Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/3133382e3132312e3136342e302f32332d3233203d3e20323730393130.roa
File:                     3133382e3132312e3136342e302f32332d3233203d3e20323730393130.roa (raw, json)
Hash identifier:          l17UN9IzRIABa59CeIRbssQa7kwxF2pq05HuyXEYi0U=
Subject key identifier:   12:23:86:A8:F0:31:39:73:8D:58:E1:A6:0F:C0:02:DF:29:8F:51:30
Certificate issuer:       /CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66
Certificate serial:       0E8FBEFC4F644F667759CDA251517D9179C09286
Authority key identifier: 21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/3133382e3132312e3136342e302f32332d3233203d3e20323730393130.roa
Signing time:             Thu 05 Feb 2026 08:19:07 +0000
ROA not before:           Thu 05 Feb 2026 08:14:07 +0000
ROA not after:            Thu 04 Feb 2027 08:19:07 +0000
asID:                     270910
IP address blocks:        138.121.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl
                          rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 02:16:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:8f:be:fc:4f:64:4f:66:77:59:cd:a2:51:51:7d:91:79:c0:92:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66
        Validity
            Not Before: Feb  5 08:14:07 2026 GMT
            Not After : Feb  4 08:19:07 2027 GMT
        Subject: CN=122386A8F03139738D58E1A60FC002DF298F5130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d1:d2:1f:34:54:0b:6d:6f:74:36:12:80:4f:
                    a3:2b:a8:6a:35:54:69:e2:fc:40:2e:ff:63:29:f8:
                    b9:a4:8f:9a:39:cc:e1:f7:88:23:35:15:e0:72:00:
                    0f:de:2c:b6:3b:94:aa:28:c2:0f:02:d6:07:ac:12:
                    ad:22:f4:32:f9:e5:27:d4:9d:ff:b7:11:bd:ec:e2:
                    28:59:ec:a5:f7:b0:f0:97:fe:8d:a8:d2:7b:d2:7d:
                    68:07:9a:a5:93:f3:9e:3c:4f:7f:15:84:47:24:af:
                    20:fd:a7:cc:91:03:d0:4c:eb:42:bd:bd:b0:c4:13:
                    70:ed:ec:aa:bd:be:22:3f:8d:0d:9e:8b:f2:26:a5:
                    bd:3c:6c:34:10:e1:01:c8:27:ba:84:27:ef:f3:df:
                    a8:94:71:5a:7c:b3:1e:bf:33:05:74:0f:e2:0f:f7:
                    58:38:34:e0:b4:ee:f3:f5:ec:aa:49:0f:b6:e7:15:
                    a8:ec:68:d6:12:78:1e:3a:ca:a5:b6:ce:92:70:f4:
                    0b:2a:38:9d:b7:4f:cd:68:a9:2f:45:5a:59:56:5b:
                    4f:21:5f:ab:13:f0:77:94:4c:77:5d:75:c5:cf:af:
                    1d:11:05:d8:5a:60:10:be:bc:64:04:a4:14:68:0a:
                    72:0f:98:84:37:19:fd:a9:a3:cc:82:e1:f3:9b:93:
                    77:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:23:86:A8:F0:31:39:73:8D:58:E1:A6:0F:C0:02:DF:29:8F:51:30
            X509v3 Authority Key Identifier:
                keyid:21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/3133382e3132312e3136342e302f32332d3233203d3e20323730393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:32:26:93:e7:31:7f:3f:15:af:c9:f1:32:e0:c9:b5:e3:f4:
         fb:8f:36:5a:92:ec:58:f4:77:03:81:5d:06:cf:50:88:09:81:
         86:2b:bc:a3:6e:d2:65:a1:03:0e:d1:3a:7f:fc:d9:e0:20:c2:
         3e:40:9b:99:04:38:c5:6d:fd:8b:2d:d2:95:69:9f:5d:8b:23:
         76:40:54:f9:77:64:ab:e6:a6:dd:7c:f5:3d:e1:50:84:c7:8c:
         23:1b:4e:6d:d2:cf:02:e5:86:18:e0:05:25:9c:d3:05:24:1c:
         ea:35:d2:e6:96:8b:cd:be:1d:d3:91:5e:62:17:c0:d7:1f:fd:
         33:27:00:2a:32:15:90:c2:1f:f3:70:f3:e6:7b:6f:1f:b4:b2:
         f8:b1:4f:05:df:0c:6d:d7:4b:a2:53:9a:70:dc:7f:62:41:c5:
         ee:cc:df:1d:dd:55:12:f6:ea:e1:c6:04:6a:0a:76:78:7b:ab:
         3d:d0:41:15:51:73:f3:7c:6e:25:35:c9:b4:1b:49:6b:cb:b3:
         22:f6:e8:fd:b2:f4:cd:f2:7e:55:82:de:40:72:e0:c2:30:2c:
         7d:6d:05:1e:c3:d7:73:fc:e2:27:37:5c:6f:d4:77:1a:ca:3b:
         ce:fe:d4:a0:56:80:5b:9a:44:c5:b0:96:55:17:6f:4f:fc:23:
         20:ef:b8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 01:43:22 2026 by rpki-client