Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZ31i2iVzQPCDjYu89Bx78mVaLL9b6jZtySUS3t4vGkE/1/3133382e302e3233362e302f32322d3234203d3e20323634353733.roa
File:                     3133382e302e3233362e302f32322d3234203d3e20323634353733.roa (raw, json)
Hash identifier:          QcLZiX1xwup3etmlpntD7QOm5A4Uh3wZ4rhPjdfTEoM=
Subject key identifier:   79:8A:83:3B:F1:93:40:91:09:C3:48:3F:E4:11:93:58:0C:D9:69:FE
Certificate issuer:       /CN=DF915FC701D29BA7ABB1E98C2A4207E51058EE32
Certificate serial:       57B4A7B28756D22F33AEE0D84D76A0CA116FE3D7
Authority key identifier: DF:91:5F:C7:01:D2:9B:A7:AB:B1:E9:8C:2A:42:07:E5:10:58:EE:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF915FC701D29BA7ABB1E98C2A4207E51058EE32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZ31i2iVzQPCDjYu89Bx78mVaLL9b6jZtySUS3t4vGkE/1/3133382e302e3233362e302f32322d3234203d3e20323634353733.roa
Signing time:             Thu 05 Feb 2026 08:57:29 +0000
ROA not before:           Thu 05 Feb 2026 08:52:29 +0000
ROA not after:            Thu 04 Feb 2027 08:57:29 +0000
asID:                     264573
IP address blocks:        138.0.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EZ31i2iVzQPCDjYu89Bx78mVaLL9b6jZtySUS3t4vGkE/1/DF915FC701D29BA7ABB1E98C2A4207E51058EE32.crl
                          rsync://rpki-repo.registro.br/repo/EZ31i2iVzQPCDjYu89Bx78mVaLL9b6jZtySUS3t4vGkE/1/DF915FC701D29BA7ABB1E98C2A4207E51058EE32.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF915FC701D29BA7ABB1E98C2A4207E51058EE32.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:28:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:b4:a7:b2:87:56:d2:2f:33:ae:e0:d8:4d:76:a0:ca:11:6f:e3:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF915FC701D29BA7ABB1E98C2A4207E51058EE32
        Validity
            Not Before: Feb  5 08:52:29 2026 GMT
            Not After : Feb  4 08:57:29 2027 GMT
        Subject: CN=798A833BF193409109C3483FE41193580CD969FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2f:12:fe:6a:da:9a:78:2d:52:d7:30:bf:85:
                    5c:68:91:ec:7a:45:d0:3a:e7:fe:84:72:59:5c:26:
                    10:6b:b5:7a:06:8f:9b:d3:29:69:ab:6d:ae:a6:03:
                    b0:92:7b:37:5a:48:f8:64:f8:3b:92:52:8a:28:2c:
                    d4:1b:58:f8:3a:42:e7:0c:ce:69:f9:73:2f:05:35:
                    da:b6:26:9c:25:69:38:f4:e1:9c:76:a7:87:e2:ff:
                    85:d2:87:60:10:34:02:56:c2:83:ff:ca:2d:3a:d4:
                    0c:9b:07:78:ef:fe:e0:18:b6:ed:04:29:54:3f:39:
                    2b:aa:e4:0a:79:ac:09:8c:58:47:2a:ac:ab:57:bb:
                    33:94:59:8b:2b:c8:de:9f:46:07:95:89:c9:79:2d:
                    e1:00:8b:ac:b4:54:69:a1:bf:c0:6d:24:91:79:c2:
                    46:26:62:d4:2b:9b:b0:68:9b:66:2d:86:85:b9:41:
                    79:9d:24:f3:6a:58:ec:ad:f0:1f:17:0c:3f:4c:79:
                    d6:87:8d:7d:49:0f:85:1c:ba:b0:fd:78:a5:31:6f:
                    9e:99:bb:f0:78:f2:88:35:55:16:6e:f8:03:56:81:
                    85:86:ae:13:02:5e:d5:ac:88:38:76:40:06:d5:6a:
                    5c:93:7d:c6:22:fa:f4:f8:5c:59:91:d4:2c:60:d0:
                    bf:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:8A:83:3B:F1:93:40:91:09:C3:48:3F:E4:11:93:58:0C:D9:69:FE
            X509v3 Authority Key Identifier:
                keyid:DF:91:5F:C7:01:D2:9B:A7:AB:B1:E9:8C:2A:42:07:E5:10:58:EE:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZ31i2iVzQPCDjYu89Bx78mVaLL9b6jZtySUS3t4vGkE/1/DF915FC701D29BA7ABB1E98C2A4207E51058EE32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF915FC701D29BA7ABB1E98C2A4207E51058EE32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZ31i2iVzQPCDjYu89Bx78mVaLL9b6jZtySUS3t4vGkE/1/3133382e302e3233362e302f32322d3234203d3e20323634353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:5f:71:30:3f:cf:a7:7a:9e:e1:d5:69:04:04:3e:d2:af:ec:
         17:aa:2d:e7:15:79:4f:42:d9:56:d7:83:4b:36:57:c7:55:4e:
         59:48:ae:a0:fa:92:aa:51:36:41:8e:5d:87:01:6a:16:86:7c:
         b5:22:2c:c3:c6:8d:f1:16:56:27:9a:20:1a:a7:e5:23:5d:47:
         9c:f2:00:3c:63:55:0e:08:16:7b:bb:81:aa:17:a8:8f:6e:6e:
         ea:15:a2:f7:bc:92:40:ff:35:c7:ef:01:c2:46:55:1e:9b:c1:
         57:a1:fb:e6:5c:d9:7d:07:8a:4b:cb:11:21:a8:d7:b0:00:00:
         52:47:d8:ac:32:57:17:68:e0:77:34:68:40:35:03:34:8d:06:
         5b:99:5b:79:6f:30:21:05:4f:36:18:72:ca:d0:da:53:fd:6e:
         4e:88:90:bc:13:9c:b2:e9:a6:6f:a3:d5:fb:62:78:f4:fa:40:
         1f:a3:57:80:cf:cf:bb:2e:33:df:c4:0b:88:71:97:cb:67:91:
         e8:dc:58:9f:fc:12:48:a5:d0:97:2c:6e:c1:b9:25:6b:a4:a4:
         a9:e9:34:ab:43:48:ef:7c:6d:cb:09:59:e8:ac:54:7d:03:dd:
         f4:a6:d2:6a:b2:d1:d2:6d:d2:fb:31:11:61:a7:22:f1:99:0d:
         72:51:ba:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:51:19 2026 by rpki-client