Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BYdxeBDCKvqxU5gjqoqXi62on7CK9Ht26qgKKRPrZk8G/0/3133382e3132322e3133362e302f32322d3234203d3e20323634333239.roa
File:                     3133382e3132322e3133362e302f32322d3234203d3e20323634333239.roa (raw, json)
Hash identifier:          nm1iPdFlAFmMIWBxAwj2HV0ig9QasHr1xoWlYDFMIVE=
Subject key identifier:   77:86:AA:85:16:FE:DC:96:A8:89:28:D3:91:D4:B9:B3:7A:03:88:12
Certificate issuer:       /CN=2E940954738793728401E2B3BA1BF1AE600FF21A
Certificate serial:       0C1EF04DB9419C03AC5FC648C1BE3B6E4B1D1620
Authority key identifier: 2E:94:09:54:73:87:93:72:84:01:E2:B3:BA:1B:F1:AE:60:0F:F2:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E940954738793728401E2B3BA1BF1AE600FF21A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BYdxeBDCKvqxU5gjqoqXi62on7CK9Ht26qgKKRPrZk8G/0/3133382e3132322e3133362e302f32322d3234203d3e20323634333239.roa
Signing time:             Fri 13 Feb 2026 17:57:14 +0000
ROA not before:           Fri 13 Feb 2026 17:52:14 +0000
ROA not after:            Fri 12 Feb 2027 17:57:14 +0000
asID:                     264329
IP address blocks:        138.122.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BYdxeBDCKvqxU5gjqoqXi62on7CK9Ht26qgKKRPrZk8G/0/2E940954738793728401E2B3BA1BF1AE600FF21A.crl
                          rsync://rpki-repo.registro.br/repo/BYdxeBDCKvqxU5gjqoqXi62on7CK9Ht26qgKKRPrZk8G/0/2E940954738793728401E2B3BA1BF1AE600FF21A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E940954738793728401E2B3BA1BF1AE600FF21A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 17:42:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:1e:f0:4d:b9:41:9c:03:ac:5f:c6:48:c1:be:3b:6e:4b:1d:16:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E940954738793728401E2B3BA1BF1AE600FF21A
        Validity
            Not Before: Feb 13 17:52:14 2026 GMT
            Not After : Feb 12 17:57:14 2027 GMT
        Subject: CN=7786AA8516FEDC96A88928D391D4B9B37A038812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d9:d2:94:48:c9:e9:52:56:a0:ae:8a:99:33:
                    a0:90:f9:72:7c:d1:f7:7b:7e:a0:82:f0:50:3a:5d:
                    88:76:55:57:1a:8d:80:da:d3:98:05:fd:72:00:b8:
                    17:38:a2:4e:98:20:21:ae:89:b8:6a:d6:28:26:09:
                    47:3c:96:f7:8c:1e:6c:0a:c3:71:c3:fb:fd:62:ab:
                    d1:d2:d5:0e:a5:b3:8c:57:00:f6:1b:bf:5c:40:63:
                    93:4e:0a:9c:e6:f8:88:dc:98:5d:8a:db:9f:47:c0:
                    cf:80:4f:de:77:11:f4:65:a4:f0:77:f9:45:4c:0e:
                    41:cc:bd:0d:7c:f7:fe:59:32:3d:11:bf:af:7a:84:
                    45:15:a1:ac:ca:91:01:39:93:9e:40:be:2b:2d:08:
                    e2:98:c3:b4:af:33:d6:ee:a1:6a:b7:e0:25:eb:b9:
                    0e:ad:5f:2f:dd:cc:03:71:82:fe:25:a5:6a:7a:72:
                    1d:2f:27:a3:c3:83:ed:e2:47:98:18:f2:7b:59:32:
                    81:8d:c3:e5:41:81:c9:4c:25:13:7e:7f:6c:27:8b:
                    8e:2a:4d:9d:5c:3e:28:14:19:9e:5e:31:eb:b6:60:
                    b6:34:a9:e7:e6:13:60:74:35:dd:90:83:11:42:5a:
                    a3:33:ba:a3:f9:ae:42:d7:91:38:31:57:1c:50:24:
                    93:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:86:AA:85:16:FE:DC:96:A8:89:28:D3:91:D4:B9:B3:7A:03:88:12
            X509v3 Authority Key Identifier:
                keyid:2E:94:09:54:73:87:93:72:84:01:E2:B3:BA:1B:F1:AE:60:0F:F2:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BYdxeBDCKvqxU5gjqoqXi62on7CK9Ht26qgKKRPrZk8G/0/2E940954738793728401E2B3BA1BF1AE600FF21A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E940954738793728401E2B3BA1BF1AE600FF21A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BYdxeBDCKvqxU5gjqoqXi62on7CK9Ht26qgKKRPrZk8G/0/3133382e3132322e3133362e302f32322d3234203d3e20323634333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:c5:08:b9:71:f0:89:0e:6d:10:88:02:4e:70:eb:09:0c:6f:
         60:60:84:6e:e8:38:3e:6e:ab:5b:53:20:c5:68:f9:4c:87:11:
         09:b0:6b:67:0d:f8:48:72:cd:48:f5:9f:c0:00:1f:a3:44:f7:
         f4:62:9e:84:48:ad:1e:e2:be:41:d5:9b:ec:0d:3e:4d:12:95:
         9c:a0:e5:3c:c4:f9:18:cd:26:c3:ef:7a:80:17:9c:54:2d:0e:
         3f:eb:dc:b1:7b:bb:64:27:e7:de:9b:cf:ca:21:6a:36:7a:2c:
         12:73:57:ac:59:97:54:44:a5:bf:e1:7c:60:6d:2f:db:c5:0d:
         e8:b0:11:5b:63:71:7b:65:1b:dd:76:a4:60:cf:dd:ce:77:f1:
         f3:82:15:cc:0a:3a:3b:95:d7:a9:e6:71:a9:4d:f2:98:59:b0:
         bd:b4:33:c6:bb:23:25:90:27:95:bb:65:43:ff:7a:8e:84:b9:
         fa:b4:b2:a9:54:0e:4e:ea:c5:7d:e5:c2:8f:c0:c7:1d:5d:f7:
         33:d2:83:f5:45:49:cd:cb:47:d0:81:85:f8:b8:a3:63:d0:c6:
         f6:ac:d4:7e:ca:a0:c3:27:b2:f3:e2:d6:70:6d:de:77:0b:3e:
         a0:a7:9c:62:e2:9b:de:3a:3e:a8:7a:06:52:33:e4:44:0f:3b:
         fb:cc:b2:ce
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUDB7wTblBnAOsX8ZIwb47bksdFiAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU5NDA5NTQ3Mzg3OTM3Mjg0MDFFMkIzQkExQkYxQUU2
MDBGRjIxQTAeFw0yNjAyMTMxNzUyMTRaFw0yNzAyMTIxNzU3MTRaMDMxMTAvBgNV
BAMTKDc3ODZBQTg1MTZGRURDOTZBODg5MjhEMzkxRDRCOUIzN0EwMzg4MTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm2dKUSMnpUlagroqZM6CQ+XJ8
0fd7fqCC8FA6XYh2VVcajYDa05gF/XIAuBc4ok6YICGuibhq1igmCUc8lveMHmwK
w3HD+/1iq9HS1Q6ls4xXAPYbv1xAY5NOCpzm+IjcmF2K259HwM+AT953EfRlpPB3
+UVMDkHMvQ189/5ZMj0Rv696hEUVoazKkQE5k55AvistCOKYw7SvM9buoWq34CXr
uQ6tXy/dzANxgv4lpWp6ch0vJ6PDg+3iR5gY8ntZMoGNw+VBgclMJRN+f2wni44q
TZ1cPigUGZ5eMeu2YLY0qefmE2B0Nd2QgxFCWqMzuqP5rkLXkTgxVxxQJJN/AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUd4aqhRb+3JaoiSjTkdS5s3oDiBIwHwYDVR0j
BBgwFoAULpQJVHOHk3KEAeKzuhvxrmAP8howDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQllkeGVCRENLdnF4VTVnanFvcVhpNjJvbjdDSzlIdDI2cWdLS1JQclpr
OEcvMC8yRTk0MDk1NDczODc5MzcyODQwMUUyQjNCQTFCRjFBRTYwMEZGMjFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFOTQwOTU0NzM4NzkzNzI4
NDAxRTJCM0JBMUJGMUFFNjAwRkYyMUEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JZZHhlQkRDS3ZxeFU1Z2pxb3FYaTYyb243Q0s5SHQyNnFnS0tSUHJaazhHLzAv
MzEzMzM4MmUzMTMyMzIyZTMxMzMzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNDMzMzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAop6iDANBgkqhkiG9w0BAQsFAAOCAQEAN8UI
uXHwiQ5tEIgCTnDrCQxvYGCEbug4Pm6rW1MgxWj5TIcRCbBrZw34SHLNSPWfwAAf
o0T39GKehEitHuK+QdWb7A0+TRKVnKDlPMT5GM0mw+96gBecVC0OP+vcsXu7ZCfn
3pvPyiFqNnosEnNXrFmXVESlv+F8YG0v28UN6LARW2Nxe2Ub3XakYM/dznfx84IV
zAo6O5XXqeZxqU3ymFmwvbQzxrsjJZAnlbtlQ/96joS5+rSyqVQOTurFfeXCj8DH
HV33M9KD9UVJzctH0IGF+LijY9DG9qzUfsqgwyey8+LWcG3edws+oKecYuKb3jo+
qHoGUjPkRA87+8yyzg==
-----END CERTIFICATE-----
Generated at Mon Feb 23 04:24:46 2026 by rpki-client