Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/3133382e3132322e3130302e302f32342d3234203d3e20323634333131.roa
File:                     3133382e3132322e3130302e302f32342d3234203d3e20323634333131.roa (raw, json)
Hash identifier:          6XhPBBN9ZpFMEqKJxQfUVubvblAF6C976Lq093qf8lI=
Subject key identifier:   6D:E4:F1:CE:52:59:54:A5:BD:7D:A8:96:F3:80:EA:FE:9B:2D:60:FD
Certificate issuer:       /CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
Certificate serial:       4A43ECFEF84C576BE1E0AB886AC8F170063069A6
Authority key identifier: B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/3133382e3132322e3130302e302f32342d3234203d3e20323634333131.roa
Signing time:             Wed 04 Feb 2026 20:00:01 +0000
ROA not before:           Wed 04 Feb 2026 19:55:01 +0000
ROA not after:            Wed 03 Feb 2027 20:00:01 +0000
asID:                     264311
IP address blocks:        138.122.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.crl
                          rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 12:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:43:ec:fe:f8:4c:57:6b:e1:e0:ab:88:6a:c8:f1:70:06:30:69:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
        Validity
            Not Before: Feb  4 19:55:01 2026 GMT
            Not After : Feb  3 20:00:01 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:7a:ca:a3:af:f3:81:82:e3:94:16:e3:72:d3:
                    ce:7e:14:62:f3:a2:59:97:b2:1d:60:cc:e2:56:a0:
                    db:c1:a2:48:f5:3c:eb:c4:56:55:60:1b:a3:0d:84:
                    66:e1:98:29:bb:81:9d:88:f0:9f:5c:b1:12:9a:76:
                    32:d3:42:57:51:62:ab:e5:9e:6b:07:25:23:6e:61:
                    5d:3a:04:6b:8c:0f:9f:22:ac:29:05:38:59:40:81:
                    20:a6:0a:0c:61:fa:66:cc:fe:ee:79:98:b1:b6:76:
                    ba:ce:c7:44:60:cc:7b:a2:e3:df:bf:f6:f2:78:f6:
                    fd:f0:64:fb:02:c8:59:b4:5f:08:72:fb:ba:d8:b2:
                    ee:7d:5f:fa:5f:c0:06:cb:96:9c:68:f9:c2:48:fc:
                    79:50:34:6b:62:16:f6:11:df:04:76:65:cf:90:e2:
                    93:53:d4:10:1e:32:1e:a6:64:15:e1:c8:f2:65:8d:
                    20:5c:0b:82:cd:c2:de:d9:08:a4:a4:ae:3a:f0:ec:
                    f3:0f:5d:a3:ee:5a:c0:6e:68:44:61:6f:b3:0b:e3:
                    71:e4:93:c2:fe:47:cd:93:e6:22:f1:ae:a0:4f:9f:
                    58:f7:a6:7f:5d:3e:a7:03:81:f0:b2:09:27:ac:58:
                    7a:dd:b7:cf:90:8f:00:90:d6:8b:34:70:64:1b:e0:
                    37:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E4:F1:CE:52:59:54:A5:BD:7D:A8:96:F3:80:EA:FE:9B:2D:60:FD
            X509v3 Authority Key Identifier:
                keyid:B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/3133382e3132322e3130302e302f32342d3234203d3e20323634333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:6f:83:f7:0a:d8:68:ea:e6:2a:38:0a:70:05:eb:1c:34:32:
         73:1b:9c:90:f3:20:16:fa:4c:d8:47:7b:6d:33:8e:18:84:62:
         41:2c:26:f8:54:88:0f:e0:66:18:96:3f:e6:be:65:57:b0:d4:
         56:69:4d:c7:b2:3c:9d:4d:06:0c:bc:69:89:c7:44:d7:f8:37:
         a1:46:ff:8c:8a:04:d4:bf:2d:f5:9a:b9:b4:5e:77:6b:a1:c7:
         b1:77:41:d0:71:83:78:38:4f:cb:95:54:19:c7:e4:7b:77:74:
         25:51:e6:b0:1b:46:41:5b:fe:08:26:44:5d:32:0a:c3:99:7d:
         8e:41:c4:18:e3:31:0b:6f:71:3d:7b:9b:72:df:37:1d:37:da:
         ee:80:d1:b9:45:09:7d:f2:62:5b:7c:d3:c3:3b:c0:4b:74:a5:
         8c:b6:df:ff:32:38:64:89:12:9c:c2:d6:f2:f9:58:d2:b3:83:
         e8:23:17:86:f4:b3:c8:8e:a1:99:ad:e4:af:cd:3f:f1:71:4f:
         d9:dc:c9:aa:8c:5a:95:9d:76:45:58:ba:ab:1a:6b:32:23:50:
         5d:55:31:43:5a:4c:dd:08:1d:6e:1e:5b:70:21:1f:e4:fa:6b:
         1a:58:ff:90:bf:e5:79:af:de:5b:72:79:88:d4:4f:8a:6a:97:
         48:c1:0e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:36:29 2026 by rpki-client