Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/3133382e3235352e3230302e302f32322d3234203d3e20323634353132.roa
File:                     3133382e3235352e3230302e302f32322d3234203d3e20323634353132.roa (raw, json)
Hash identifier:          paJ2NQ9DRq4kCrP3orNXj7GgnFYcC+nsR7wMP3Z9Wj8=
Subject key identifier:   30:41:C6:B6:63:13:99:0A:6A:91:8E:0D:49:B2:18:CE:F0:03:42:6F
Certificate issuer:       /CN=CE444325009DC85BE712BCD01156510F2B6F4AB9
Certificate serial:       674ACBF14B1ABBE00B9C8C6A0D1718CEC4DAC152
Authority key identifier: CE:44:43:25:00:9D:C8:5B:E7:12:BC:D0:11:56:51:0F:2B:6F:4A:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/3133382e3235352e3230302e302f32322d3234203d3e20323634353132.roa
Signing time:             Thu 05 Feb 2026 18:05:43 +0000
ROA not before:           Thu 05 Feb 2026 18:00:43 +0000
ROA not after:            Thu 04 Feb 2027 18:05:43 +0000
asID:                     264512
IP address blocks:        138.255.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.crl
                          rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 15:49:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:4a:cb:f1:4b:1a:bb:e0:0b:9c:8c:6a:0d:17:18:ce:c4:da:c1:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE444325009DC85BE712BCD01156510F2B6F4AB9
        Validity
            Not Before: Feb  5 18:00:43 2026 GMT
            Not After : Feb  4 18:05:43 2027 GMT
        Subject: CN=3041C6B66313990A6A918E0D49B218CEF003426F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:dd:8c:37:dc:a8:c3:52:1c:82:9b:ae:3a:63:
                    3c:bb:1b:ac:b0:b3:d3:62:15:ba:8e:30:0d:df:f2:
                    09:e0:1e:8e:36:3d:76:c3:8e:89:c8:bc:83:6e:ce:
                    df:f9:57:39:4d:4d:55:a9:6b:83:37:b7:d9:83:f6:
                    92:4b:36:33:7b:8f:75:34:eb:3b:e6:89:e5:3a:2e:
                    96:fb:24:73:78:29:9a:12:b2:0a:0f:5f:55:ce:c2:
                    23:46:d0:ef:f0:47:19:6a:c4:3b:fd:e5:79:7f:74:
                    8f:fe:16:a3:7d:41:9f:a4:1f:90:e0:eb:0b:9a:6e:
                    95:5a:63:6c:1c:f7:6f:18:77:ef:8e:49:b7:76:59:
                    3d:d2:a2:58:38:8c:59:93:92:0f:e7:4f:91:a4:2c:
                    85:e0:07:f7:1f:37:60:b0:5e:ff:2c:4c:1a:64:42:
                    5e:aa:d1:da:73:7f:10:b5:b4:97:8a:c2:3a:69:41:
                    85:6b:08:42:9a:dc:2a:06:ea:86:b6:fd:fb:7b:7a:
                    98:52:b4:3b:b2:a2:99:bf:fe:f3:b2:c3:4e:c3:79:
                    9c:c1:9b:94:fb:87:73:96:cc:64:d6:57:9e:b5:ed:
                    7c:8b:4a:24:11:fa:04:fd:48:4c:fe:a5:96:a5:85:
                    22:80:7d:92:3f:cd:27:2c:f9:45:f3:75:3c:83:a8:
                    8d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:41:C6:B6:63:13:99:0A:6A:91:8E:0D:49:B2:18:CE:F0:03:42:6F
            X509v3 Authority Key Identifier:
                keyid:CE:44:43:25:00:9D:C8:5B:E7:12:BC:D0:11:56:51:0F:2B:6F:4A:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/3133382e3235352e3230302e302f32322d3234203d3e20323634353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c0:62:57:68:88:00:c1:04:91:7f:8b:00:4c:f9:eb:2a:9b:60:
         63:9c:c3:77:3b:55:ba:7a:82:5f:f7:ca:db:4e:40:3c:96:f0:
         ea:6a:31:5d:ee:76:dc:63:cf:56:d5:14:18:25:48:7e:0e:2f:
         13:e2:cc:32:9d:b7:6a:64:ff:13:55:be:42:23:c9:c6:32:30:
         85:33:11:2f:fe:eb:c9:ab:8f:1d:1b:3f:b6:95:1a:10:2b:b1:
         6b:7b:3e:a9:2c:52:4b:5c:53:71:2d:8d:a1:fe:9b:0b:09:40:
         0e:f0:38:02:b8:fd:86:13:d1:6c:7a:bd:4f:14:42:ad:06:8b:
         f1:df:63:b7:cb:c9:d2:ae:13:b9:d9:16:bd:48:b3:fb:bf:59:
         fe:fb:53:c3:53:50:30:6a:90:7b:29:bc:ef:5a:31:62:d8:2b:
         b1:58:c5:2b:15:1e:1b:27:e0:b6:ce:04:22:02:a5:ca:f4:9f:
         2b:1e:28:4a:f7:5d:84:c8:ac:21:2d:40:20:1f:a0:ba:5d:23:
         6b:ff:24:bc:50:33:ac:ea:92:92:cf:ba:1e:fd:e5:2f:9b:1f:
         ac:37:fc:9d:42:85:bd:6b:56:40:75:15:67:a5:17:c7:d5:56:
         f2:0c:c7:d1:fd:72:3c:32:4d:7e:6e:9f:72:2f:be:71:14:76:
         0e:99:23:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:27:59 2026 by rpki-client