Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZZ67s7Xii2wu2dGqf9nqdJ7YkQhXKRBaZtjPEhXTj4K/0/3133382e3235352e32342e302f32322d3234203d3e20323731333033.roa
File:                     3133382e3235352e32342e302f32322d3234203d3e20323731333033.roa (raw, json)
Hash identifier:          LALjN5q1EXZgKlMXK/5v64M5nv7lYFLxxzrA+Y01MYg=
Subject key identifier:   51:0A:C8:0F:79:9B:85:FB:D2:8D:FA:10:22:D3:10:FB:F3:62:74:F7
Certificate issuer:       /CN=C15204553C086D6BF9E70AEC6364510AE23486C3
Certificate serial:       2F49D94BF45C33C5F33634C885389B622A9C71C1
Authority key identifier: C1:52:04:55:3C:08:6D:6B:F9:E7:0A:EC:63:64:51:0A:E2:34:86:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C15204553C086D6BF9E70AEC6364510AE23486C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZZ67s7Xii2wu2dGqf9nqdJ7YkQhXKRBaZtjPEhXTj4K/0/3133382e3235352e32342e302f32322d3234203d3e20323731333033.roa
Signing time:             Tue 03 Feb 2026 19:16:41 +0000
ROA not before:           Tue 03 Feb 2026 19:11:41 +0000
ROA not after:            Tue 02 Feb 2027 19:16:41 +0000
asID:                     271303
IP address blocks:        138.255.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EZZ67s7Xii2wu2dGqf9nqdJ7YkQhXKRBaZtjPEhXTj4K/0/C15204553C086D6BF9E70AEC6364510AE23486C3.crl
                          rsync://rpki-repo.registro.br/repo/EZZ67s7Xii2wu2dGqf9nqdJ7YkQhXKRBaZtjPEhXTj4K/0/C15204553C086D6BF9E70AEC6364510AE23486C3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C15204553C086D6BF9E70AEC6364510AE23486C3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 17:55:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:49:d9:4b:f4:5c:33:c5:f3:36:34:c8:85:38:9b:62:2a:9c:71:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C15204553C086D6BF9E70AEC6364510AE23486C3
        Validity
            Not Before: Feb  3 19:11:41 2026 GMT
            Not After : Feb  2 19:16:41 2027 GMT
        Subject: CN=510AC80F799B85FBD28DFA1022D310FBF36274F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6d:c5:98:c2:ed:23:0e:0a:1c:89:f3:c0:ab:
                    9e:c2:99:28:76:60:e7:42:d2:08:cf:32:aa:28:e3:
                    03:4c:3b:25:ad:59:ad:19:ae:5c:99:8f:59:df:e5:
                    52:2d:bd:08:3a:22:a1:53:55:5e:82:ee:74:d9:5c:
                    34:f9:18:4a:5f:1e:9b:67:ad:ea:ae:a6:a5:5b:5f:
                    1f:ed:1a:34:e0:53:86:d5:98:53:f4:80:78:52:1b:
                    7c:4c:5d:88:f2:01:fe:f0:4e:49:7a:af:55:b3:8b:
                    eb:a4:6e:9d:31:85:9c:3f:db:a1:fa:bf:ce:90:53:
                    0e:f6:1d:df:20:40:04:c1:05:2e:6e:93:eb:40:18:
                    7f:35:3d:b9:8a:08:9d:86:56:3b:51:0e:93:28:2a:
                    cd:75:a8:b1:73:55:55:06:86:b8:50:2c:46:60:a8:
                    9c:af:6d:3f:8f:1e:93:33:ba:4a:df:65:2d:82:03:
                    0d:88:49:9f:13:5f:e0:e3:a9:5d:c4:74:d0:24:2c:
                    b8:91:41:d2:9b:f9:ac:51:82:54:c4:d6:5a:50:a8:
                    a7:85:7c:d2:23:00:a3:ca:6c:0e:5e:f7:7f:e4:f7:
                    14:16:6f:11:9e:2b:f0:61:ae:d6:4b:77:25:5e:1a:
                    ad:dc:4f:71:63:2a:f3:38:84:6b:fe:91:19:cf:1e:
                    fd:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:0A:C8:0F:79:9B:85:FB:D2:8D:FA:10:22:D3:10:FB:F3:62:74:F7
            X509v3 Authority Key Identifier:
                keyid:C1:52:04:55:3C:08:6D:6B:F9:E7:0A:EC:63:64:51:0A:E2:34:86:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZZ67s7Xii2wu2dGqf9nqdJ7YkQhXKRBaZtjPEhXTj4K/0/C15204553C086D6BF9E70AEC6364510AE23486C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C15204553C086D6BF9E70AEC6364510AE23486C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZZ67s7Xii2wu2dGqf9nqdJ7YkQhXKRBaZtjPEhXTj4K/0/3133382e3235352e32342e302f32322d3234203d3e20323731333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:9d:0e:fb:75:d4:79:fa:ad:f7:ec:db:3d:2e:1f:a6:cb:d3:
         4b:00:55:fe:7e:58:a4:72:94:ec:4a:64:05:21:0b:41:cb:68:
         43:ad:b6:f4:88:96:68:c7:1d:a1:00:37:a8:7e:76:9d:74:6b:
         ae:1c:92:43:f4:27:9e:b7:6b:2b:c0:08:03:50:77:43:6e:1a:
         03:4b:fe:e4:43:41:7b:b7:9b:9c:5f:77:c8:dc:46:2a:9a:90:
         d0:f6:3f:b9:d2:0d:d0:a0:1a:d3:0e:4d:c6:ca:8b:71:58:f9:
         98:6a:12:fb:cd:f1:6b:19:34:de:23:de:12:32:2a:2c:d1:b7:
         90:28:dd:17:c1:32:0c:7d:20:24:7c:e8:92:0d:5a:ab:2e:b7:
         27:94:49:c2:bd:29:f4:c7:54:03:e7:b1:36:87:ed:40:0b:f9:
         4a:9b:c4:c0:32:89:c3:8d:b4:3e:f4:77:53:94:d9:3b:72:ae:
         c2:8c:34:bd:ca:15:5a:be:d4:ba:e3:de:75:67:20:41:33:6c:
         45:e8:e1:db:8a:76:54:8a:1d:a1:9e:07:c8:96:19:c8:df:87:
         01:29:4e:f6:22:1b:d3:20:ca:69:1e:cb:dc:54:8a:61:cc:b8:
         38:c7:70:d4:a2:40:e0:d9:22:fc:2e:b3:74:c5:0d:6b:d9:1b:
         22:67:d8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 00:10:17 2026 by rpki-client