Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/3133382e3132312e3232342e302f32322d3234203d3e20323634343430.roa
File:                     3133382e3132312e3232342e302f32322d3234203d3e20323634343430.roa (raw, json)
Hash identifier:          KeATW2+WTsAZ3teiwzE5i1dJQy7AfZCS2Ly3+ZHxEBo=
Subject key identifier:   B4:AF:D3:24:44:22:BC:A0:99:03:11:89:65:F2:BC:C6:01:EA:38:0A
Certificate issuer:       /CN=E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9
Certificate serial:       08042AD6ECCB484E44730505458D0F47F3E42332
Authority key identifier: E7:D9:CB:B2:81:E5:5D:A4:61:F6:EB:9D:AF:25:A7:E9:16:2A:D2:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/3133382e3132312e3232342e302f32322d3234203d3e20323634343430.roa
Signing time:             Wed 04 Feb 2026 20:00:00 +0000
ROA not before:           Wed 04 Feb 2026 19:55:00 +0000
ROA not after:            Wed 03 Feb 2027 20:00:00 +0000
asID:                     264440
IP address blocks:        138.121.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.crl
                          rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:04:2a:d6:ec:cb:48:4e:44:73:05:05:45:8d:0f:47:f3:e4:23:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9
        Validity
            Not Before: Feb  4 19:55:00 2026 GMT
            Not After : Feb  3 20:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:38:2c:eb:03:b7:98:19:12:0b:30:af:55:9b:
                    be:7e:a1:d4:d7:8d:24:cf:0b:19:4a:3a:d1:aa:09:
                    83:21:b6:29:62:aa:8f:6d:5b:23:fa:b5:91:4e:ed:
                    47:5f:de:34:70:2a:3d:32:e9:0a:60:ad:69:b2:a7:
                    40:1c:ad:ff:9f:31:2f:a1:ec:06:d8:3f:a8:91:07:
                    41:cd:31:4f:22:56:8c:ac:c0:0a:74:d3:4e:e8:7d:
                    a6:9b:8e:3c:0c:82:a0:34:81:f8:b2:6e:39:b9:cf:
                    5f:ea:8f:8c:8f:7f:21:29:65:ab:80:14:3c:b3:51:
                    f2:4d:7b:f8:fc:16:b1:93:bb:0e:04:51:f3:70:b3:
                    a0:23:77:1e:40:17:01:e0:74:a4:1c:a1:e8:55:2e:
                    a2:48:30:91:f5:99:d9:cb:bb:5b:25:d0:c0:32:9f:
                    b0:94:25:73:a8:20:de:ed:03:29:aa:58:ef:27:d6:
                    59:43:45:1c:37:8a:e7:1b:55:e7:3d:fc:0f:3e:a1:
                    d4:44:8d:a9:6c:ae:25:ec:f9:15:1f:0c:bd:bf:a1:
                    74:cf:67:bb:70:df:1c:af:e3:77:bb:93:99:d2:9e:
                    1b:cc:75:92:24:7e:b4:ce:2b:b3:a5:b6:0d:d6:a8:
                    60:3f:6a:9a:24:9b:98:ee:0d:dc:45:f7:ff:8c:90:
                    95:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:AF:D3:24:44:22:BC:A0:99:03:11:89:65:F2:BC:C6:01:EA:38:0A
            X509v3 Authority Key Identifier:
                keyid:E7:D9:CB:B2:81:E5:5D:A4:61:F6:EB:9D:AF:25:A7:E9:16:2A:D2:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/3133382e3132312e3232342e302f32322d3234203d3e20323634343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:c3:17:ea:8f:6c:63:ae:6f:d7:5d:2b:f1:08:a5:35:77:83:
         a4:6b:ff:00:90:27:e1:23:c5:9e:a7:47:0d:56:88:99:1a:b8:
         a8:7b:6a:d3:51:a0:d6:46:d7:f2:58:30:0e:2e:ed:d8:9c:90:
         cf:d7:2e:9e:65:fd:5d:18:88:75:57:8b:ae:29:4a:7b:d1:92:
         53:a4:2c:c4:ab:17:c0:38:c8:22:f9:5c:cc:74:41:cb:23:f4:
         dc:64:fb:f1:77:b5:58:65:87:75:48:66:43:6e:64:83:c6:a5:
         1f:23:65:d1:1c:7a:a6:9c:6b:68:53:91:f9:e1:d4:50:19:58:
         8f:6c:30:2c:3a:d9:65:46:63:5e:f1:78:13:83:0b:4f:17:6d:
         0d:a2:6f:3a:33:df:fc:9c:df:b8:e0:37:d0:2f:70:f3:79:0b:
         89:ec:9a:6e:b9:79:86:55:a5:65:51:5b:a4:a9:86:34:98:07:
         a0:52:39:9c:8c:88:db:3d:a4:e6:a2:c6:d6:fc:06:00:f5:ba:
         58:cb:ff:f0:e9:14:16:d4:18:77:ea:2c:78:7a:e8:f5:16:ce:
         4a:01:fb:bc:bd:41:29:81:96:96:c5:83:41:26:d5:60:dd:90:
         f6:fe:18:bc:23:70:f0:db:a4:a0:2b:4f:02:f8:a9:dc:3b:7f:
         2d:7e:37:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:41:46 2026 by rpki-client