Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HnbfHa1eVLksdfm7YCzsmp1QmcAdUm7XRSu4ihuWdaqV/1/3133382e3230342e3231322e302f32322d3234203d3e203631383930.roa
File:                     3133382e3230342e3231322e302f32322d3234203d3e203631383930.roa (raw, json)
Hash identifier:          dIRCiCzVUKMucI1L8qfPPLNkS3xdL10y9sMlCp5AOhc=
Subject key identifier:   08:C5:8E:88:3C:4B:BA:1D:98:4D:95:36:1F:A4:BE:6B:34:99:B0:08
Certificate issuer:       /CN=5FA7CB850A2B0CBC348574695F2F5CF499586904
Certificate serial:       4C21E5993004205950C1CF3CC16D0459D0BC57BC
Authority key identifier: 5F:A7:CB:85:0A:2B:0C:BC:34:85:74:69:5F:2F:5C:F4:99:58:69:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA7CB850A2B0CBC348574695F2F5CF499586904.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnbfHa1eVLksdfm7YCzsmp1QmcAdUm7XRSu4ihuWdaqV/1/3133382e3230342e3231322e302f32322d3234203d3e203631383930.roa
Signing time:             Thu 05 Feb 2026 19:19:11 +0000
ROA not before:           Thu 05 Feb 2026 19:14:11 +0000
ROA not after:            Thu 04 Feb 2027 19:19:11 +0000
asID:                     61890
IP address blocks:        138.204.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HnbfHa1eVLksdfm7YCzsmp1QmcAdUm7XRSu4ihuWdaqV/1/5FA7CB850A2B0CBC348574695F2F5CF499586904.crl
                          rsync://rpki-repo.registro.br/repo/HnbfHa1eVLksdfm7YCzsmp1QmcAdUm7XRSu4ihuWdaqV/1/5FA7CB850A2B0CBC348574695F2F5CF499586904.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA7CB850A2B0CBC348574695F2F5CF499586904.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 18:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:21:e5:99:30:04:20:59:50:c1:cf:3c:c1:6d:04:59:d0:bc:57:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA7CB850A2B0CBC348574695F2F5CF499586904
        Validity
            Not Before: Feb  5 19:14:11 2026 GMT
            Not After : Feb  4 19:19:11 2027 GMT
        Subject: CN=08C58E883C4BBA1D984D95361FA4BE6B3499B008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:38:42:99:40:47:7d:a5:03:fb:7c:e8:7e:63:
                    8a:bc:0e:66:85:c6:66:1b:0b:ae:34:2e:20:b3:e5:
                    14:65:a3:34:4d:61:53:63:69:e3:56:98:56:52:cd:
                    d1:39:ef:ce:84:3b:d2:6c:62:93:49:16:fc:2b:81:
                    67:f9:80:45:f5:06:0a:d2:6b:7c:2b:77:63:cb:20:
                    13:a1:72:57:43:25:3b:19:68:6b:92:82:46:1c:c6:
                    e0:4d:46:8b:43:b4:29:b4:b4:d6:4c:e9:d6:8d:46:
                    a9:4a:ea:44:ff:aa:be:31:c0:18:7c:81:6e:80:52:
                    ba:aa:59:48:e1:78:24:6f:c3:b4:7b:7f:ce:6e:0d:
                    d8:0b:f9:af:56:de:19:b4:a4:17:7e:6c:34:f7:bd:
                    a2:69:07:bd:1d:3a:50:19:4d:66:71:09:69:ce:17:
                    4c:24:e2:39:45:5e:21:e3:ec:90:27:21:f7:22:b8:
                    dc:46:e4:a0:74:15:0b:98:e3:2e:ec:1e:19:5b:52:
                    6a:b3:7b:57:4c:c7:a4:88:b3:ad:1b:fe:0a:61:1e:
                    dd:06:bc:9b:a1:a2:45:a5:13:59:45:4b:dc:56:96:
                    df:79:c6:31:0b:2b:ff:50:09:61:61:24:a4:07:7e:
                    1a:ec:19:e4:3a:81:f2:51:50:0e:d9:ef:70:09:39:
                    96:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C5:8E:88:3C:4B:BA:1D:98:4D:95:36:1F:A4:BE:6B:34:99:B0:08
            X509v3 Authority Key Identifier:
                keyid:5F:A7:CB:85:0A:2B:0C:BC:34:85:74:69:5F:2F:5C:F4:99:58:69:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnbfHa1eVLksdfm7YCzsmp1QmcAdUm7XRSu4ihuWdaqV/1/5FA7CB850A2B0CBC348574695F2F5CF499586904.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA7CB850A2B0CBC348574695F2F5CF499586904.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnbfHa1eVLksdfm7YCzsmp1QmcAdUm7XRSu4ihuWdaqV/1/3133382e3230342e3231322e302f32322d3234203d3e203631383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:03:d6:ad:96:2f:bd:35:b4:73:98:06:9f:63:0f:be:e8:0a:
         98:4d:8e:18:b0:7e:c6:60:ee:b2:a9:61:90:98:71:0a:62:88:
         09:2b:00:ff:6f:63:71:74:25:97:42:73:80:11:0d:e6:f0:fd:
         be:bf:c0:1d:b5:89:48:78:93:0d:be:28:8d:4e:f8:e5:fd:a7:
         f1:9f:d3:3e:07:7e:1c:41:d7:b8:0a:df:d2:c9:fd:e2:da:82:
         71:01:31:29:61:08:48:f7:eb:88:b4:ca:5b:c3:a9:13:31:49:
         a3:1b:66:2d:14:72:2a:41:42:76:3b:f0:f1:39:63:00:60:3a:
         dc:35:7d:2d:2a:97:84:fa:9c:b0:99:12:04:2b:c2:c9:d0:a9:
         cd:a8:e4:07:26:9c:40:03:99:10:75:ee:fb:6d:10:ce:c4:6c:
         70:bd:8c:86:46:9e:a5:c4:97:5f:10:e9:5a:40:aa:7e:e9:44:
         a7:80:98:6d:17:79:64:3e:a7:83:90:0d:e1:45:a3:15:77:42:
         39:86:2e:9d:23:50:59:10:2d:08:55:89:db:0c:21:fb:9e:ca:
         06:bf:f8:1c:c3:e3:1e:bf:f4:0c:d8:8d:95:61:96:8c:d1:5e:
         a5:77:7e:9f:f3:ac:f0:f4:67:7b:96:73:7d:19:87:45:cd:89:
         8f:bc:51:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:05:42 2026 by rpki-client