Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/3133382e3230342e3233332e302f32342d3234203d3e20323633393137.roa
File:                     3133382e3230342e3233332e302f32342d3234203d3e20323633393137.roa (raw, json)
Hash identifier:          dp6tFy4SOs7JzbocBcKHm5IWMpXHVQw2s0inDJosLWM=
Subject key identifier:   18:19:11:A8:A8:1D:F1:A4:0A:93:66:7E:C5:79:7D:B8:99:16:40:8E
Certificate issuer:       /CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
Certificate serial:       0E0E07CC311A5BC60D4A255A4995110FF8E61C7F
Authority key identifier: 46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/3133382e3230342e3233332e302f32342d3234203d3e20323633393137.roa
Signing time:             Wed 04 Feb 2026 20:00:07 +0000
ROA not before:           Wed 04 Feb 2026 19:55:07 +0000
ROA not after:            Wed 03 Feb 2027 20:00:07 +0000
asID:                     263917
IP address blocks:        138.204.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl
                          rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 17:24:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:0e:07:cc:31:1a:5b:c6:0d:4a:25:5a:49:95:11:0f:f8:e6:1c:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
        Validity
            Not Before: Feb  4 19:55:07 2026 GMT
            Not After : Feb  3 20:00:07 2027 GMT
        Subject: CN=181911A8A81DF1A40A93667EC5797DB89916408E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0d:08:d9:2e:40:90:f9:e2:66:6a:2d:a7:a4:
                    4c:1a:b3:17:9f:ac:c0:af:eb:2b:32:73:17:a9:d2:
                    17:f7:10:c3:9b:c5:76:27:14:42:e2:3b:76:9b:16:
                    3c:16:f5:15:8e:b2:bd:e9:95:aa:63:69:0e:08:45:
                    e6:10:d1:e7:20:2d:70:97:8f:61:7b:5a:94:3a:51:
                    c5:62:b3:aa:e7:aa:6b:17:34:a6:be:c2:21:3a:aa:
                    bd:78:da:af:bf:a9:66:93:40:74:aa:8e:df:bc:ad:
                    1f:f0:f8:be:62:1e:27:cc:9c:b3:be:18:f0:1b:91:
                    e2:64:b0:a6:d4:84:0d:39:09:f2:65:e0:1d:ec:ca:
                    03:d0:2c:ba:46:cc:a7:a3:cb:e5:1f:d3:99:4a:4d:
                    93:aa:3f:ad:f7:5c:c2:4b:01:14:31:13:20:a7:2f:
                    28:85:37:32:af:62:e6:6a:50:b4:22:99:22:c9:08:
                    3a:6e:6d:dc:e6:8b:2a:42:be:ba:06:5e:b5:b1:e2:
                    7b:09:ad:8c:61:b9:f0:02:cb:14:db:67:d4:5f:f6:
                    7c:8f:78:60:5d:94:78:54:63:26:aa:7f:73:df:66:
                    e0:72:8e:62:f1:31:ae:76:46:f5:6b:fd:be:33:85:
                    d1:f3:c2:a8:aa:6b:99:aa:83:bf:4a:ac:27:55:60:
                    71:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:19:11:A8:A8:1D:F1:A4:0A:93:66:7E:C5:79:7D:B8:99:16:40:8E
            X509v3 Authority Key Identifier:
                keyid:46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/3133382e3230342e3233332e302f32342d3234203d3e20323633393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:13:88:36:b5:92:c1:25:f2:69:f9:66:9a:a9:dd:7e:fe:cb:
         f3:31:ec:1a:ab:3e:0c:5a:c5:f3:16:32:c6:e9:c4:82:63:a7:
         fa:37:93:d9:70:e8:80:02:eb:21:a4:52:f0:87:06:1a:ba:ce:
         50:e0:8d:ac:6a:9f:70:0f:ff:de:4e:16:d3:58:d2:5f:52:ca:
         30:94:e5:b1:92:83:7d:4e:a8:ac:3b:cb:e9:88:5e:88:85:d0:
         a6:e3:32:56:3a:95:94:a2:6f:76:85:91:d6:67:54:14:e7:3f:
         bf:df:3c:fe:fa:8b:9a:4e:df:08:be:2e:58:ed:d5:b3:85:aa:
         d5:c3:66:4e:a0:04:9a:9b:6b:dc:c2:52:d2:8f:c3:ec:ad:b1:
         31:15:a9:15:57:99:b6:d4:bc:f7:e2:09:b3:d3:40:e7:ff:5e:
         96:f0:f3:85:3d:d0:54:49:92:24:7d:2a:b7:e1:71:3b:61:61:
         7f:bd:66:f8:1d:32:3f:af:88:18:8c:bf:76:99:80:a5:48:ab:
         fe:62:32:6f:d7:12:ce:57:7e:92:4a:93:2f:d5:0f:d8:01:20:
         61:ec:19:d6:a7:f2:b6:19:3a:1f:83:cd:2a:3a:4e:4c:e1:6d:
         29:be:05:8c:68:dc:a6:3a:9d:c6:04:99:57:e3:0f:07:ad:01:
         76:85:d0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:28:42 2026 by rpki-client