Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/3133382e3230342e3132342e302f32322d3234203d3e20323634343131.roa
File:                     3133382e3230342e3132342e302f32322d3234203d3e20323634343131.roa (raw, json)
Hash identifier:          aSPcU9RuUpHfXwtq5XjoIktkoXfUIDz0SoKxn2hPYdo=
Subject key identifier:   91:88:0A:96:F8:66:5E:C1:5A:93:73:CB:32:68:7D:A3:60:B5:CD:20
Certificate issuer:       /CN=86B86B5CE986FADF5205AFD26561EEEC22B3A359
Certificate serial:       301ECBBA2A2B17265BB487EE69A3472A12C356A4
Authority key identifier: 86:B8:6B:5C:E9:86:FA:DF:52:05:AF:D2:65:61:EE:EC:22:B3:A3:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/3133382e3230342e3132342e302f32322d3234203d3e20323634343131.roa
Signing time:             Fri 06 Feb 2026 01:46:30 +0000
ROA not before:           Fri 06 Feb 2026 01:41:30 +0000
ROA not after:            Fri 05 Feb 2027 01:46:30 +0000
asID:                     264411
IP address blocks:        138.204.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.crl
                          rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:11:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:1e:cb:ba:2a:2b:17:26:5b:b4:87:ee:69:a3:47:2a:12:c3:56:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86B86B5CE986FADF5205AFD26561EEEC22B3A359
        Validity
            Not Before: Feb  6 01:41:30 2026 GMT
            Not After : Feb  5 01:46:30 2027 GMT
        Subject: CN=91880A96F8665EC15A9373CB32687DA360B5CD20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:07:5f:2c:0a:44:0e:29:1f:ad:b4:57:ae:be:
                    b4:6e:e4:91:06:ef:2c:56:77:46:42:a8:0e:fd:98:
                    03:a3:22:42:e2:f6:46:6e:a7:11:24:e3:ef:a1:38:
                    90:3f:4e:bc:20:cc:f9:62:07:0e:85:65:00:f7:b7:
                    e8:9d:39:ea:7f:28:8c:4b:d2:50:f5:2f:e9:ab:cf:
                    4e:d0:cb:2d:43:9d:ae:0b:fc:6b:c7:dc:db:9a:63:
                    6d:58:9e:d2:65:93:09:22:36:83:e8:26:8c:81:1f:
                    fb:66:92:59:77:2b:51:99:d8:3f:37:1d:4d:74:25:
                    ea:1d:ee:f3:95:6f:b5:c2:22:47:8e:26:f8:4b:ff:
                    b1:da:b6:85:8b:32:53:f7:95:27:71:4c:42:34:ca:
                    f6:3f:d9:17:f5:3a:99:97:9c:84:f9:4a:30:11:78:
                    47:01:90:51:b7:00:a6:95:85:9a:a9:f7:e2:a7:3a:
                    db:c9:21:d6:d8:2f:7b:52:f2:ba:0f:26:6a:96:0f:
                    c3:e4:44:24:9a:7d:f3:28:69:6d:56:90:43:83:4b:
                    6e:10:c0:4c:61:bd:ed:45:f4:95:db:1d:64:ff:20:
                    2d:b0:8f:27:fc:ec:64:44:27:15:8c:e5:a2:0e:3b:
                    e5:9d:f2:7d:36:e5:8d:57:0e:84:53:f6:b8:91:b1:
                    cd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:88:0A:96:F8:66:5E:C1:5A:93:73:CB:32:68:7D:A3:60:B5:CD:20
            X509v3 Authority Key Identifier:
                keyid:86:B8:6B:5C:E9:86:FA:DF:52:05:AF:D2:65:61:EE:EC:22:B3:A3:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/3133382e3230342e3132342e302f32322d3234203d3e20323634343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:d5:f2:dc:65:3f:fc:40:47:a7:da:63:ba:a7:f6:f4:78:e5:
         ce:fd:08:d2:ab:b2:dd:fa:fb:3c:eb:90:8f:f9:64:21:d7:c4:
         59:5d:4c:c3:12:ce:1c:80:52:5a:c8:9d:33:1a:1c:3f:12:9d:
         05:e6:6d:ba:54:df:3c:16:41:c7:14:22:16:5c:b3:dd:91:9a:
         92:e2:6a:d3:0b:20:a9:7c:61:df:6c:23:02:49:f2:2b:a3:19:
         54:ce:ef:f0:86:dc:e6:45:28:77:08:62:eb:be:d7:67:20:ff:
         7e:4f:35:f5:5e:7a:42:6c:1e:f5:47:31:c9:33:39:6a:73:44:
         b5:e8:c5:fc:cd:93:56:23:fc:af:85:49:2a:e9:7e:23:92:c8:
         5a:8f:06:28:e4:e7:b7:1e:55:ec:01:4a:15:00:23:34:1e:59:
         69:a2:32:8d:71:ab:2c:6b:ed:f9:87:6c:9f:54:54:01:c3:dd:
         36:96:83:40:b4:eb:2b:e8:a3:6c:4c:01:5c:43:66:fc:55:fd:
         02:70:2e:6f:54:53:1c:fe:3d:b4:3c:88:7f:4a:93:8a:50:86:
         fd:92:2f:8c:47:e3:40:48:f6:38:4a:0d:38:b0:07:c8:bc:f3:
         dd:0a:f0:99:1e:9d:71:71:d3:b9:71:29:bc:18:ea:d2:f7:a0:
         ca:ca:83:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 08:49:29 2026 by rpki-client