Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D9YdGA45H71ReSAdywWXT5MCJqGXk9LeGPjVrTtKwjEX/1/3133382e3235352e3131322e302f32322d3234203d3e20323633393638.roa
File:                     3133382e3235352e3131322e302f32322d3234203d3e20323633393638.roa (raw, json)
Hash identifier:          GFLFR775rJmpHemRBi5W9Y/O1PPDViF/iaeF+NoRWno=
Subject key identifier:   4E:D0:F7:B8:6C:7D:FC:D9:54:41:7E:EC:BC:6C:7D:38:04:71:A7:FF
Certificate issuer:       /CN=FD75033BF4CEBF8CEC762295C0AE89B5A3946B7B
Certificate serial:       7D036891BB42BDA93ACB1ABFFA7F54D66C9601D1
Authority key identifier: FD:75:03:3B:F4:CE:BF:8C:EC:76:22:95:C0:AE:89:B5:A3:94:6B:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD75033BF4CEBF8CEC762295C0AE89B5A3946B7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9YdGA45H71ReSAdywWXT5MCJqGXk9LeGPjVrTtKwjEX/1/3133382e3235352e3131322e302f32322d3234203d3e20323633393638.roa
Signing time:             Thu 05 Feb 2026 04:50:46 +0000
ROA not before:           Thu 05 Feb 2026 04:45:46 +0000
ROA not after:            Thu 04 Feb 2027 04:50:46 +0000
asID:                     263968
IP address blocks:        138.255.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D9YdGA45H71ReSAdywWXT5MCJqGXk9LeGPjVrTtKwjEX/1/FD75033BF4CEBF8CEC762295C0AE89B5A3946B7B.crl
                          rsync://rpki-repo.registro.br/repo/D9YdGA45H71ReSAdywWXT5MCJqGXk9LeGPjVrTtKwjEX/1/FD75033BF4CEBF8CEC762295C0AE89B5A3946B7B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD75033BF4CEBF8CEC762295C0AE89B5A3946B7B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 22:50:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:03:68:91:bb:42:bd:a9:3a:cb:1a:bf:fa:7f:54:d6:6c:96:01:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD75033BF4CEBF8CEC762295C0AE89B5A3946B7B
        Validity
            Not Before: Feb  5 04:45:46 2026 GMT
            Not After : Feb  4 04:50:46 2027 GMT
        Subject: CN=4ED0F7B86C7DFCD954417EECBC6C7D380471A7FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:72:f1:84:fb:19:e5:d5:01:6b:d1:0e:ad:89:
                    6d:2e:c8:3d:2f:a8:1b:f5:c4:6d:d8:83:c9:1e:67:
                    f5:be:8b:a3:1d:a2:8c:e5:15:ec:13:a5:82:f2:4a:
                    b9:6e:79:93:cf:fe:9f:f5:45:6c:68:3f:ee:ef:ac:
                    b7:f4:8c:84:4b:92:1c:92:68:08:f1:ea:ac:e2:ac:
                    b0:12:35:da:43:51:8f:4e:a5:c9:82:45:5e:c7:ed:
                    27:08:30:57:bd:f5:9c:76:67:e9:ad:6e:ca:2e:03:
                    ee:f8:c1:f3:b2:e9:4e:08:b0:b5:5d:12:f4:09:d1:
                    ac:01:ce:0f:5c:c6:d4:e5:ae:06:04:d9:77:16:e0:
                    c9:4f:cb:d8:e5:b5:ec:73:79:7a:5b:6f:fd:8a:16:
                    66:f8:e9:12:71:d3:8f:23:47:2a:02:a0:d8:57:71:
                    ec:b6:80:7e:bf:d9:53:76:5b:b4:8a:5d:50:6d:38:
                    a7:3b:a3:47:f5:e5:e1:a5:3d:9f:2c:47:ff:eb:94:
                    e7:2e:75:bf:65:71:4d:f3:16:d0:45:06:3a:b7:26:
                    55:7e:7c:4a:c3:25:c4:a4:50:c1:62:82:8a:db:16:
                    48:f5:5d:b8:41:09:c4:30:13:9d:5f:64:5c:f5:5e:
                    da:2b:7f:39:5d:34:22:38:0c:83:ed:08:31:7f:04:
                    fe:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D0:F7:B8:6C:7D:FC:D9:54:41:7E:EC:BC:6C:7D:38:04:71:A7:FF
            X509v3 Authority Key Identifier:
                keyid:FD:75:03:3B:F4:CE:BF:8C:EC:76:22:95:C0:AE:89:B5:A3:94:6B:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9YdGA45H71ReSAdywWXT5MCJqGXk9LeGPjVrTtKwjEX/1/FD75033BF4CEBF8CEC762295C0AE89B5A3946B7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD75033BF4CEBF8CEC762295C0AE89B5A3946B7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9YdGA45H71ReSAdywWXT5MCJqGXk9LeGPjVrTtKwjEX/1/3133382e3235352e3131322e302f32322d3234203d3e20323633393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:1d:23:82:45:3d:b1:83:76:e4:3a:f3:d4:d2:db:f5:a1:74:
         50:3a:ab:95:17:0a:77:a8:16:8f:b0:ea:16:4e:cf:b3:ba:f2:
         4f:28:cb:8e:c5:55:d0:d6:e2:9b:f7:55:55:c6:88:4a:a6:0c:
         74:21:01:a5:3d:18:b6:c2:42:79:e2:2d:73:52:7d:83:1a:82:
         d9:8f:5c:52:80:72:b2:4e:22:a3:ae:4a:ce:1d:1f:95:2d:b3:
         dd:f4:f2:6c:52:04:2c:13:c7:3f:4d:c5:c0:93:8b:c6:fe:44:
         ac:71:12:1d:78:93:02:82:14:e0:82:80:ef:07:f4:e5:4b:a5:
         54:ae:06:95:a0:d4:74:40:44:a9:43:22:ad:e9:8d:22:9d:c3:
         e8:d0:08:ac:bf:0c:91:f1:9a:4d:52:0d:9d:bd:6c:18:91:ed:
         f0:c7:32:27:c8:34:8d:b8:87:c4:03:8b:9e:e0:90:d6:6c:3e:
         a7:13:b8:71:00:ef:2a:8d:b8:50:fc:23:cc:4f:66:2e:cc:7d:
         04:98:89:d0:73:80:c8:b2:3b:7b:1d:41:4b:9c:1f:a9:50:4e:
         c4:8a:cc:df:f3:e0:5d:30:8b:60:69:b3:a9:b3:6f:ba:33:0e:
         da:0e:a8:16:ce:0b:26:c9:6a:63:02:18:a0:dd:67:c9:e9:c8:
         95:d1:3d:4d
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUfQNokbtCvak6yxq/+n9U1myWAdEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkQ3NTAzM0JGNENFQkY4Q0VDNzYyMjk1QzBBRTg5QjVB
Mzk0NkI3QjAeFw0yNjAyMDUwNDQ1NDZaFw0yNzAyMDQwNDUwNDZaMDMxMTAvBgNV
BAMTKDRFRDBGN0I4NkM3REZDRDk1NDQxN0VFQ0JDNkM3RDM4MDQ3MUE3RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbcvGE+xnl1QFr0Q6tiW0uyD0v
qBv1xG3Yg8keZ/W+i6MdoozlFewTpYLySrlueZPP/p/1RWxoP+7vrLf0jIRLkhyS
aAjx6qzirLASNdpDUY9OpcmCRV7H7ScIMFe99Zx2Z+mtbsouA+74wfOy6U4IsLVd
EvQJ0awBzg9cxtTlrgYE2XcW4MlPy9jltexzeXpbb/2KFmb46RJx048jRyoCoNhX
cey2gH6/2VN2W7SKXVBtOKc7o0f15eGlPZ8sR//rlOcudb9lcU3zFtBFBjq3JlV+
fErDJcSkUMFigorbFkj1XbhBCcQwE51fZFz1XtorfzldNCI4DIPtCDF/BP7/AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUTtD3uGx9/NlUQX7svGx9OARxp/8wHwYDVR0j
BBgwFoAU/XUDO/TOv4zsdiKVwK6JtaOUa3swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDlZZEdBNDVINzFSZVNBZHl3V1hUNU1DSnFHWGs5TGVHUGpWclR0S3dq
RVgvMS9GRDc1MDMzQkY0Q0VCRjhDRUM3NjIyOTVDMEFFODlCNUEzOTQ2QjdCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZENzUwMzNCRjRDRUJGOENF
Qzc2MjI5NUMwQUU4OUI1QTM5NDZCN0IuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q5WWRHQTQ1SDcxUmVTQWR5d1dYVDVNQ0pxR1hrOUxlR1BqVnJUdEt3akVYLzEv
MzEzMzM4MmUzMjM1MzUyZTMxMzEzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMzM5MzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAor/cDANBgkqhkiG9w0BAQsFAAOCAQEAmx0j
gkU9sYN25Drz1NLb9aF0UDqrlRcKd6gWj7DqFk7Ps7ryTyjLjsVV0Nbim/dVVcaI
SqYMdCEBpT0YtsJCeeItc1J9gxqC2Y9cUoBysk4io65Kzh0flS2z3fTybFIELBPH
P03FwJOLxv5ErHESHXiTAoIU4IKA7wf05UulVK4GlaDUdEBEqUMiremNIp3D6NAI
rL8MkfGaTVINnb1sGJHt8McyJ8g0jbiHxAOLnuCQ1mw+pxO4cQDvKo24UPwjzE9m
Lsx9BJiJ0HOAyLI7ex1BS5wfqVBOxIrM3/PgXTCLYGmzqbNvujMO2g6oFs4LJslq
YwIYoN1nyenIldE9TQ==
-----END CERTIFICATE-----
Generated at Thu Feb 19 14:21:14 2026 by rpki-client