Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/3133382e302e33322e302f32322d3234203d3e20323632373535.roa
File:                     3133382e302e33322e302f32322d3234203d3e20323632373535.roa (raw, json)
Hash identifier:          /PSvItM2MpjD0s9HMVuC1Gv6V+AncXqX9tGL62Wwtjo=
Subject key identifier:   38:E1:49:9C:52:01:7C:CF:F2:BE:9E:00:69:6D:42:CA:E2:30:FE:CD
Certificate issuer:       /CN=E98018CD2C68060BD13517BC1BB31EAD6E73038A
Certificate serial:       607C94BADAC50D187135BAFA28C679D8F6D12B6D
Authority key identifier: E9:80:18:CD:2C:68:06:0B:D1:35:17:BC:1B:B3:1E:AD:6E:73:03:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/3133382e302e33322e302f32322d3234203d3e20323632373535.roa
Signing time:             Wed 04 Feb 2026 19:00:00 +0000
ROA not before:           Wed 04 Feb 2026 18:55:00 +0000
ROA not after:            Wed 03 Feb 2027 19:00:00 +0000
asID:                     262755
IP address blocks:        138.0.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.crl
                          rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:43:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:7c:94:ba:da:c5:0d:18:71:35:ba:fa:28:c6:79:d8:f6:d1:2b:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E98018CD2C68060BD13517BC1BB31EAD6E73038A
        Validity
            Not Before: Feb  4 18:55:00 2026 GMT
            Not After : Feb  3 19:00:00 2027 GMT
        Subject: CN=38E1499C52017CCFF2BE9E00696D42CAE230FECD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a6:26:2d:92:4f:48:d6:7d:d7:a2:18:0f:6b:
                    d0:24:06:9c:43:3d:e3:09:5c:64:a4:fd:9d:d6:8c:
                    8f:d7:c2:1c:52:05:24:41:8d:be:a8:95:5e:3f:5f:
                    62:88:0f:c7:64:7c:aa:31:d7:8e:31:37:a5:ca:c3:
                    a5:e8:8d:00:67:a1:3d:5e:fa:8d:d9:36:00:d6:d2:
                    4c:d1:ce:e3:9f:50:11:82:ad:28:fb:3a:0e:4c:f7:
                    d2:aa:43:16:21:d1:9b:e2:e4:6f:03:1a:1a:86:e8:
                    1f:92:07:95:61:e8:31:bc:d8:03:9b:ea:2e:e2:60:
                    1a:d0:ac:c9:d0:a3:81:b2:9e:56:cb:d5:de:f3:19:
                    d6:49:22:9d:a7:0b:2e:25:5f:27:1d:55:3e:35:45:
                    1a:bf:02:dd:66:18:70:1e:4d:a5:11:dc:44:46:9c:
                    c6:de:94:14:d7:6d:f8:80:ae:1b:b1:7a:62:70:50:
                    b7:1e:97:a8:4f:fd:8d:e9:6d:d2:4d:b3:9f:c8:a5:
                    71:4f:0d:89:6a:90:a2:aa:de:f7:5f:1b:9d:91:89:
                    b3:a5:4d:67:6e:5b:af:94:c2:5e:01:0e:b1:9a:df:
                    ee:68:d3:ea:82:62:ca:f8:dd:39:11:ec:b4:dd:16:
                    58:bb:70:4b:cf:d8:c2:dc:67:b1:70:d9:1f:83:53:
                    d6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E1:49:9C:52:01:7C:CF:F2:BE:9E:00:69:6D:42:CA:E2:30:FE:CD
            X509v3 Authority Key Identifier:
                keyid:E9:80:18:CD:2C:68:06:0B:D1:35:17:BC:1B:B3:1E:AD:6E:73:03:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/3133382e302e33322e302f32322d3234203d3e20323632373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:57:97:d4:bf:39:46:0a:5f:e1:4b:e7:f8:22:93:a0:3b:4e:
         5f:3a:95:75:8a:84:bf:74:c9:35:d3:f3:8e:25:28:6f:19:57:
         4c:e7:19:24:50:68:c7:d5:2e:1b:ff:b0:ef:23:08:68:3b:da:
         0b:e0:1a:4e:06:61:12:e1:62:15:1d:8c:eb:3e:4f:6e:f8:4d:
         e2:63:3a:ca:ec:70:75:6a:8c:f5:23:19:36:8a:14:b4:2c:e4:
         d6:59:e7:f0:61:92:0f:3e:93:1f:12:b6:d9:98:af:a1:9e:30:
         9f:53:51:b4:d2:71:08:18:83:c2:d4:24:f3:e4:e1:fc:33:28:
         53:a9:e0:78:d4:86:e3:96:02:88:8e:2b:30:39:2e:ff:61:0f:
         31:de:eb:25:d0:71:b6:fa:9a:f7:57:7b:e6:c6:f7:b8:6d:59:
         73:32:50:f6:a8:3c:ee:81:73:a0:b4:30:9c:d2:72:7d:e7:fb:
         a7:e6:5f:33:09:9e:16:bb:57:28:3b:ac:67:d1:58:cb:81:9a:
         d4:1a:a3:58:39:28:6a:d4:01:e2:26:2f:32:19:cd:71:fb:71:
         9c:50:c3:db:99:9f:97:0a:6f:e4:e0:31:17:56:9b:69:ce:13:
         14:c3:1b:29:d8:82:73:cd:ff:96:fb:fa:68:e5:16:54:4d:81:
         97:fa:17:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:02:01 2026 by rpki-client