Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3133382e3131382e3133322e302f32322d3234203d3e20323632363338.roa
File:                     3133382e3131382e3133322e302f32322d3234203d3e20323632363338.roa (raw, json)
Hash identifier:          r3AkiXHVaJVjKQDuGF+C4QWIIROM/3i//+8AqoL9Oe0=
Subject key identifier:   31:C4:8F:57:25:96:1F:1B:99:34:C6:10:67:B0:E9:8A:5E:9C:C2:D6
Certificate issuer:       /CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
Certificate serial:       0663DA65E4102B94FBFE0216FBCAE8AEE2AD4C7C
Authority key identifier: E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3133382e3131382e3133322e302f32322d3234203d3e20323632363338.roa
Signing time:             Mon 19 Jan 2026 16:00:20 +0000
ROA not before:           Mon 19 Jan 2026 15:55:20 +0000
ROA not after:            Mon 18 Jan 2027 16:00:20 +0000
asID:                     262638
IP address blocks:        138.118.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl
                          rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:11:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:63:da:65:e4:10:2b:94:fb:fe:02:16:fb:ca:e8:ae:e2:ad:4c:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
        Validity
            Not Before: Jan 19 15:55:20 2026 GMT
            Not After : Jan 18 16:00:20 2027 GMT
        Subject: CN=31C48F5725961F1B9934C61067B0E98A5E9CC2D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4c:3a:44:fc:a1:76:79:65:b2:49:17:7b:e3:
                    85:33:71:66:46:34:cf:72:c0:78:04:d7:a4:be:d4:
                    d9:ed:b0:00:8f:99:85:05:a8:45:26:9f:25:e2:72:
                    91:22:4d:bd:f6:ca:97:0f:97:11:ef:10:5f:2e:06:
                    a2:29:a8:5f:ce:95:87:60:8b:b1:45:28:a4:9a:fc:
                    65:dc:ec:28:f5:41:38:59:e6:07:ff:c9:4f:90:0b:
                    2b:70:9e:4f:31:7b:ea:2b:4f:5d:d7:6b:0b:14:e0:
                    3d:cc:bd:f7:ed:e0:7e:18:aa:df:e4:bf:5a:0e:fc:
                    0a:ec:19:a7:2e:32:28:85:e2:49:74:74:fd:8d:33:
                    b9:b4:55:59:52:15:9d:d6:04:4e:7b:21:4d:2a:71:
                    74:be:d9:76:55:16:05:cb:2d:90:7d:91:ab:8d:0a:
                    e5:7d:9e:c5:34:8b:a3:b5:6f:25:ed:4d:11:57:c8:
                    63:f1:9c:c3:47:8f:46:07:4b:e3:4d:a4:88:b6:20:
                    d0:91:b7:7f:01:18:8b:7b:53:4b:3d:a3:0c:aa:24:
                    b3:64:db:23:4c:09:0e:c7:05:4b:d7:2e:f7:4c:db:
                    28:0b:83:d8:d5:db:ad:36:d6:63:86:39:1f:3c:93:
                    2d:ac:4f:8d:3c:d5:99:2c:2a:6c:14:e2:71:d0:8a:
                    26:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C4:8F:57:25:96:1F:1B:99:34:C6:10:67:B0:E9:8A:5E:9C:C2:D6
            X509v3 Authority Key Identifier:
                keyid:E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3133382e3131382e3133322e302f32322d3234203d3e20323632363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:95:b1:3d:ce:4c:1a:4f:a4:9c:ef:f6:37:19:51:b9:7c:2b:
         2a:e3:7b:a2:4c:8e:c1:bc:10:90:64:26:3e:29:d0:b3:4f:cd:
         54:90:94:80:eb:1d:96:07:76:21:d4:22:fa:09:2e:28:39:c7:
         9f:d6:52:a1:76:78:7d:de:9a:e8:3a:be:c3:8d:e3:d0:0f:77:
         ca:4f:20:6c:19:7b:94:bf:a9:11:79:a8:cf:e9:80:e7:0b:2c:
         7d:26:ae:cc:09:16:4b:32:d9:7b:26:b9:e7:b6:de:66:02:5a:
         13:c1:5e:8d:be:57:e8:d5:80:a5:f6:44:22:96:89:81:dd:8a:
         50:3d:e0:34:f9:5c:f0:44:b8:5f:7f:61:87:aa:90:4d:20:7d:
         e6:b4:7c:81:47:14:c2:11:6f:2e:4b:7e:ff:38:3e:8c:29:d7:
         71:25:90:1f:73:d1:89:77:50:8e:0f:bb:3a:4b:95:d9:5b:23:
         58:01:45:5c:80:82:72:de:82:66:1a:63:47:95:ae:a3:bc:0c:
         ec:5f:bd:81:ba:50:1f:d8:68:36:a6:e0:ad:3d:41:72:74:fd:
         c1:ea:51:16:96:93:0a:cb:9e:f5:d3:c9:47:b1:a1:b6:74:86:
         e9:96:bf:27:12:5c:85:98:cc:14:f2:ff:27:8c:85:b8:38:5b:
         2c:b7:b3:63
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUBmPaZeQQK5T7/gIW+8roruKtTHwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTYxMTVDNEIwRERGMzU2NkQ4N0YzNzgzREQ4NzMwNDk3
RTNDQ0UwNTAeFw0yNjAxMTkxNTU1MjBaFw0yNzAxMTgxNjAwMjBaMDMxMTAvBgNV
BAMTKDMxQzQ4RjU3MjU5NjFGMUI5OTM0QzYxMDY3QjBFOThBNUU5Q0MyRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0TDpE/KF2eWWySRd744UzcWZG
NM9ywHgE16S+1NntsACPmYUFqEUmnyXicpEiTb32ypcPlxHvEF8uBqIpqF/OlYdg
i7FFKKSa/GXc7Cj1QThZ5gf/yU+QCytwnk8xe+orT13XawsU4D3Mvfft4H4Yqt/k
v1oO/ArsGacuMiiF4kl0dP2NM7m0VVlSFZ3WBE57IU0qcXS+2XZVFgXLLZB9kauN
CuV9nsU0i6O1byXtTRFXyGPxnMNHj0YHS+NNpIi2INCRt38BGIt7U0s9owyqJLNk
2yNMCQ7HBUvXLvdM2ygLg9jV26021mOGOR88ky2sT4081ZksKmwU4nHQiiY/AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUMcSPVyWWHxuZNMYQZ7Dpil6cwtYwHwYDVR0j
BBgwFoAU5hFcSw3fNWbYfzeD3YcwSX48zgUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby91ZGNwd1BlTEN5eVpIWDJEUGlvbWtrdkM2dlRzUFhTS3FndWRNRGhKVWlh
LzEvRTYxMTVDNEIwRERGMzU2NkQ4N0YzNzgzREQ4NzMwNDk3RTNDQ0UwNS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FNjExNUM0QjBEREYzNTY2RDg3
RjM3ODNERDg3MzA0OTdFM0NDRTA1LmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby91
ZGNwd1BlTEN5eVpIWDJEUGlvbWtrdkM2dlRzUFhTS3FndWRNRGhKVWlhLzEvMzEz
MzM4MmUzMTMxMzgyZTMxMzMzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYz
MjM2MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAop2hDANBgkqhkiG9w0BAQsFAAOCAQEAMpWxPc5M
Gk+knO/2NxlRuXwrKuN7okyOwbwQkGQmPinQs0/NVJCUgOsdlgd2IdQi+gkuKDnH
n9ZSoXZ4fd6a6Dq+w43j0A93yk8gbBl7lL+pEXmoz+mA5wssfSauzAkWSzLZeya5
57beZgJaE8Fejb5X6NWApfZEIpaJgd2KUD3gNPlc8ES4X39hh6qQTSB95rR8gUcU
whFvLkt+/zg+jCnXcSWQH3PRiXdQjg+7OkuV2VsjWAFFXICCct6CZhpjR5Wuo7wM
7F+9gbpQH9hoNqbgrT1BcnT9wepRFpaTCsue9dPJR7GhtnSG6Za/JxJchZjMFPL/
J4yFuDhbLLezYw==
-----END CERTIFICATE-----
Generated at Thu Feb 19 01:35:04 2026 by rpki-client