Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/0/3133382e3138352e3139362e302f32322d3234203d3e20323633383437.roa
File:                     3133382e3138352e3139362e302f32322d3234203d3e20323633383437.roa (raw, json)
Hash identifier:          PmggMkh+ie9SAAo+5zmESkUv359dcSzKBRzVX7ROX2U=
Subject key identifier:   20:E0:86:4F:D6:0E:3A:BC:13:1A:11:87:90:2E:F3:C0:9D:AE:13:34
Certificate issuer:       /CN=704458CDC57956D96E4187B18CAF8B9BC27FC4EF
Certificate serial:       78F1997628F574D9693D0B9EF25459CCDCEE188B
Authority key identifier: 70:44:58:CD:C5:79:56:D9:6E:41:87:B1:8C:AF:8B:9B:C2:7F:C4:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/704458CDC57956D96E4187B18CAF8B9BC27FC4EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/0/3133382e3138352e3139362e302f32322d3234203d3e20323633383437.roa
Signing time:             Mon 09 Feb 2026 18:06:20 +0000
ROA not before:           Mon 09 Feb 2026 18:01:20 +0000
ROA not after:            Mon 08 Feb 2027 18:06:20 +0000
asID:                     263847
IP address blocks:        138.185.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/0/704458CDC57956D96E4187B18CAF8B9BC27FC4EF.crl
                          rsync://rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/0/704458CDC57956D96E4187B18CAF8B9BC27FC4EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/704458CDC57956D96E4187B18CAF8B9BC27FC4EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:08:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f1:99:76:28:f5:74:d9:69:3d:0b:9e:f2:54:59:cc:dc:ee:18:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=704458CDC57956D96E4187B18CAF8B9BC27FC4EF
        Validity
            Not Before: Feb  9 18:01:20 2026 GMT
            Not After : Feb  8 18:06:20 2027 GMT
        Subject: CN=20E0864FD60E3ABC131A1187902EF3C09DAE1334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fe:15:1c:85:76:ee:82:b1:1b:7b:22:68:7d:
                    10:65:ea:ad:fb:e0:9d:1f:d6:dd:ea:e6:b4:d2:39:
                    a7:e2:b0:0e:9e:f0:07:87:52:47:88:39:fe:7f:bd:
                    ae:71:fb:79:8a:20:06:ec:1b:19:cc:be:e1:e2:fa:
                    93:73:a8:f5:01:21:71:bb:d4:85:9d:90:30:4c:21:
                    90:6c:1a:32:82:06:23:0e:0b:59:22:16:6d:3a:0b:
                    bc:66:76:c9:11:88:9c:29:1e:2a:bf:51:12:bf:9f:
                    c7:d5:04:b1:62:64:51:15:ee:7e:2e:5d:74:4e:b6:
                    0d:ac:40:32:f4:cd:e8:cf:b5:1d:ad:da:90:ed:24:
                    d0:c3:c2:5d:16:f4:d6:40:59:4f:5a:39:8d:be:37:
                    7b:24:81:bf:ff:48:9e:55:e1:5a:e4:21:35:2f:16:
                    b2:3c:26:ca:b9:a9:86:7e:a1:7e:43:e9:25:fa:8a:
                    f5:33:dc:72:a2:68:23:11:01:d7:c5:f4:ab:60:e4:
                    e2:3d:9b:88:f5:f0:73:0b:fb:f3:d4:16:9d:08:8f:
                    bd:d7:54:30:43:ee:23:13:14:8b:a9:88:fa:24:5d:
                    03:93:2d:a9:d1:ef:32:92:b7:e4:0c:09:60:b8:c5:
                    ac:6e:7e:bb:50:c0:2e:8f:74:50:92:f0:a5:5d:9b:
                    11:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E0:86:4F:D6:0E:3A:BC:13:1A:11:87:90:2E:F3:C0:9D:AE:13:34
            X509v3 Authority Key Identifier:
                keyid:70:44:58:CD:C5:79:56:D9:6E:41:87:B1:8C:AF:8B:9B:C2:7F:C4:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/0/704458CDC57956D96E4187B18CAF8B9BC27FC4EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/704458CDC57956D96E4187B18CAF8B9BC27FC4EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/0/3133382e3138352e3139362e302f32322d3234203d3e20323633383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:cc:b7:1b:76:cf:63:25:7e:0d:8f:59:12:60:04:c1:64:5f:
         27:54:aa:0e:90:a8:3e:4a:6e:a5:05:74:70:60:96:3e:a2:5c:
         b6:42:63:2e:69:b8:ca:ed:15:1f:b3:6c:e5:27:03:54:ed:e1:
         eb:6e:03:eb:ce:8a:76:ad:e7:f0:27:56:aa:51:ca:29:30:5b:
         26:5d:2e:cd:a9:23:06:30:12:37:c1:2d:23:80:15:21:c8:ef:
         f8:ff:8e:a8:31:1e:8f:b5:fc:2e:eb:81:70:d8:92:f5:29:ce:
         41:4d:ba:89:d9:e5:fa:2a:20:c3:9a:b9:8d:49:93:ba:f5:9c:
         a5:7c:d0:bf:09:4a:e8:17:40:8a:94:41:bf:bb:e2:c2:a3:0b:
         d8:61:e1:0f:27:dc:84:a0:d6:d0:5e:7e:0a:2c:4b:b8:47:0e:
         b8:0a:61:1d:b5:80:8f:6c:4b:87:11:da:89:64:f4:82:ab:4f:
         c2:de:a1:a2:f7:48:73:e6:13:5b:72:7f:ff:dd:9b:d0:62:7c:
         ea:7e:10:5b:04:d4:8c:9a:fb:10:3d:f1:0c:1c:93:75:ae:ac:
         98:f6:5b:a6:60:ce:42:e4:df:2c:87:9f:77:e0:ef:13:6b:59:
         73:0d:e2:7b:0b:8d:ab:b1:d3:5e:5a:04:b0:7a:ce:b5:34:01:
         e0:7a:4a:a4
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUePGZdij1dNlpPQue8lRZzNzuGIswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzA0NDU4Q0RDNTc5NTZEOTZFNDE4N0IxOENBRjhCOUJD
MjdGQzRFRjAeFw0yNjAyMDkxODAxMjBaFw0yNzAyMDgxODA2MjBaMDMxMTAvBgNV
BAMTKDIwRTA4NjRGRDYwRTNBQkMxMzFBMTE4NzkwMkVGM0MwOURBRTEzMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn/hUchXbugrEbeyJofRBl6q37
4J0f1t3q5rTSOafisA6e8AeHUkeIOf5/va5x+3mKIAbsGxnMvuHi+pNzqPUBIXG7
1IWdkDBMIZBsGjKCBiMOC1kiFm06C7xmdskRiJwpHiq/URK/n8fVBLFiZFEV7n4u
XXROtg2sQDL0zejPtR2t2pDtJNDDwl0W9NZAWU9aOY2+N3skgb//SJ5V4VrkITUv
FrI8Jsq5qYZ+oX5D6SX6ivUz3HKiaCMRAdfF9Ktg5OI9m4j18HML+/PUFp0Ij73X
VDBD7iMTFIupiPokXQOTLanR7zKSt+QMCWC4xaxufrtQwC6PdFCS8KVdmxEXAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUIOCGT9YOOrwTGhGHkC7zwJ2uEzQwHwYDVR0j
BBgwFoAUcERYzcV5VtluQYexjK+Lm8J/xO8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzI4OEF5RHg5emduVTMxck5LcnJpOVZrbkh4WXd2ellRYnd1ajc0S1ZD
VjIvMC83MDQ0NThDREM1Nzk1NkQ5NkU0MTg3QjE4Q0FGOEI5QkMyN0ZDNEVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcwNDQ1OENEQzU3OTU2RDk2
RTQxODdCMThDQUY4QjlCQzI3RkM0RUYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0MyODhBeUR4OXpnblUzMXJOS3JyaTlWa25IeFl3dnpZUWJ3dWo3NEtWQ1YyLzAv
MzEzMzM4MmUzMTM4MzUyZTMxMzkzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMzM4MzQzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoq5xDANBgkqhkiG9w0BAQsFAAOCAQEArMy3
G3bPYyV+DY9ZEmAEwWRfJ1SqDpCoPkpupQV0cGCWPqJctkJjLmm4yu0VH7Ns5ScD
VO3h624D686Kdq3n8CdWqlHKKTBbJl0uzakjBjASN8EtI4AVIcjv+P+OqDEej7X8
LuuBcNiS9SnOQU26idnl+iogw5q5jUmTuvWcpXzQvwlK6BdAipRBv7viwqML2GHh
DyfchKDW0F5+CixLuEcOuAphHbWAj2xLhxHaiWT0gqtPwt6hovdIc+YTW3J//92b
0GJ86n4QWwTUjJr7ED3xDByTda6smPZbpmDOQuTfLIefd+DvE2tZcw3iewuNq7HT
XloEsHrOtTQB4HpKpA==
-----END CERTIFICATE-----
Generated at Thu Feb 19 08:52:13 2026 by rpki-client