Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/3133382e3132322e3130332e302f32342d3234203d3e20323634333131.roa
File:                     3133382e3132322e3130332e302f32342d3234203d3e20323634333131.roa (raw, json)
Hash identifier:          SAqab20/OCBJecQyZURXbDe0G+cUruX2JfnvH6CnZJQ=
Subject key identifier:   44:B5:DC:8E:25:4E:8B:9D:39:3F:70:54:E7:CA:B9:CC:31:57:06:15
Certificate issuer:       /CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
Certificate serial:       463EBD9FDC5E80530F5BF2D52BB1C5E2F31EB0A4
Authority key identifier: B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/3133382e3132322e3130332e302f32342d3234203d3e20323634333131.roa
Signing time:             Wed 04 Feb 2026 20:00:00 +0000
ROA not before:           Wed 04 Feb 2026 19:55:00 +0000
ROA not after:            Wed 03 Feb 2027 20:00:00 +0000
asID:                     264311
IP address blocks:        138.122.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.crl
                          rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 12:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:3e:bd:9f:dc:5e:80:53:0f:5b:f2:d5:2b:b1:c5:e2:f3:1e:b0:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
        Validity
            Not Before: Feb  4 19:55:00 2026 GMT
            Not After : Feb  3 20:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2d:0c:38:b5:24:2f:c1:d1:63:5c:6a:f9:df:
                    b3:23:5a:5b:33:2d:6b:89:3c:12:bd:c8:51:5a:a8:
                    5b:a3:a0:b9:ba:27:7e:79:03:eb:96:4b:3d:26:03:
                    53:c8:ba:14:36:67:82:71:d6:0d:b3:58:69:62:1e:
                    59:47:f7:1f:6a:7d:c2:04:fc:81:79:d4:d6:30:b8:
                    a7:6a:2b:6e:67:7c:28:aa:08:52:77:98:99:b7:85:
                    70:f0:53:95:f2:bc:46:bc:72:53:d9:4a:66:4c:ee:
                    64:02:32:9e:13:7b:81:95:20:22:74:8e:aa:2e:33:
                    13:4a:07:f0:d3:8f:0a:cd:40:83:09:3d:ff:57:8e:
                    10:2f:18:9a:5e:aa:7a:96:0e:cd:55:27:0f:b8:e3:
                    1f:fc:b5:79:24:73:0d:f4:6b:70:6a:d7:1c:a1:87:
                    38:38:87:0b:ab:22:0f:5d:73:85:7a:84:33:be:cb:
                    29:2e:9c:be:72:cd:7c:3f:ba:12:63:02:bc:bd:8d:
                    58:d1:c7:77:64:5a:4f:f2:27:6c:70:fb:62:18:91:
                    87:15:f5:dd:7f:42:30:27:fd:30:96:48:0f:7f:64:
                    2e:aa:b7:d7:cc:e3:e8:34:dc:b3:10:01:2d:53:96:
                    64:bf:68:e0:db:2a:a8:e2:cc:2c:7a:91:4c:1c:8c:
                    9b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B5:DC:8E:25:4E:8B:9D:39:3F:70:54:E7:CA:B9:CC:31:57:06:15
            X509v3 Authority Key Identifier:
                keyid:B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/3133382e3132322e3130332e302f32342d3234203d3e20323634333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:22:b8:f3:76:4a:58:c9:93:2f:4c:4e:fd:5f:de:d0:e6:ba:
         80:f9:f9:c3:d6:24:97:56:11:4b:05:13:83:2c:50:28:6b:0e:
         7e:c7:1f:d3:a1:eb:ac:db:f0:6b:ba:da:86:b1:bd:18:62:46:
         b6:1e:fd:84:5c:97:c9:a4:e2:29:0e:d9:36:9f:d1:de:a7:ba:
         7a:d0:25:4d:58:b1:b3:ff:fb:5e:17:7c:bf:db:40:f6:9f:eb:
         a7:64:c0:2e:7d:66:e1:2c:5a:c2:99:2e:ba:05:c9:eb:fb:82:
         9f:e5:cc:4d:84:f0:77:5a:ea:3b:49:92:56:63:bc:cd:6e:ef:
         f3:c1:f9:4e:87:c3:cb:ee:d0:46:98:6c:f3:50:8c:db:74:c5:
         29:2a:d0:d0:83:5f:5a:a0:72:5a:26:44:96:80:13:00:f0:31:
         14:95:c1:64:ec:24:2a:59:13:14:57:91:2b:6b:8f:02:8a:24:
         f7:37:d3:30:6f:7a:7e:37:c7:4a:d2:97:3a:95:67:14:2c:f7:
         ec:1f:11:31:1d:0d:31:11:3b:ae:16:45:91:36:a3:26:c8:00:
         d7:b0:30:ed:d8:5f:3c:92:1a:e9:74:fe:19:3f:2e:fc:16:48:
         c8:bf:c5:31:9e:79:8d:f0:ed:c8:74:4b:5d:8f:6b:db:14:86:
         3c:e1:28:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:06:15 2026 by rpki-client