Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/3133382e3132322e3130322e302f32332d3233203d3e20323634333131.roa
File:                     3133382e3132322e3130322e302f32332d3233203d3e20323634333131.roa (raw, json)
Hash identifier:          AIGvvusXzYyDOo+KAozZbiN580f9i9NPDI4wNUjYGfg=
Subject key identifier:   C9:06:94:6D:46:58:04:38:5B:CD:B2:7D:AA:A9:66:57:63:2D:16:84
Certificate issuer:       /CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
Certificate serial:       25869290F8AEADD2AF9299D856798B94038C81CD
Authority key identifier: B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/3133382e3132322e3130322e302f32332d3233203d3e20323634333131.roa
Signing time:             Wed 04 Feb 2026 20:00:00 +0000
ROA not before:           Wed 04 Feb 2026 19:55:00 +0000
ROA not after:            Wed 03 Feb 2027 20:00:00 +0000
asID:                     264311
IP address blocks:        138.122.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.crl
                          rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 12:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:86:92:90:f8:ae:ad:d2:af:92:99:d8:56:79:8b:94:03:8c:81:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
        Validity
            Not Before: Feb  4 19:55:00 2026 GMT
            Not After : Feb  3 20:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:55:07:67:2f:e0:fe:11:1c:d0:bf:54:66:dc:
                    59:3b:cc:96:1f:33:f7:29:52:f8:b7:ef:13:59:23:
                    8c:4c:e1:3d:6a:94:f7:53:6f:6b:a8:df:ad:c3:7f:
                    22:01:3e:95:d1:04:64:53:d2:71:b6:28:33:b6:20:
                    3e:20:fe:0d:3d:71:3d:71:7d:f1:88:ad:2b:e9:7d:
                    b9:f6:97:ca:ff:6e:ec:1c:4f:e2:a3:dd:0b:8f:69:
                    96:e6:b8:f9:e3:e3:8a:5e:78:f8:e8:14:db:93:30:
                    74:26:13:52:97:6f:ff:fb:a9:54:db:ee:75:0d:71:
                    1b:b5:59:15:60:b9:86:14:af:af:29:16:a6:a4:8b:
                    a8:78:d1:47:46:81:f9:c3:0a:27:5f:4b:f3:86:0b:
                    83:d3:c1:01:71:24:30:17:3d:6a:0d:52:12:3b:2a:
                    a6:94:67:e6:da:d5:af:f4:77:e2:29:ab:cc:d4:88:
                    31:a3:c6:86:12:95:79:22:e2:38:fa:9f:7d:dd:44:
                    fb:1e:53:f0:63:b2:59:5f:27:1a:cc:62:f7:9c:21:
                    22:b9:24:d3:6c:84:95:8a:9c:46:4a:37:67:63:76:
                    a2:92:f5:14:f0:a2:6e:06:7c:13:5a:b9:3e:21:7e:
                    59:d9:8c:b3:78:1c:c4:c7:dc:55:5c:39:bd:71:1e:
                    1c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:06:94:6D:46:58:04:38:5B:CD:B2:7D:AA:A9:66:57:63:2D:16:84
            X509v3 Authority Key Identifier:
                keyid:B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/3133382e3132322e3130322e302f32332d3233203d3e20323634333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:f1:cc:54:d8:03:58:4c:87:88:87:82:4a:fe:99:37:00:e4:
         72:71:f8:ca:5c:00:42:37:fd:8c:7b:4d:6a:0a:36:4a:6e:cb:
         84:4b:f1:f0:e8:5a:82:89:3a:6e:65:42:0c:82:4d:57:d8:cd:
         9c:50:e8:0b:52:25:87:0e:75:55:ba:9d:3f:77:e5:86:52:8d:
         9f:ed:1a:df:55:04:71:8d:56:67:0e:9a:18:02:88:8a:2a:57:
         78:76:91:89:e7:03:cb:e1:1a:01:91:ad:43:ed:b9:8a:da:b1:
         5d:42:e2:74:da:06:0c:8b:9e:9d:88:15:3d:7f:4a:23:2a:2e:
         9e:5a:20:c0:6f:c4:65:bf:05:c4:e2:1d:41:98:db:33:0c:3c:
         92:ed:48:82:97:d5:3f:16:31:b3:95:07:1a:fd:03:3f:18:80:
         5a:09:c4:81:32:2c:f8:39:c4:cd:ef:f3:57:e1:48:e3:0a:43:
         09:f3:d5:b9:56:3f:70:0d:6d:8c:7f:d3:d9:f9:53:40:65:99:
         45:be:29:99:ff:d9:8f:f5:6a:17:5c:e4:49:a6:e3:ec:80:4d:
         6b:dc:14:4f:35:d8:0d:c9:2b:94:e7:ba:ea:0c:17:8d:eb:69:
         bc:f8:00:82:dc:7e:9a:3d:fc:10:c6:68:78:07:da:2a:93:5a:
         89:fd:24:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:36:01 2026 by rpki-client