Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/3133382e3230342e3134382e302f32332d3233203d3e20323633393030.roa
File:                     3133382e3230342e3134382e302f32332d3233203d3e20323633393030.roa (raw, json)
Hash identifier:          cJJCDcLUZx6EPTfQDymU//IFP82JMnjWgsuGz1LDzqQ=
Subject key identifier:   3D:82:EA:8B:17:39:06:1E:2C:D7:BA:3B:5C:B2:82:B4:C7:92:D3:F0
Certificate issuer:       /CN=D108A6A498B3839B4F3F805ACCAE934F8CF79D90
Certificate serial:       557FADBB22E52E9F8C7F818453ED7CA19B4E7FFD
Authority key identifier: D1:08:A6:A4:98:B3:83:9B:4F:3F:80:5A:CC:AE:93:4F:8C:F7:9D:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/3133382e3230342e3134382e302f32332d3233203d3e20323633393030.roa
Signing time:             Wed 04 Feb 2026 21:00:07 +0000
ROA not before:           Wed 04 Feb 2026 20:55:07 +0000
ROA not after:            Wed 03 Feb 2027 21:00:07 +0000
asID:                     263900
IP address blocks:        138.204.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.crl
                          rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 03:43:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:7f:ad:bb:22:e5:2e:9f:8c:7f:81:84:53:ed:7c:a1:9b:4e:7f:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D108A6A498B3839B4F3F805ACCAE934F8CF79D90
        Validity
            Not Before: Feb  4 20:55:07 2026 GMT
            Not After : Feb  3 21:00:07 2027 GMT
        Subject: CN=3D82EA8B1739061E2CD7BA3B5CB282B4C792D3F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:94:18:32:03:e6:c6:8b:15:f3:61:ae:2e:ad:
                    ec:0e:25:04:f1:a2:84:e0:5a:8f:7f:6c:2a:5d:2c:
                    3b:21:8f:28:ab:6c:94:62:69:a1:98:93:c2:cd:7f:
                    6d:3f:a9:91:a8:d5:ce:9a:8d:8b:2c:e1:ce:3b:42:
                    5b:70:cd:1f:78:77:74:55:24:b4:81:09:4f:47:cf:
                    70:f1:50:82:90:2b:b2:8a:30:99:74:7f:f6:61:25:
                    9a:c6:00:94:5a:e3:1e:0d:83:9a:eb:1a:38:0a:6e:
                    4c:b6:ee:3a:6d:75:2f:13:bf:94:de:8e:97:71:a2:
                    0a:b0:a6:ff:eb:79:19:be:36:14:10:eb:39:13:49:
                    3b:79:83:ad:04:ed:7c:16:ae:76:38:4f:8f:bf:dd:
                    7b:c1:8e:10:1d:eb:a9:82:b3:67:83:05:b6:55:ba:
                    f3:dc:d5:81:fa:e1:a8:77:f4:1b:f3:86:15:40:21:
                    64:26:16:e7:6b:4c:8b:b3:2d:8c:65:18:14:3b:34:
                    12:e1:51:89:54:ff:12:cf:45:76:f9:e6:f6:8c:bd:
                    0b:31:31:39:74:8e:e8:4c:fc:20:f6:9c:dc:0e:f9:
                    27:65:11:52:5c:52:46:de:eb:bc:ce:2f:fc:af:44:
                    37:66:8c:9f:8d:e7:e1:34:41:5a:d7:78:d8:b1:8e:
                    fd:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:82:EA:8B:17:39:06:1E:2C:D7:BA:3B:5C:B2:82:B4:C7:92:D3:F0
            X509v3 Authority Key Identifier:
                keyid:D1:08:A6:A4:98:B3:83:9B:4F:3F:80:5A:CC:AE:93:4F:8C:F7:9D:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/3133382e3230342e3134382e302f32332d3233203d3e20323633393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:dc:93:d5:4d:3a:d1:cf:4c:2b:43:ef:2c:70:3a:e2:7a:85:
         b5:cd:be:92:36:e6:6d:34:d9:f6:56:ba:93:aa:47:b2:a2:ac:
         ed:3e:01:52:85:1f:09:33:79:80:d2:0e:2b:cf:7d:e7:f2:12:
         0d:45:ee:5f:9c:3d:a5:c9:71:aa:f7:5a:63:c5:d5:ca:23:7d:
         71:f2:70:6a:4f:39:c8:cb:45:9e:90:f4:1f:53:0f:4f:83:19:
         52:1c:3b:63:06:57:b5:63:cb:6b:c9:17:50:86:b1:08:e8:87:
         19:25:20:1e:39:a3:a5:a0:9c:ed:6e:64:aa:2a:5a:16:15:1a:
         43:81:7f:9d:63:20:4d:61:00:de:6b:c4:e7:5a:7f:d5:80:66:
         b0:cf:e8:d7:05:c1:57:3c:be:32:4e:6b:38:72:4b:52:11:5a:
         a3:6e:76:d7:8d:37:a4:ed:07:37:fa:c1:52:7c:6f:a8:7b:7d:
         a4:c1:b9:06:03:9f:d2:57:41:e0:20:65:93:58:f4:ba:fb:57:
         33:be:8f:cf:d2:c5:31:03:25:41:ff:4f:dd:35:c9:1c:b1:14:
         99:f2:84:04:41:be:66:3f:12:45:8a:8a:1a:10:d6:ae:82:83:
         d8:3f:1c:82:4b:05:c4:9e:ec:c2:43:2b:48:5b:73:ae:50:99:
         0f:fc:be:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:42:02 2026 by rpki-client