Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/3133382e3231392e3138302e302f32322d3332203d3e20323633393435.roa
File:                     3133382e3231392e3138302e302f32322d3332203d3e20323633393435.roa (raw, json)
Hash identifier:          2NdMAE99KOzHg8W+wgGQ4pPl2zL4bkkneMZ8RkY6y1c=
Subject key identifier:   2B:76:39:9A:F2:05:F3:42:D6:43:C3:E6:06:01:70:66:73:92:AA:5A
Certificate issuer:       /CN=CCDFB25284D1411A05C2D5A98169BAA090EEF4E1
Certificate serial:       64B2519F2D7CFC5CFF8DA5A483EDB02B6F855B74
Authority key identifier: CC:DF:B2:52:84:D1:41:1A:05:C2:D5:A9:81:69:BA:A0:90:EE:F4:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/3133382e3231392e3138302e302f32322d3332203d3e20323633393435.roa
Signing time:             Thu 05 Feb 2026 07:29:35 +0000
ROA not before:           Thu 05 Feb 2026 07:24:35 +0000
ROA not after:            Thu 04 Feb 2027 07:29:35 +0000
asID:                     263945
IP address blocks:        138.219.180.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.crl
                          rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 18:52:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:b2:51:9f:2d:7c:fc:5c:ff:8d:a5:a4:83:ed:b0:2b:6f:85:5b:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCDFB25284D1411A05C2D5A98169BAA090EEF4E1
        Validity
            Not Before: Feb  5 07:24:35 2026 GMT
            Not After : Feb  4 07:29:35 2027 GMT
        Subject: CN=2B76399AF205F342D643C3E6060170667392AA5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:92:6e:56:58:44:22:4f:52:f1:2f:0f:99:62:
                    0e:a3:3e:cd:09:5d:30:f8:d5:7c:32:e6:67:d9:71:
                    a1:a8:2b:fe:9c:3f:ef:f7:21:67:79:3b:c1:33:dd:
                    be:17:cd:bd:d0:fe:74:47:5e:52:4e:12:75:bd:6a:
                    9e:6e:ec:8a:b7:61:0c:33:63:1b:53:c0:07:ab:b3:
                    c6:a8:7b:5e:26:9a:32:4e:ec:fd:4c:fd:c3:9c:68:
                    28:1e:b1:ce:ef:2e:d3:26:d7:fa:4a:6f:06:b5:1a:
                    96:c8:b9:7a:2b:79:7e:8e:08:17:3a:02:ca:7b:9c:
                    88:e6:df:81:a2:38:33:59:15:4e:57:75:36:a4:99:
                    fc:75:f3:cc:13:ce:e5:e7:9f:b6:72:b8:f9:4c:a1:
                    03:7f:c2:15:66:94:8b:2f:2b:4e:28:1e:2b:80:92:
                    ed:b9:03:c6:b2:04:3d:ed:21:96:13:b2:43:fe:ed:
                    11:0c:7a:3f:4e:6f:5a:06:ae:96:62:fc:42:34:d0:
                    3d:fb:9a:51:e0:67:b9:5a:84:45:be:f2:12:3b:78:
                    a4:21:a7:c7:e3:c1:40:42:e2:4a:b9:de:cf:40:77:
                    1d:13:95:8a:0e:05:d0:32:47:54:c4:db:f6:25:73:
                    e7:38:a3:9b:0c:ab:38:89:61:66:0e:3f:07:12:0b:
                    75:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:76:39:9A:F2:05:F3:42:D6:43:C3:E6:06:01:70:66:73:92:AA:5A
            X509v3 Authority Key Identifier:
                keyid:CC:DF:B2:52:84:D1:41:1A:05:C2:D5:A9:81:69:BA:A0:90:EE:F4:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/3133382e3231392e3138302e302f32322d3332203d3e20323633393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:7c:40:e2:7f:b1:6b:3d:a7:8e:b6:89:c1:90:c1:28:cd:9d:
         2a:54:88:ac:15:de:1f:b3:a7:0c:a8:d5:86:b9:e3:a3:6a:09:
         cc:9a:e4:b2:3c:df:1c:48:db:9f:cb:da:c4:03:de:24:b7:09:
         c3:1a:e8:d1:d9:b7:8c:c0:39:2b:43:9c:85:cd:a2:29:35:3f:
         23:4b:cf:7f:32:be:cc:0f:09:2e:92:6e:0a:b3:69:3c:34:17:
         4f:d4:dd:3b:58:27:f0:3d:7d:08:c6:d4:01:16:57:8d:48:bf:
         f4:8c:42:24:b5:07:69:3a:58:67:32:e6:8b:f2:bb:6f:56:04:
         0b:e7:43:60:1d:6c:43:5a:c3:1e:31:04:97:cd:31:8e:05:aa:
         aa:79:7e:22:49:7b:b8:6c:34:d7:cb:d9:1f:ab:ef:01:ac:20:
         55:19:99:5e:32:44:67:d8:47:22:33:ec:99:d4:1a:28:12:2a:
         e8:1e:a5:99:b2:5f:77:71:da:fd:85:2e:10:15:49:2d:4d:3f:
         b7:f6:7f:30:65:f4:81:e4:1e:e3:1a:70:da:56:83:e5:d5:7b:
         3a:36:f6:6b:b3:8d:57:5a:e7:c8:74:f0:91:70:fd:93:96:13:
         b6:69:d0:7c:87:2f:40:b9:fb:c5:d5:99:e8:df:82:7a:8f:67:
         a4:6e:d0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 05:56:00 2026 by rpki-client