Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/1/3133382e3138352e34382e302f32322d3234203d3e20323632333233.roa
File:                     3133382e3138352e34382e302f32322d3234203d3e20323632333233.roa (raw, json)
Hash identifier:          ksJhTav1vUyozMKa7dPbjPtKwJOevEufiK024zTyrIc=
Subject key identifier:   22:A5:7E:05:81:DA:AA:A4:95:19:7F:FF:F2:32:4A:E7:85:A5:CB:D5
Certificate issuer:       /CN=BF6A5837C3F4344BD78A072E1B9834FDE6824283
Certificate serial:       3EC8DBE3BB430923D8362ECBD5A0AE9886579791
Authority key identifier: BF:6A:58:37:C3:F4:34:4B:D7:8A:07:2E:1B:98:34:FD:E6:82:42:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF6A5837C3F4344BD78A072E1B9834FDE6824283.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/1/3133382e3138352e34382e302f32322d3234203d3e20323632333233.roa
Signing time:             Thu 05 Feb 2026 10:01:37 +0000
ROA not before:           Thu 05 Feb 2026 09:56:37 +0000
ROA not after:            Thu 04 Feb 2027 10:01:37 +0000
asID:                     262323
IP address blocks:        138.185.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/1/BF6A5837C3F4344BD78A072E1B9834FDE6824283.crl
                          rsync://rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/1/BF6A5837C3F4344BD78A072E1B9834FDE6824283.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF6A5837C3F4344BD78A072E1B9834FDE6824283.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 15:02:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:c8:db:e3:bb:43:09:23:d8:36:2e:cb:d5:a0:ae:98:86:57:97:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF6A5837C3F4344BD78A072E1B9834FDE6824283
        Validity
            Not Before: Feb  5 09:56:37 2026 GMT
            Not After : Feb  4 10:01:37 2027 GMT
        Subject: CN=22A57E0581DAAAA495197FFFF2324AE785A5CBD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b7:cd:cb:59:4a:12:e4:44:14:4d:c0:c6:ca:
                    08:67:58:ac:25:c7:62:ae:bf:32:13:4f:8b:f8:8e:
                    d6:5d:db:f4:55:76:03:4c:f0:6b:7a:e0:ab:69:7b:
                    51:1d:91:99:f9:38:48:41:92:b0:c3:39:f4:04:7c:
                    90:01:f6:f7:0a:e4:49:8a:a7:a5:b6:02:d8:07:f3:
                    fe:b7:98:8e:29:ca:53:8b:04:0d:6c:42:89:ed:58:
                    23:6b:e1:6e:7e:9a:10:9c:54:eb:fe:7f:ba:d1:43:
                    ed:f4:86:19:65:1f:bd:d9:1c:42:22:44:a8:01:53:
                    d4:51:06:50:a9:c8:3b:b9:38:79:9a:30:fc:73:db:
                    a1:1b:a8:57:6c:d5:47:33:00:71:a4:81:8e:54:aa:
                    a3:79:32:7c:87:b6:6e:90:91:f6:b3:ed:ae:b0:af:
                    e8:1e:ce:c9:a8:83:aa:a0:1d:d7:f6:9b:16:5a:4c:
                    7f:e9:4d:e0:8f:1f:b5:e4:7c:b5:7d:b9:d9:3c:a3:
                    b9:f3:c2:54:5d:a1:5e:34:db:2d:ae:2c:4d:8f:60:
                    13:fc:60:be:eb:6a:e5:56:3b:61:ac:a3:bd:72:5b:
                    1e:2e:db:ca:71:5e:64:8b:24:15:80:4d:57:c6:12:
                    35:9f:6c:b9:47:89:4d:7f:fa:79:66:84:b0:1a:4b:
                    1a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A5:7E:05:81:DA:AA:A4:95:19:7F:FF:F2:32:4A:E7:85:A5:CB:D5
            X509v3 Authority Key Identifier:
                keyid:BF:6A:58:37:C3:F4:34:4B:D7:8A:07:2E:1B:98:34:FD:E6:82:42:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/1/BF6A5837C3F4344BD78A072E1B9834FDE6824283.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF6A5837C3F4344BD78A072E1B9834FDE6824283.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/1/3133382e3138352e34382e302f32322d3234203d3e20323632333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:63:01:1f:03:8c:94:fb:7b:98:28:a6:5a:9d:bd:0d:fc:10:
         fd:f7:e9:b1:3e:ef:02:e0:e5:89:7e:6a:60:26:38:ad:2b:b5:
         c2:e5:c3:f3:59:8a:cf:51:27:e0:8b:28:e7:b0:21:a6:47:4e:
         5e:e7:de:c0:0e:12:68:41:c8:c7:e9:b7:6f:40:32:73:b4:1f:
         79:1f:6d:66:79:76:6f:19:d5:80:cf:40:9b:82:9d:c1:88:d8:
         73:55:81:d8:b2:14:01:16:83:73:62:cc:15:f9:de:de:77:3e:
         cb:ac:bc:3b:d8:fa:8c:a1:5f:c9:0b:8f:be:a2:c0:4a:97:d5:
         b8:7d:50:c2:c7:4e:73:97:a1:75:96:af:96:81:ff:d9:4d:b8:
         d5:38:57:f6:da:35:0f:cd:22:66:b5:a1:00:15:97:9f:9f:93:
         4b:13:10:33:75:13:d8:57:6a:4f:99:6f:63:0b:d5:33:fe:7f:
         65:c9:26:3e:5d:d8:98:e3:ef:bd:97:cf:21:e5:2e:ac:22:a3:
         d5:b3:f3:1c:89:59:d3:e3:00:76:1b:13:0c:e9:b2:dd:f7:10:
         cd:7b:22:0e:94:77:0c:9d:21:27:8a:b1:1e:5b:ff:2a:e3:dc:
         0d:5c:0f:a7:bd:f5:6a:9e:16:3b:15:1b:3b:10:3f:e0:6f:d1:
         53:dc:56:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:37:59 2026 by rpki-client