Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/3133382e3230342e3131342e302f32342d3234203d3e20323633383937.roa
File:                     3133382e3230342e3131342e302f32342d3234203d3e20323633383937.roa (raw, json)
Hash identifier:          YSs50/wn1jv5RmDXx+1r8IG6KsPwnRItAk5xqOoZgUI=
Subject key identifier:   06:65:2A:A8:15:5D:C6:B1:E6:25:88:B1:4D:1D:A3:06:79:F7:78:F3
Certificate issuer:       /CN=7309159F56A47754EF99E9F4F55BD61B99CCD644
Certificate serial:       18563248D08B688D2D41BC1ABEE1180BBA923561
Authority key identifier: 73:09:15:9F:56:A4:77:54:EF:99:E9:F4:F5:5B:D6:1B:99:CC:D6:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/3133382e3230342e3131342e302f32342d3234203d3e20323633383937.roa
Signing time:             Thu 05 Feb 2026 22:02:24 +0000
ROA not before:           Thu 05 Feb 2026 21:57:24 +0000
ROA not after:            Thu 04 Feb 2027 22:02:24 +0000
asID:                     263897
IP address blocks:        138.204.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.crl
                          rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:11:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:56:32:48:d0:8b:68:8d:2d:41:bc:1a:be:e1:18:0b:ba:92:35:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7309159F56A47754EF99E9F4F55BD61B99CCD644
        Validity
            Not Before: Feb  5 21:57:24 2026 GMT
            Not After : Feb  4 22:02:24 2027 GMT
        Subject: CN=06652AA8155DC6B1E62588B14D1DA30679F778F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c8:9d:30:4f:19:fd:b3:97:66:e3:e1:76:21:
                    4b:35:fd:ef:c0:9f:b8:83:65:44:8d:15:3f:2e:f2:
                    81:0f:06:af:08:47:e3:f5:b3:20:fa:5b:52:02:af:
                    00:aa:c0:af:ef:9e:eb:18:81:03:1e:1c:81:4f:f1:
                    ec:7a:d5:59:3d:57:4e:00:e6:1a:95:1e:44:20:c0:
                    55:1c:92:9c:91:ea:c3:be:7c:6e:be:41:46:50:f3:
                    ac:16:6a:dd:52:e1:e0:cf:1e:83:31:ab:0a:25:5f:
                    3f:7f:7a:5b:0d:75:b3:fb:ea:fb:88:05:49:15:6c:
                    4a:8b:fc:b2:87:58:a5:5f:96:01:d3:6d:36:4b:6d:
                    33:8c:25:51:b3:2d:19:ee:24:54:91:79:92:7b:19:
                    09:16:3e:df:90:77:ff:e4:00:3e:46:57:db:28:77:
                    2c:f8:73:af:8e:ff:a5:e6:27:55:0d:21:2a:4d:cc:
                    3c:58:f1:b9:66:ce:67:f3:21:53:f1:54:4f:c3:7a:
                    96:45:7a:ba:70:82:ed:ab:fc:ca:66:eb:98:f7:1f:
                    72:f9:a7:f3:50:a9:97:a0:de:53:c9:bd:4f:3b:0a:
                    cf:5e:ee:bc:2d:24:82:e2:06:70:94:9d:57:21:c9:
                    15:18:f0:d3:df:68:cb:b0:0d:d6:8a:99:50:46:4a:
                    3b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:65:2A:A8:15:5D:C6:B1:E6:25:88:B1:4D:1D:A3:06:79:F7:78:F3
            X509v3 Authority Key Identifier:
                keyid:73:09:15:9F:56:A4:77:54:EF:99:E9:F4:F5:5B:D6:1B:99:CC:D6:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/3133382e3230342e3131342e302f32342d3234203d3e20323633383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:b9:7c:e3:8a:2d:de:38:c4:29:2e:69:e1:6d:d3:5b:d0:0d:
         d5:c4:81:28:36:b6:35:74:8d:ea:c9:90:15:e5:63:d0:9a:2a:
         f9:be:ff:20:a5:97:6e:75:74:48:51:4f:08:fb:41:90:db:89:
         23:af:6c:9a:a1:54:d9:65:02:2e:75:fa:5b:cc:d9:83:53:f3:
         76:c5:77:9e:1d:2e:cc:b4:75:75:b2:06:0d:bb:c0:7d:a5:6b:
         ba:52:43:c7:48:6c:92:df:12:77:d5:e0:fb:b4:c9:09:23:a5:
         bf:6c:d2:1b:52:28:e8:af:1c:8f:5d:4c:f2:37:bf:78:a4:03:
         f1:50:dd:95:3e:4d:1e:3d:ac:37:10:de:4c:93:3e:0c:13:7b:
         00:3f:b3:59:32:7c:14:36:6c:08:2a:c2:89:93:8d:2b:68:65:
         01:85:8f:d8:fc:c0:48:2d:d5:e1:01:93:4f:e9:9a:19:8e:6b:
         c9:9d:23:54:c9:81:08:fe:36:d0:b1:e2:2c:8f:52:4b:f4:88:
         8e:7d:be:87:93:af:3d:56:87:4b:b4:9d:2b:db:e3:fa:86:6e:
         ae:99:b6:58:64:27:75:24:96:f8:61:14:b2:c4:48:e3:2f:fc:
         8b:71:dc:ab:58:8a:fd:8f:d2:62:49:20:83:c3:3d:b3:62:0a:
         2b:9c:03:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 12:54:56 2026 by rpki-client