Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDyNuXCCs85AgZyPxJvmn373ag2BAbsZ8m5s1XqJ2vc4/1/3133382e3138352e3133322e302f32322d3234203d3e20323633343339.roa
File:                     3133382e3138352e3133322e302f32322d3234203d3e20323633343339.roa (raw, json)
Hash identifier:          +iLCcpmVY6csKB83BtqW+9oF0EGIDS5iEzggHw8APq8=
Subject key identifier:   E6:DA:65:86:A4:2F:3D:E2:88:9E:59:5D:87:52:D4:0C:19:B3:2B:86
Certificate issuer:       /CN=35A70E253FA821C622D2A5E9A95C54F78E659073
Certificate serial:       454D130DF15B6CD116AE73E3E0123C3A4DC0AEE1
Authority key identifier: 35:A7:0E:25:3F:A8:21:C6:22:D2:A5:E9:A9:5C:54:F7:8E:65:90:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35A70E253FA821C622D2A5E9A95C54F78E659073.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDyNuXCCs85AgZyPxJvmn373ag2BAbsZ8m5s1XqJ2vc4/1/3133382e3138352e3133322e302f32322d3234203d3e20323633343339.roa
Signing time:             Thu 05 Feb 2026 04:38:11 +0000
ROA not before:           Thu 05 Feb 2026 04:33:11 +0000
ROA not after:            Thu 04 Feb 2027 04:38:11 +0000
asID:                     263439
IP address blocks:        138.185.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JDyNuXCCs85AgZyPxJvmn373ag2BAbsZ8m5s1XqJ2vc4/1/35A70E253FA821C622D2A5E9A95C54F78E659073.crl
                          rsync://rpki-repo.registro.br/repo/JDyNuXCCs85AgZyPxJvmn373ag2BAbsZ8m5s1XqJ2vc4/1/35A70E253FA821C622D2A5E9A95C54F78E659073.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35A70E253FA821C622D2A5E9A95C54F78E659073.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 06:46:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:4d:13:0d:f1:5b:6c:d1:16:ae:73:e3:e0:12:3c:3a:4d:c0:ae:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35A70E253FA821C622D2A5E9A95C54F78E659073
        Validity
            Not Before: Feb  5 04:33:11 2026 GMT
            Not After : Feb  4 04:38:11 2027 GMT
        Subject: CN=E6DA6586A42F3DE2889E595D8752D40C19B32B86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b1:b4:c4:25:93:bf:d4:4b:52:95:c7:0d:2d:
                    7e:c4:a3:44:f8:63:df:6d:99:aa:d0:62:c2:1f:a7:
                    bf:80:72:e0:6e:39:ad:c0:cd:a3:ac:18:c7:b2:e2:
                    50:a9:38:c2:db:ab:8a:e9:4f:8c:78:f8:6e:21:c3:
                    6a:12:3c:97:8b:8a:9f:d2:7a:be:61:10:2a:a5:e5:
                    bd:9f:f4:57:2a:bb:dc:10:d6:30:d3:88:12:a2:e7:
                    f8:1e:6a:89:c2:b6:9e:1f:df:7b:21:bb:aa:a7:90:
                    d6:be:cf:dd:49:5e:07:ec:5f:d2:5f:5d:97:b6:b5:
                    fb:e9:2a:3a:9d:27:c8:c3:da:07:2f:6f:9a:f7:a1:
                    aa:35:31:04:93:d6:ad:cb:9a:84:5d:01:33:45:7b:
                    c8:d8:ab:63:5a:f2:3b:7e:fe:b8:5a:d9:45:bb:e2:
                    bb:58:7e:77:fb:3d:91:4b:ff:26:e7:cd:0e:dc:19:
                    52:f6:0c:7d:5f:5b:7b:f8:8e:64:e4:ae:34:6c:ba:
                    15:c5:6a:63:fa:98:da:67:bf:a7:b5:9c:15:b8:30:
                    d9:5d:34:da:41:cf:c5:82:b9:91:48:93:4a:6f:84:
                    a8:e8:1d:1c:21:15:f7:0a:25:05:bf:d5:0b:ad:1c:
                    85:0a:1a:0c:36:84:43:62:d8:f1:a7:9b:11:03:e6:
                    bf:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:DA:65:86:A4:2F:3D:E2:88:9E:59:5D:87:52:D4:0C:19:B3:2B:86
            X509v3 Authority Key Identifier:
                keyid:35:A7:0E:25:3F:A8:21:C6:22:D2:A5:E9:A9:5C:54:F7:8E:65:90:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDyNuXCCs85AgZyPxJvmn373ag2BAbsZ8m5s1XqJ2vc4/1/35A70E253FA821C622D2A5E9A95C54F78E659073.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35A70E253FA821C622D2A5E9A95C54F78E659073.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDyNuXCCs85AgZyPxJvmn373ag2BAbsZ8m5s1XqJ2vc4/1/3133382e3138352e3133322e302f32322d3234203d3e20323633343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:df:d4:e6:6f:6f:32:77:eb:17:f5:74:de:e7:6e:f7:dd:53:
         4d:a7:65:b5:a7:36:b3:27:4c:05:17:5b:f8:cf:5d:05:3d:49:
         bb:ed:e2:93:b2:13:ab:c6:3c:15:42:86:f7:f2:19:45:7e:f3:
         f0:47:48:cc:ba:d5:0b:8b:7d:9c:17:4e:81:a5:be:5d:2f:07:
         71:ce:a7:a7:51:78:a8:96:73:eb:9a:81:a9:94:d3:af:b3:cd:
         97:1e:d7:cc:22:1c:1b:e5:f7:9f:ce:0b:e0:6c:cd:f0:6a:33:
         5c:e1:dd:c9:8b:3b:cd:53:18:9e:6e:8b:6e:56:26:34:3d:d4:
         ca:a6:67:ae:6b:20:f1:2c:45:5c:7d:9d:8b:cc:2e:3c:b7:1b:
         24:8f:de:82:0d:96:fb:c8:4f:4d:84:80:77:47:1c:e5:77:4d:
         d9:7c:c4:e6:6d:57:af:f4:7c:7e:05:fe:4a:53:85:77:b6:9a:
         8c:59:44:7d:ec:cc:af:47:77:8a:23:b9:28:31:91:40:7f:81:
         ac:d8:e1:fa:66:6f:35:8a:ca:95:dc:7d:b5:eb:45:23:be:f8:
         5c:67:f9:bf:c1:4b:ab:44:d3:b6:34:02:44:09:4d:93:99:75:
         bd:f8:4e:da:46:a9:44:d8:b2:e3:86:06:d4:0e:d3:0d:58:1d:
         93:4b:25:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:31:52 2026 by rpki-client