhkiG9w0BAQsFAAOCAQEAhRcD
KQmD2UEa+UiXYhDiBHrTYenkMWXo3M3AwvuNrqkx3cYhicmU2oNlLBzaVIl2TL8/
/kSvr4mrbRPSX8TK7+yz60tQLRWw+UzPB+W0ojC49wKTLCgVrSdzBdN4MroKhZiF
KpdOQGej2ACqu/hJj1l59ln25/3MSZFLhi9boTK0HCo/OLORjkSK3XSwdiZDpUnN
EBPhqCEM5Qn6uQE873Hs2RLWVgpvk+UZdAk8a5ysVvcoY8fY+/t7TX7ekUYvf/wZ
lfR9iSROnGkMBv1Gj6bbnNOSLn2PmjW5umENg70BcRyUdrr8jftoNs+5n0ZdIdJZ
JV2G0rMRNgNSAZn2fg==
-----END CERTIFICATE-----
Generated at Thu Feb 19 15:53:56 2026 by rpki-client