Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/3133312e3130382e3137322e302f32322d3232203d3e20323634333836.roa
File:                     3133312e3130382e3137322e302f32322d3232203d3e20323634333836.roa (raw, json)
Hash identifier:          ujqnDp2+YEwXM9ncBaOcCCQ+V+3aNd81j4AwQAgNMTk=
Subject key identifier:   B1:13:A1:9A:3D:BE:87:5A:6C:7D:6D:EA:36:54:58:46:D7:20:C5:FF
Certificate issuer:       /CN=CC038C42F33B3D558931769A27D97E3412751117
Certificate serial:       75F020FE9E2169400DC87B885357F4C548734BE2
Authority key identifier: CC:03:8C:42:F3:3B:3D:55:89:31:76:9A:27:D9:7E:34:12:75:11:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC038C42F33B3D558931769A27D97E3412751117.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/3133312e3130382e3137322e302f32322d3232203d3e20323634333836.roa
Signing time:             Wed 04 Feb 2026 22:48:06 +0000
ROA not before:           Wed 04 Feb 2026 22:43:06 +0000
ROA not after:            Wed 03 Feb 2027 22:48:06 +0000
asID:                     264386
IP address blocks:        131.108.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/CC038C42F33B3D558931769A27D97E3412751117.crl
                          rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/CC038C42F33B3D558931769A27D97E3412751117.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC038C42F33B3D558931769A27D97E3412751117.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 17:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:f0:20:fe:9e:21:69:40:0d:c8:7b:88:53:57:f4:c5:48:73:4b:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC038C42F33B3D558931769A27D97E3412751117
        Validity
            Not Before: Feb  4 22:43:06 2026 GMT
            Not After : Feb  3 22:48:06 2027 GMT
        Subject: CN=B113A19A3DBE875A6C7D6DEA36545846D720C5FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8a:7f:89:1c:2a:3f:61:22:e0:a4:9b:8f:55:
                    9a:de:bf:47:03:05:e7:2f:65:e1:9c:d1:1c:63:2a:
                    21:49:f8:49:59:8e:7e:80:38:97:ca:28:d5:a0:97:
                    14:df:02:7d:d3:f5:81:5c:e7:73:3b:fe:02:6e:7f:
                    4d:24:7d:43:86:03:7a:ed:f0:dd:2e:ad:7f:c1:85:
                    8e:2f:38:b4:89:40:d7:f0:35:29:0a:7a:24:30:98:
                    c9:76:3b:11:a3:4e:b1:22:14:06:5b:62:13:90:70:
                    86:d0:ef:d1:c5:d3:58:05:f6:f8:74:28:29:cb:15:
                    65:62:9a:75:50:20:9b:ac:06:a6:28:dc:c1:e6:38:
                    db:47:8e:68:25:ac:3b:db:0c:92:84:66:dc:70:1c:
                    ff:3e:a8:d0:36:73:44:44:8c:c3:67:9f:5f:da:b7:
                    f0:be:8b:4a:6d:b8:34:73:0f:a6:d6:ed:8d:9c:16:
                    9c:f8:60:51:29:1e:0e:2d:f2:43:d9:63:de:3b:96:
                    30:72:4f:8e:4e:3c:81:d7:5c:61:f2:20:bc:29:6d:
                    a3:9c:53:bb:8d:8b:73:c1:7c:f7:d0:1f:89:10:c8:
                    3c:d4:9c:fe:ef:73:2b:ca:7a:b2:c4:c1:6e:c4:01:
                    85:96:a5:eb:9d:1e:3d:ae:9a:5f:69:05:61:08:70:
                    9a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:13:A1:9A:3D:BE:87:5A:6C:7D:6D:EA:36:54:58:46:D7:20:C5:FF
            X509v3 Authority Key Identifier:
                keyid:CC:03:8C:42:F3:3B:3D:55:89:31:76:9A:27:D9:7E:34:12:75:11:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/CC038C42F33B3D558931769A27D97E3412751117.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC038C42F33B3D558931769A27D97E3412751117.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/3133312e3130382e3137322e302f32322d3232203d3e20323634333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:da:db:9a:f5:5e:31:35:e8:a1:18:14:0c:f6:f4:12:db:88:
         00:64:e3:97:dd:20:c1:f8:21:99:f3:b0:0c:c8:37:cb:09:78:
         c6:ea:04:24:40:35:41:bd:d6:7d:f0:fa:68:88:45:fe:74:17:
         d8:4e:37:40:38:75:bb:11:eb:a5:62:f6:09:9f:a5:07:db:55:
         33:ac:d2:a3:e0:20:6e:69:c9:47:cf:76:94:3b:96:4a:ee:c1:
         bf:01:73:9c:51:ab:24:45:4f:bb:a6:c0:e7:ab:ca:41:09:57:
         01:3d:35:65:cf:e8:97:94:60:2a:4a:a4:b6:5b:70:1f:b7:24:
         7d:b0:57:36:2a:64:1a:b2:19:c1:de:0a:63:81:80:9c:ea:9a:
         25:67:7b:73:7b:dd:c5:e9:3d:a2:c7:74:47:14:49:00:e6:14:
         a0:10:a8:0e:48:a7:66:3f:9c:56:e0:bc:a2:18:07:34:09:69:
         27:dd:15:ef:64:1e:ce:b7:4d:84:4c:72:58:7b:17:54:3b:60:
         63:a9:0b:a2:b1:99:25:49:ab:7f:10:45:2e:1d:5e:1d:d8:a1:
         d8:4c:f1:28:56:e2:91:16:49:25:0c:c2:55:d9:d4:ea:1e:48:
         50:c6:e4:d8:f6:b2:e7:0b:d8:6a:1f:15:c0:44:60:aa:cf:7f:
         53:0f:6d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:57:24 2026 by rpki-client