Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/3133382e39372e342e302f32322d3232203d3e203533313132.roa
File:                     3133382e39372e342e302f32322d3232203d3e203533313132.roa (raw, json)
Hash identifier:          yHezkgMSSw7lon9XqT6h55pkhPxz0RQwPh4QmL4wBV8=
Subject key identifier:   4D:0A:D2:B2:D0:2C:DB:C8:E6:EC:2B:84:86:41:72:DF:67:99:90:B2
Certificate issuer:       /CN=74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651
Certificate serial:       1407B797B92194D496BD232CC0B0B4C758B1D032
Authority key identifier: 74:AD:EB:5B:0B:06:9D:AC:2D:94:A5:DD:C5:51:0D:9D:CC:0C:B6:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/3133382e39372e342e302f32322d3232203d3e203533313132.roa
Signing time:             Thu 05 Feb 2026 11:02:32 +0000
ROA not before:           Thu 05 Feb 2026 10:57:32 +0000
ROA not after:            Thu 04 Feb 2027 11:02:32 +0000
asID:                     53112
IP address blocks:        138.97.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.crl
                          rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:07:b7:97:b9:21:94:d4:96:bd:23:2c:c0:b0:b4:c7:58:b1:d0:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651
        Validity
            Not Before: Feb  5 10:57:32 2026 GMT
            Not After : Feb  4 11:02:32 2027 GMT
        Subject: CN=4D0AD2B2D02CDBC8E6EC2B84864172DF679990B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8b:36:b1:7a:e7:d2:b6:9c:b2:f5:f8:fe:1a:
                    46:df:88:46:13:0a:f8:9f:99:92:8d:c4:23:ec:e0:
                    65:2b:42:a1:5f:a3:38:8a:cf:c9:52:c3:ba:ee:e0:
                    3f:f3:47:29:55:49:eb:2a:4b:2f:d1:72:41:0f:ef:
                    4c:dc:02:05:f6:d9:d7:f0:01:4e:da:48:7b:b0:7b:
                    cc:b5:52:6a:f2:b1:c2:15:d6:66:5c:55:0a:5a:ec:
                    2d:34:04:cd:64:84:6e:6c:3d:f9:01:07:37:40:6b:
                    9b:c8:0a:05:03:a1:b5:a6:15:86:89:33:e1:bd:3f:
                    23:54:7e:cd:79:3f:15:77:80:2d:16:b8:e7:2a:0e:
                    4e:50:1e:da:fb:40:a3:e9:97:81:42:bf:86:17:6f:
                    22:ff:69:46:65:43:01:07:36:43:f9:38:72:fc:63:
                    34:dc:7d:7d:6a:0c:0c:da:d2:ed:ae:84:3e:ff:da:
                    8f:3f:ba:a5:90:0e:de:40:46:84:e7:fc:d3:4c:bc:
                    7c:08:b1:1e:0a:af:b9:a9:c8:94:7c:e8:35:1b:95:
                    91:9d:1e:e2:0f:cf:7c:d6:bc:63:5c:3a:7c:43:12:
                    77:74:1f:ba:07:33:ea:79:1f:2d:eb:30:b4:54:62:
                    65:30:06:5b:ef:88:48:71:d1:fb:cb:c9:1d:7e:6e:
                    9d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:0A:D2:B2:D0:2C:DB:C8:E6:EC:2B:84:86:41:72:DF:67:99:90:B2
            X509v3 Authority Key Identifier:
                keyid:74:AD:EB:5B:0B:06:9D:AC:2D:94:A5:DD:C5:51:0D:9D:CC:0C:B6:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/3133382e39372e342e302f32322d3232203d3e203533313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:93:4a:71:b2:e6:1e:4a:cd:12:a4:70:d8:2f:84:a2:87:24:
         55:c3:15:8a:a2:af:ea:06:d0:f9:b2:ab:ac:7b:75:3f:fc:5c:
         ee:d9:04:f4:32:22:6e:56:4f:97:f4:8e:01:03:7a:3b:f8:38:
         a5:00:36:f7:8e:a0:5a:eb:9a:54:ee:5c:f3:3f:41:b2:c6:73:
         ec:70:6e:41:91:4e:9d:61:9b:67:57:1d:d8:13:4d:dc:d9:f2:
         ae:54:1c:61:f6:bd:57:f7:18:cb:d3:19:d4:66:6e:3d:49:5b:
         52:29:b6:a7:64:42:40:4e:c5:bf:c4:82:36:a6:2f:30:49:8a:
         46:2f:97:fd:0c:30:50:37:b6:71:bf:f5:90:82:99:fc:43:c5:
         87:ec:38:a7:db:ed:1a:e2:f2:f2:c8:32:5d:79:48:e0:23:e6:
         99:8c:30:21:c0:4c:4c:f8:75:d3:3f:3c:52:70:b2:51:f0:77:
         b8:5b:84:e2:8a:2c:16:3c:9d:fc:6d:2b:24:88:cd:0b:65:ce:
         1a:b9:6f:1c:c6:4e:56:53:bf:f8:e3:0f:99:1f:63:e1:62:c8:
         24:39:2d:14:86:35:c8:ed:ec:7f:47:bc:26:a8:4e:f8:3e:e3:
         5f:e8:09:a6:9a:54:25:b0:33:4a:f4:ab:17:3e:2b:c7:82:85:
         ef:92:1b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 05:52:27 2026 by rpki-client