Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/3133382e3132322e3130302e302f32322d3232203d3e20323634333131.roa
File:                     3133382e3132322e3130302e302f32322d3232203d3e20323634333131.roa (raw, json)
Hash identifier:          q7wUKaGARxwcytwDHtbT0hfoOI0kE4hOD8HS5dG/4lo=
Subject key identifier:   C4:C2:EE:59:85:5A:96:02:6D:A3:76:F1:74:C8:55:CC:A2:0D:B1:55
Certificate issuer:       /CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
Certificate serial:       1407F0B102F49BEDA4EC16CABB50DB364A2FCAE7
Authority key identifier: B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/3133382e3132322e3130302e302f32322d3232203d3e20323634333131.roa
Signing time:             Wed 04 Feb 2026 20:00:02 +0000
ROA not before:           Wed 04 Feb 2026 19:55:02 +0000
ROA not after:            Wed 03 Feb 2027 20:00:02 +0000
asID:                     264311
IP address blocks:        138.122.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.crl
                          rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:07:f0:b1:02:f4:9b:ed:a4:ec:16:ca:bb:50:db:36:4a:2f:ca:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
        Validity
            Not Before: Feb  4 19:55:02 2026 GMT
            Not After : Feb  3 20:00:02 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:45:f0:f0:b3:d4:e0:77:97:9e:f9:e2:92:b2:
                    10:cf:22:2d:08:4b:d3:2b:b3:0b:66:3d:4d:2e:b1:
                    b4:17:82:33:ca:d0:3a:52:c0:76:86:ff:4c:89:85:
                    b2:21:38:60:11:cb:52:86:fe:d2:fe:90:e0:45:d7:
                    37:11:7a:5a:08:4b:cc:e5:cf:67:fe:ed:98:f8:3d:
                    7a:31:8a:e7:1f:a2:3d:f4:2c:12:28:9c:02:36:88:
                    de:ba:f4:42:7d:bb:35:00:92:90:fe:c0:36:92:31:
                    af:48:45:bc:62:65:51:e8:4f:f8:cb:62:02:38:a1:
                    1f:a3:7f:fd:48:13:b7:7f:4b:99:2d:ef:49:87:ec:
                    1e:4e:6a:2a:13:b5:94:9d:99:cc:03:a8:b7:3a:8a:
                    1f:68:5f:4c:65:60:58:c5:e0:ae:01:cf:6f:da:b6:
                    4b:0d:39:6f:fb:d0:f0:f4:06:2e:36:93:47:19:3e:
                    60:e3:82:1f:45:fa:5a:3f:c2:35:8f:77:8a:32:31:
                    1d:b4:b3:50:f0:75:42:f3:0e:5a:d0:c5:b6:d1:ca:
                    6d:b2:bb:ba:d9:17:63:0e:84:cf:26:d8:c3:ef:99:
                    9a:4a:dc:aa:3d:e7:4a:fd:1a:27:65:40:24:21:7c:
                    8c:54:ab:5b:db:8c:4b:0d:f6:9b:c7:87:ce:41:af:
                    c6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C2:EE:59:85:5A:96:02:6D:A3:76:F1:74:C8:55:CC:A2:0D:B1:55
            X509v3 Authority Key Identifier:
                keyid:B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/3133382e3132322e3130302e302f32322d3232203d3e20323634333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:2e:ef:66:1e:4f:02:19:2e:4a:04:de:8d:74:fd:28:09:9c:
         f6:76:5c:26:60:68:58:2c:8e:53:95:91:16:34:10:04:c4:67:
         08:ec:5f:f2:cb:a3:fc:45:13:d4:0e:dd:42:e4:dd:75:8b:6f:
         e9:6b:23:86:e0:ff:19:e2:c7:9e:4d:98:53:54:b2:ec:f4:61:
         ee:85:9c:3c:5c:e3:66:15:25:97:01:28:6d:39:c1:3a:ce:c5:
         52:16:89:e2:7c:e3:56:8f:5e:fa:b9:d9:10:11:d0:9c:2c:fe:
         28:af:ee:69:f5:47:7a:8f:77:fd:8c:52:a1:ad:8f:02:76:e4:
         83:36:8a:8f:d1:56:39:97:eb:ef:6b:ea:d1:36:d4:d3:bd:71:
         ae:09:f1:6d:f2:bf:7f:0d:fa:1c:b9:72:45:7c:50:7c:60:50:
         a4:3b:70:00:22:a9:0a:8f:6d:f6:22:4d:5c:b6:f3:12:10:b5:
         56:af:45:26:6a:ed:ea:32:00:50:ec:f5:ec:21:92:45:bb:47:
         2e:a3:b4:d6:c1:3f:7b:50:bf:92:1a:84:f4:b1:5c:b2:2b:e8:
         00:8a:58:23:d1:36:8d:89:dc:17:c5:01:cc:5b:4f:0d:be:1f:
         e6:ef:9e:f8:40:3a:9a:64:27:17:c1:31:29:b9:d0:e6:41:1f:
         5f:c9:91:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:54:37 2026 by rpki-client