Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/3133382e3138352e32302e302f32322d3332203d3e20323634333332.roa
File:                     3133382e3138352e32302e302f32322d3332203d3e20323634333332.roa (raw, json)
Hash identifier:          qnh7T+eJAR/MJugLJSGGvmqc3Mdc/ozgEo6SBeIon3k=
Subject key identifier:   CC:C0:97:C8:27:7A:3D:CA:42:F9:12:CB:C3:83:B0:39:D9:16:55:AF
Certificate issuer:       /CN=7A509BA48E79904F69690722D65AADB9AD3A47AB
Certificate serial:       072A5C2462EE80A2C0BBAFA134623414323959B0
Authority key identifier: 7A:50:9B:A4:8E:79:90:4F:69:69:07:22:D6:5A:AD:B9:AD:3A:47:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/3133382e3138352e32302e302f32322d3332203d3e20323634333332.roa
Signing time:             Wed 14 Jan 2026 17:00:00 +0000
ROA not before:           Wed 14 Jan 2026 16:55:00 +0000
ROA not after:            Wed 13 Jan 2027 17:00:00 +0000
asID:                     264332
IP address blocks:        138.185.20.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.crl
                          rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 10:42:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:2a:5c:24:62:ee:80:a2:c0:bb:af:a1:34:62:34:14:32:39:59:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A509BA48E79904F69690722D65AADB9AD3A47AB
        Validity
            Not Before: Jan 14 16:55:00 2026 GMT
            Not After : Jan 13 17:00:00 2027 GMT
        Subject: CN=CCC097C8277A3DCA42F912CBC383B039D91655AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b6:c6:d6:66:c5:b5:f6:15:39:97:41:2f:0b:
                    7c:3c:0b:7f:82:94:86:12:e9:06:1f:5e:5f:0c:79:
                    58:a3:9a:5a:de:b2:31:ce:51:6d:c6:9a:d9:ef:9d:
                    64:4f:f5:d4:14:e9:03:a6:34:ff:0a:83:ea:42:25:
                    c7:7a:9d:e7:6a:3a:59:bb:93:97:03:81:68:26:96:
                    a3:19:9b:c7:ac:24:18:16:1a:c9:fe:48:b3:a9:c5:
                    76:bb:1a:11:4a:8d:3a:40:1b:aa:7a:aa:c7:dd:6d:
                    36:70:e2:e3:cb:01:7e:12:59:7d:df:4d:85:de:7c:
                    a2:cc:85:29:14:e7:2a:5e:25:9e:37:c7:dc:68:e8:
                    fd:08:c7:28:58:a5:d4:81:d9:d5:f2:43:42:43:a3:
                    13:ee:2d:45:59:54:35:a3:e1:25:0b:da:a8:19:07:
                    d2:50:e6:d6:42:97:0b:4b:d1:4a:bc:f9:3b:b0:88:
                    72:0c:08:15:62:37:5c:58:03:b8:6d:eb:6a:5a:c8:
                    c9:54:da:53:b6:73:fe:5c:ec:12:ab:86:8c:c7:d5:
                    30:0d:c9:a3:9f:f6:33:88:21:dd:fb:5b:08:29:0f:
                    ab:6f:70:fe:60:63:08:d1:90:16:a0:e4:3d:31:d7:
                    b9:73:92:80:0e:a7:6d:5b:f4:79:a5:51:82:3e:4f:
                    89:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C0:97:C8:27:7A:3D:CA:42:F9:12:CB:C3:83:B0:39:D9:16:55:AF
            X509v3 Authority Key Identifier:
                keyid:7A:50:9B:A4:8E:79:90:4F:69:69:07:22:D6:5A:AD:B9:AD:3A:47:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/3133382e3138352e32302e302f32322d3332203d3e20323634333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:da:21:b9:30:b1:73:18:7f:45:5a:20:4c:88:d7:f2:b1:54:
         b1:d5:d5:3a:91:f5:d9:6f:2d:b2:ee:d9:56:7d:a5:cf:64:78:
         fb:0e:45:81:c4:50:8f:6d:67:2e:ec:22:91:83:d1:a0:4e:f1:
         0c:48:9e:cd:8c:e9:b6:85:64:f4:66:a4:46:e0:b5:a9:2b:9c:
         69:21:6e:07:6d:0e:f4:dd:ea:31:02:d3:38:ad:82:0e:8d:f6:
         e4:cb:6b:62:b6:ba:a5:c5:79:4d:d3:98:3e:84:f8:5b:a1:14:
         e9:19:01:d7:4f:47:24:96:a9:de:03:60:52:34:0f:a4:49:6f:
         16:ae:b4:e8:f0:55:3d:42:fd:e8:b6:f6:24:3d:c0:97:24:d1:
         2f:e8:ff:90:9e:bd:91:b1:91:a3:02:9e:3f:bd:ab:f5:50:0e:
         08:54:95:6f:2f:03:ad:12:9f:5d:eb:be:7f:37:38:3a:fd:fc:
         01:6a:bd:d6:af:dc:8f:bb:6d:92:c8:a7:b7:46:7b:86:46:b2:
         8b:1c:25:b0:00:93:27:d3:91:29:6a:cc:a0:77:2d:a3:eb:89:
         98:c3:97:07:66:98:33:99:71:1b:87:f9:30:91:74:dc:26:ea:
         31:58:5b:cf:35:a2:36:1e:38:2a:81:6a:ae:63:25:09:40:0f:
         da:15:13:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:02:59 2026 by rpki-client