Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/3133382e39342e37362e302f32322d3234203d3e20323633363439.roa
File:                     3133382e39342e37362e302f32322d3234203d3e20323633363439.roa (raw, json)
Hash identifier:          lgd+hvjLHisvE92MwsEaIjzQjm5PprY/1PgR3YwXXP8=
Subject key identifier:   A4:71:80:6F:79:E8:57:F8:84:B5:B1:AC:F6:94:86:C0:68:07:36:58
Certificate issuer:       /CN=6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B
Certificate serial:       3359D6D77FB5DDEF2B0919540348CB2A1440079D
Authority key identifier: 6A:5B:FC:EB:0E:D1:5D:45:74:69:EC:7F:A1:ED:3C:B5:4A:FE:C5:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/3133382e39342e37362e302f32322d3234203d3e20323633363439.roa
Signing time:             Wed 04 Feb 2026 22:00:29 +0000
ROA not before:           Wed 04 Feb 2026 21:55:29 +0000
ROA not after:            Wed 03 Feb 2027 22:00:29 +0000
asID:                     263649
IP address blocks:        138.94.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.crl
                          rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:41:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:59:d6:d7:7f:b5:dd:ef:2b:09:19:54:03:48:cb:2a:14:40:07:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B
        Validity
            Not Before: Feb  4 21:55:29 2026 GMT
            Not After : Feb  3 22:00:29 2027 GMT
        Subject: CN=A471806F79E857F884B5B1ACF69486C068073658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8b:fd:13:9b:e8:fa:bb:50:fb:a5:0a:1f:28:
                    ab:fd:2b:1a:69:a3:a5:90:da:ca:59:67:b1:90:ac:
                    14:f4:1c:d5:44:d7:48:9f:4d:68:e3:db:80:8f:98:
                    3a:32:aa:c0:9a:ce:cd:16:44:bc:f3:8b:47:1d:98:
                    56:62:d3:a0:c8:f0:18:d7:a1:4d:e0:6b:4b:81:b0:
                    6c:27:4e:92:e7:59:9e:f9:f6:c2:6b:0a:55:dc:f3:
                    e8:c2:de:4b:7f:1e:7c:93:55:ce:bc:b5:87:0d:9a:
                    79:d3:5a:f2:97:3c:26:eb:9b:8a:de:bb:d2:9a:1b:
                    eb:32:3c:4f:fe:67:e4:03:94:69:40:00:ae:14:47:
                    31:4a:cb:83:79:68:9c:c0:a6:6a:92:d1:90:4b:93:
                    05:11:9a:54:5a:ac:35:0a:53:2a:56:ed:12:a0:fd:
                    ff:be:92:65:40:2c:2d:0e:4e:e6:ea:00:9e:4d:7d:
                    c7:55:c2:53:ff:37:f7:a9:b4:f1:17:f6:5d:08:4c:
                    c1:49:01:f2:d0:1d:5e:28:0b:3c:98:6e:b6:75:3c:
                    7d:39:cb:bf:2a:93:9e:fa:da:2d:9a:33:93:86:b3:
                    14:e5:70:89:c8:34:cd:1b:64:29:0d:7c:4f:44:df:
                    2a:b7:98:d6:4a:dc:82:82:a3:9e:61:20:d8:49:82:
                    0a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:71:80:6F:79:E8:57:F8:84:B5:B1:AC:F6:94:86:C0:68:07:36:58
            X509v3 Authority Key Identifier:
                keyid:6A:5B:FC:EB:0E:D1:5D:45:74:69:EC:7F:A1:ED:3C:B5:4A:FE:C5:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/3133382e39342e37362e302f32322d3234203d3e20323633363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:fb:3e:2f:08:2c:cb:bd:cf:93:41:a6:14:3c:df:8a:43:8d:
         83:8b:e5:2d:0f:fc:a4:0e:ca:96:2d:f1:29:e0:c7:ee:29:52:
         6b:bf:8f:d3:e5:d5:e8:e4:23:4b:67:18:ea:ec:5c:00:89:9f:
         55:3d:d9:7a:9b:e3:cc:42:56:14:d1:51:ea:6a:3f:ad:be:57:
         9f:19:52:8a:b2:48:ce:0e:ff:02:90:70:d4:42:a1:90:fc:c5:
         00:e3:85:30:6b:25:75:c6:71:41:04:be:1f:e3:2a:60:43:e5:
         f8:fa:7f:ca:18:59:01:04:44:2e:51:73:59:81:05:28:08:62:
         f4:1b:40:38:fb:5e:9b:fc:ba:18:07:46:e6:d3:da:a7:6a:17:
         a2:cc:a6:66:b2:1f:c0:10:a4:db:63:2a:94:e9:9e:b5:77:f4:
         a3:8a:6f:39:5e:f0:aa:47:d3:3d:b7:42:e4:d9:0f:e3:1f:e4:
         f8:48:b8:59:30:dc:ef:77:8c:e4:90:34:19:08:ce:e9:2b:71:
         34:62:73:b0:6f:f8:ce:ac:07:a6:eb:16:b5:53:59:b3:84:e1:
         40:b4:d6:e5:85:01:76:e1:7b:b2:6b:47:28:5c:63:93:1c:47:
         78:7b:50:f2:8a:69:96:c7:a0:10:3f:82:6d:ec:60:e4:7a:65:
         79:c4:19:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:26:24 2026 by rpki-client