Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7fpm6Ps7XcjgaG4JuA2gxV8nfkftGbVy79Yf4W7tHkRL/0/3133382e3131372e3132302e302f32322d3332203d3e20323632383230.roa
File:                     3133382e3131372e3132302e302f32322d3332203d3e20323632383230.roa (raw, json)
Hash identifier:          98NrK6Hlp8CTm2LX3hpBwX4oi8GZH2Fow1USahuPYGk=
Subject key identifier:   D3:BC:E5:9F:23:06:88:3D:C8:63:C8:08:22:2B:78:6C:02:BD:88:28
Certificate issuer:       /CN=730AE3E5718D176FBBE44D827B4E1CCB3252EDAC
Certificate serial:       4C99D20194B0BF22D5E16F66D899FD38A766733F
Authority key identifier: 73:0A:E3:E5:71:8D:17:6F:BB:E4:4D:82:7B:4E:1C:CB:32:52:ED:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/730AE3E5718D176FBBE44D827B4E1CCB3252EDAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7fpm6Ps7XcjgaG4JuA2gxV8nfkftGbVy79Yf4W7tHkRL/0/3133382e3131372e3132302e302f32322d3332203d3e20323632383230.roa
Signing time:             Tue 03 Feb 2026 19:54:00 +0000
ROA not before:           Tue 03 Feb 2026 19:49:00 +0000
ROA not after:            Tue 02 Feb 2027 19:54:00 +0000
asID:                     262820
IP address blocks:        138.117.120.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7fpm6Ps7XcjgaG4JuA2gxV8nfkftGbVy79Yf4W7tHkRL/0/730AE3E5718D176FBBE44D827B4E1CCB3252EDAC.crl
                          rsync://rpki-repo.registro.br/repo/7fpm6Ps7XcjgaG4JuA2gxV8nfkftGbVy79Yf4W7tHkRL/0/730AE3E5718D176FBBE44D827B4E1CCB3252EDAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/730AE3E5718D176FBBE44D827B4E1CCB3252EDAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 14:17:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:99:d2:01:94:b0:bf:22:d5:e1:6f:66:d8:99:fd:38:a7:66:73:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=730AE3E5718D176FBBE44D827B4E1CCB3252EDAC
        Validity
            Not Before: Feb  3 19:49:00 2026 GMT
            Not After : Feb  2 19:54:00 2027 GMT
        Subject: CN=D3BCE59F2306883DC863C808222B786C02BD8828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1f:11:31:67:3e:40:aa:25:53:82:e6:ae:31:
                    7f:91:9f:96:52:7b:ae:6d:d3:46:45:cd:38:02:2e:
                    95:ae:3a:67:12:ce:ac:13:c2:81:b4:69:69:8e:cb:
                    b7:45:b9:df:7b:fe:7e:76:2a:a1:5b:67:c2:9d:55:
                    d6:52:1c:bd:7f:42:2e:61:9f:ec:f6:28:3b:e8:15:
                    7a:ba:b4:1b:60:dd:87:2b:d5:b3:c2:d0:e7:d2:8b:
                    7c:dc:b0:42:65:68:a2:29:a1:f0:64:8e:34:24:a5:
                    f2:0b:41:d9:b6:d8:07:f4:69:bd:ac:53:f5:3c:05:
                    0e:af:b2:db:f2:01:f2:59:fe:81:ff:83:37:d8:96:
                    2a:be:4c:e9:58:a3:d1:94:64:97:16:16:18:cf:1c:
                    5a:9a:b1:8a:80:74:b8:7d:51:f1:de:c4:b1:bf:04:
                    71:eb:14:08:38:4e:9c:56:39:a5:14:1d:5a:24:19:
                    52:75:72:93:5c:c6:0c:8c:ce:3e:86:10:86:17:92:
                    47:8b:25:54:38:65:5d:26:57:9e:71:f8:f8:a3:17:
                    71:67:d3:7e:a5:9b:bd:1a:45:8e:49:44:ec:14:5c:
                    49:5f:a1:ff:63:7c:12:0b:37:f6:f4:25:5a:75:46:
                    a6:96:0f:94:6a:65:7b:76:dd:e8:a9:d1:5e:02:03:
                    0c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:BC:E5:9F:23:06:88:3D:C8:63:C8:08:22:2B:78:6C:02:BD:88:28
            X509v3 Authority Key Identifier:
                keyid:73:0A:E3:E5:71:8D:17:6F:BB:E4:4D:82:7B:4E:1C:CB:32:52:ED:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7fpm6Ps7XcjgaG4JuA2gxV8nfkftGbVy79Yf4W7tHkRL/0/730AE3E5718D176FBBE44D827B4E1CCB3252EDAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/730AE3E5718D176FBBE44D827B4E1CCB3252EDAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7fpm6Ps7XcjgaG4JuA2gxV8nfkftGbVy79Yf4W7tHkRL/0/3133382e3131372e3132302e302f32322d3332203d3e20323632383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:64:dc:c7:c4:8d:58:b1:73:f6:59:b1:51:f3:86:cc:56:cd:
         05:63:7d:dd:88:ae:c0:3e:fe:8c:60:9d:dc:ac:a2:9a:57:a1:
         29:2e:ba:8d:00:a4:21:29:0b:37:fc:9f:25:42:cb:36:d6:2e:
         d5:2d:c6:6f:18:e8:d2:cf:b9:01:01:8c:0c:22:e8:0e:96:cc:
         06:fb:3f:c4:87:41:d3:59:d5:ce:f6:23:f4:7f:71:47:7a:36:
         41:6a:98:a1:61:14:02:71:f7:97:6d:b1:af:fa:37:ef:85:80:
         33:fc:87:b7:2d:db:5b:5c:1a:d7:2c:65:fd:81:c1:96:35:67:
         6d:31:08:06:63:ad:e7:2f:ca:ef:ad:8c:3e:3b:43:d6:20:41:
         62:dd:61:48:ab:b3:ad:dc:f8:d4:57:44:06:02:8a:67:18:3c:
         39:73:25:02:49:d1:70:0e:eb:fa:f9:cd:f3:81:0d:5e:85:26:
         d3:75:fd:63:91:b8:5d:53:32:21:e1:63:fc:53:20:8a:a0:c3:
         1e:3e:f4:83:33:65:3e:04:70:ca:2e:37:b0:74:69:a4:36:1c:
         f4:ab:fe:bf:ab:cf:e8:20:d3:81:df:9f:ad:3c:b5:79:63:ab:
         06:30:a7:3b:17:d3:31:de:93:54:cc:f2:11:f3:8d:ca:d0:04:
         a3:89:6d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:50:17 2026 by rpki-client