Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/3133382e3230342e3135302e302f32332d3233203d3e20323633393030.roa
File:                     3133382e3230342e3135302e302f32332d3233203d3e20323633393030.roa (raw, json)
Hash identifier:          l/AtKOd3MwCWF4uiQHBduktRq3R4Xl2PyvJoAzrkphE=
Subject key identifier:   F4:A6:75:62:66:50:39:28:AE:F3:D5:0E:A2:DC:D5:96:35:61:39:42
Certificate issuer:       /CN=D108A6A498B3839B4F3F805ACCAE934F8CF79D90
Certificate serial:       04B7335AE0546F73C5823A5D8CDCD6E9A2AECD40
Authority key identifier: D1:08:A6:A4:98:B3:83:9B:4F:3F:80:5A:CC:AE:93:4F:8C:F7:9D:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/3133382e3230342e3135302e302f32332d3233203d3e20323633393030.roa
Signing time:             Wed 04 Feb 2026 21:00:05 +0000
ROA not before:           Wed 04 Feb 2026 20:55:05 +0000
ROA not after:            Wed 03 Feb 2027 21:00:05 +0000
asID:                     263900
IP address blocks:        138.204.150.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.crl
                          rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 03:43:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b7:33:5a:e0:54:6f:73:c5:82:3a:5d:8c:dc:d6:e9:a2:ae:cd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D108A6A498B3839B4F3F805ACCAE934F8CF79D90
        Validity
            Not Before: Feb  4 20:55:05 2026 GMT
            Not After : Feb  3 21:00:05 2027 GMT
        Subject: CN=F4A6756266503928AEF3D50EA2DCD59635613942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:57:59:e5:1e:f8:f9:7b:d0:85:8d:4f:26:c1:
                    07:f5:35:b5:fd:12:1e:67:1d:c8:8d:ea:1b:62:02:
                    ff:b2:2b:ff:d6:29:98:80:de:16:79:ad:22:e8:91:
                    74:ad:d4:b1:75:ae:55:2c:01:5a:99:43:66:7a:7c:
                    bb:03:82:11:f8:77:f3:f6:62:13:40:f0:f8:60:05:
                    0d:9e:a6:6e:6e:16:b9:5c:5e:8e:6a:26:25:9c:7c:
                    89:3d:bf:c7:26:60:f0:69:ca:54:3c:44:4b:f8:cf:
                    3e:b1:eb:77:e4:ea:d2:2f:b6:ce:93:0a:84:fd:09:
                    ce:64:e9:82:34:67:ca:2e:ef:a6:38:f0:78:af:02:
                    52:0e:44:0c:2d:74:9f:a9:bb:d9:5a:74:7a:25:d2:
                    9f:4a:ad:23:e6:25:f7:d1:39:0c:8a:56:90:d2:9e:
                    ce:ab:ca:01:6e:a4:49:36:64:bb:ab:ad:34:4b:27:
                    ee:b2:07:72:f4:f8:06:ea:d7:f6:73:2f:9d:fe:3b:
                    77:0c:04:2a:85:d5:38:7b:2f:28:ab:c6:b3:81:ff:
                    c6:5a:9e:8b:cc:c3:0f:da:96:f6:0a:ec:04:be:bb:
                    ac:40:db:64:88:e5:65:51:84:33:53:65:49:52:8a:
                    9d:b6:1a:0c:d4:83:87:dc:6a:4d:18:37:8f:d9:a9:
                    c6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A6:75:62:66:50:39:28:AE:F3:D5:0E:A2:DC:D5:96:35:61:39:42
            X509v3 Authority Key Identifier:
                keyid:D1:08:A6:A4:98:B3:83:9B:4F:3F:80:5A:CC:AE:93:4F:8C:F7:9D:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/3133382e3230342e3135302e302f32332d3233203d3e20323633393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:f8:b8:ab:30:20:76:13:d6:8a:ad:1a:70:54:15:d0:ce:dd:
         0f:72:b1:71:90:ce:17:cd:2f:66:ee:05:d9:b7:ed:13:0f:a8:
         fc:62:05:e1:fd:e1:e4:47:5e:2a:e2:e1:bd:62:aa:a9:23:fb:
         e5:66:00:93:cc:92:da:9f:88:54:2d:77:a9:6b:13:2a:6d:53:
         9d:10:9d:d6:95:40:21:76:3f:ee:29:9c:e1:c1:b1:7e:bb:6b:
         2f:c6:c9:e8:a9:9f:17:75:0f:e1:07:1d:9e:78:f8:5e:34:56:
         5a:04:0e:90:8d:7f:15:df:e8:e2:aa:2a:a3:ef:34:d5:3f:f7:
         86:5a:8d:77:cf:15:6b:6f:e9:aa:f4:9a:e6:4d:b3:40:ac:94:
         79:01:a7:c6:9d:8e:f9:2d:4f:b6:32:b0:87:a8:f7:14:41:83:
         e2:a7:87:83:c4:b7:c7:7d:04:c2:d4:11:89:24:53:fa:98:d7:
         f9:f0:ac:93:91:13:4a:5f:6c:a1:7a:a0:2f:cd:e9:b9:a5:9c:
         9f:e0:63:39:80:7a:65:c7:68:4f:76:9e:e6:d2:b1:3b:a3:e0:
         88:d6:33:7b:1a:82:fd:11:62:79:05:70:51:c2:0d:5e:59:0b:
         58:54:75:1d:fd:fa:31:b3:bf:c8:eb:e2:74:98:44:b1:c4:d2:
         4b:6c:d2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:42:04 2026 by rpki-client