Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/3133382e39392e3234382e302f32322d3234203d3e203238313330.roa
File:                     3133382e39392e3234382e302f32322d3234203d3e203238313330.roa (raw, json)
Hash identifier:          9Rp2TO7BTKMKfkwKNLeNyOVcWIkqKv52BNlNVld9FO0=
Subject key identifier:   2C:D4:E7:35:57:75:1F:5E:47:7E:6D:6F:42:52:ED:26:0D:A9:92:F4
Certificate issuer:       /CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
Certificate serial:       34BF9CBE3873C8D65E319B048CD45FE6945AA124
Authority key identifier: 4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/3133382e39392e3234382e302f32322d3234203d3e203238313330.roa
Signing time:             Thu 05 Feb 2026 08:16:45 +0000
ROA not before:           Thu 05 Feb 2026 08:11:45 +0000
ROA not after:            Thu 04 Feb 2027 08:16:45 +0000
asID:                     28130
IP address blocks:        138.99.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl
                          rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 15:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:bf:9c:be:38:73:c8:d6:5e:31:9b:04:8c:d4:5f:e6:94:5a:a1:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
        Validity
            Not Before: Feb  5 08:11:45 2026 GMT
            Not After : Feb  4 08:16:45 2027 GMT
        Subject: CN=2CD4E73557751F5E477E6D6F4252ED260DA992F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b4:3d:ee:4b:62:af:ab:27:97:32:93:93:d1:
                    57:a3:cf:dd:4b:53:6a:91:0c:8a:fc:59:0f:5b:c8:
                    19:ff:3e:2b:0f:ff:ee:76:d5:87:72:30:fd:3d:76:
                    0c:cc:c1:d2:89:09:56:9c:84:a1:c6:55:fa:a9:ec:
                    25:b8:ee:09:18:d8:48:b1:81:65:0a:0f:0f:ef:e5:
                    2c:57:f0:97:95:4a:07:4f:df:d9:09:14:09:bb:94:
                    6f:2d:54:e7:dd:fd:0f:8c:53:8e:1b:83:86:49:1d:
                    b5:5e:3b:53:55:1b:fa:d1:ae:07:15:55:40:46:52:
                    87:41:9b:cc:6c:bc:cf:28:bb:57:bc:ac:a2:ea:b1:
                    c3:5a:03:21:d5:6d:40:47:ec:7e:33:4b:44:75:38:
                    3e:3d:70:2f:03:7a:11:d3:f6:36:b0:a4:be:a8:27:
                    5b:96:2d:08:6e:eb:41:fe:77:1a:ac:61:d2:87:1a:
                    99:9e:c1:8e:f0:46:2f:06:ec:03:de:d4:29:5b:5f:
                    67:c3:9b:99:b4:ca:94:c4:7a:a4:bf:32:1d:97:4e:
                    5f:85:4f:73:0a:4e:95:de:08:cd:4c:a4:c1:35:2d:
                    9d:09:f5:ff:39:46:46:39:0a:36:1a:c0:ff:b6:b5:
                    42:d7:3a:4a:2e:86:f4:15:28:c9:d6:e8:1d:b0:eb:
                    f6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:D4:E7:35:57:75:1F:5E:47:7E:6D:6F:42:52:ED:26:0D:A9:92:F4
            X509v3 Authority Key Identifier:
                keyid:4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/3133382e39392e3234382e302f32322d3234203d3e203238313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:17:3f:d9:8c:35:83:28:39:a6:13:c0:20:78:8f:97:7e:14:
         b2:96:5e:b5:bb:a0:45:d8:eb:7e:ee:06:bc:a0:4e:89:ad:28:
         52:19:b4:7d:bf:44:07:cc:6f:12:17:9d:46:31:c9:c9:2b:76:
         16:0c:c4:7d:2a:fa:a4:05:5b:e3:9c:17:c8:11:38:fc:1e:99:
         2a:f8:bc:35:0a:b0:b5:33:7a:9f:49:15:d1:aa:6d:32:7b:bd:
         f2:9d:01:2d:a2:5b:64:3e:f8:f1:77:16:73:cb:9a:62:3f:67:
         55:e6:48:47:cf:46:a8:e2:2a:5b:d7:90:47:e9:f1:ef:7a:11:
         0e:3e:92:de:6b:d3:c2:61:f9:3a:8f:a0:59:88:f3:06:ac:b1:
         84:19:69:27:61:7b:fd:95:54:bf:23:17:53:b9:fa:15:54:ad:
         e8:c0:99:86:44:c4:c0:56:da:39:a8:56:56:f5:f8:c9:18:23:
         b4:3b:bd:1b:f7:0b:a1:1d:71:cc:32:78:23:3e:47:ce:63:77:
         1c:e9:a9:8b:58:5a:b2:1a:ee:0d:0a:b7:4e:1c:c7:f2:81:b3:
         71:eb:dc:b1:c0:a9:b2:e3:30:68:05:9d:ec:de:eb:74:2a:e2:
         1a:9b:a3:79:2b:0f:72:a7:40:74:45:1d:b1:2e:9a:9d:9c:34:
         31:45:08:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:36:33 2026 by rpki-client