Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CDNPzzLQTEV283xCvZxRS9ZqWJigwRu1mahJYwYe9LD6/0/3133382e39342e3139362e302f32322d3234203d3e203631353831.roa
File:                     3133382e39342e3139362e302f32322d3234203d3e203631353831.roa (raw, json)
Hash identifier:          sa9CbGsjToh5xSwiAq3+53EFajZd3ZS2Vu0qf9Bn+cw=
Subject key identifier:   B2:45:81:C5:8F:17:CF:1B:CB:3B:6A:05:92:65:15:61:30:84:C4:4B
Certificate issuer:       /CN=20EE210B8D6A04962173004DC68629DBF033EFB8
Certificate serial:       389F6A0D35133163607EA5563477A7D83A3DC1DF
Authority key identifier: 20:EE:21:0B:8D:6A:04:96:21:73:00:4D:C6:86:29:DB:F0:33:EF:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20EE210B8D6A04962173004DC68629DBF033EFB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CDNPzzLQTEV283xCvZxRS9ZqWJigwRu1mahJYwYe9LD6/0/3133382e39342e3139362e302f32322d3234203d3e203631353831.roa
Signing time:             Mon 09 Feb 2026 21:38:47 +0000
ROA not before:           Mon 09 Feb 2026 21:33:47 +0000
ROA not after:            Mon 08 Feb 2027 21:38:47 +0000
asID:                     61581
IP address blocks:        138.94.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CDNPzzLQTEV283xCvZxRS9ZqWJigwRu1mahJYwYe9LD6/0/20EE210B8D6A04962173004DC68629DBF033EFB8.crl
                          rsync://rpki-repo.registro.br/repo/CDNPzzLQTEV283xCvZxRS9ZqWJigwRu1mahJYwYe9LD6/0/20EE210B8D6A04962173004DC68629DBF033EFB8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20EE210B8D6A04962173004DC68629DBF033EFB8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 22:49:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:9f:6a:0d:35:13:31:63:60:7e:a5:56:34:77:a7:d8:3a:3d:c1:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20EE210B8D6A04962173004DC68629DBF033EFB8
        Validity
            Not Before: Feb  9 21:33:47 2026 GMT
            Not After : Feb  8 21:38:47 2027 GMT
        Subject: CN=B24581C58F17CF1BCB3B6A05926515613084C44B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ec:4b:24:ee:c0:13:01:6c:03:88:17:b3:b2:
                    ec:a3:90:dd:d2:b7:2b:05:f5:9f:06:ac:f3:c7:28:
                    27:ca:f2:2a:00:3a:78:3a:d1:29:10:80:cb:e4:10:
                    cf:3f:65:89:e0:d4:1c:a9:43:e8:d9:c4:ed:10:a3:
                    eb:e8:0a:ea:c9:06:89:4e:ef:1d:a9:17:22:da:34:
                    a9:33:58:5b:10:53:45:8b:a6:ea:c8:ab:de:21:1f:
                    eb:75:4d:0b:ff:a7:04:23:6c:ab:99:46:7d:58:c8:
                    b1:37:09:b9:d1:59:02:99:ba:72:17:9c:61:bf:35:
                    ee:8e:c0:95:39:32:50:6f:a5:52:b2:57:6f:fb:0a:
                    c3:e0:62:49:be:df:9d:b9:42:fd:a4:53:1a:dc:94:
                    0a:c9:65:2d:d2:43:64:34:43:95:c1:cd:78:e2:ea:
                    ba:d9:05:73:9d:69:34:24:88:e5:91:23:af:f8:74:
                    de:76:28:af:01:2b:0f:3c:1b:0f:ea:0c:c1:66:48:
                    5f:a0:81:7a:ff:ba:fd:d6:d9:29:03:8d:71:6b:97:
                    37:d9:bb:4b:83:d0:fa:14:46:8a:5b:0b:93:ce:87:
                    41:5b:f8:cc:e0:ae:7f:15:e3:a4:82:19:d4:db:e3:
                    f3:0a:8b:b0:1f:ca:08:42:a1:89:54:08:da:5b:17:
                    ad:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:45:81:C5:8F:17:CF:1B:CB:3B:6A:05:92:65:15:61:30:84:C4:4B
            X509v3 Authority Key Identifier:
                keyid:20:EE:21:0B:8D:6A:04:96:21:73:00:4D:C6:86:29:DB:F0:33:EF:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CDNPzzLQTEV283xCvZxRS9ZqWJigwRu1mahJYwYe9LD6/0/20EE210B8D6A04962173004DC68629DBF033EFB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20EE210B8D6A04962173004DC68629DBF033EFB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CDNPzzLQTEV283xCvZxRS9ZqWJigwRu1mahJYwYe9LD6/0/3133382e39342e3139362e302f32322d3234203d3e203631353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:dd:47:3c:81:e1:77:33:56:c9:5b:30:c6:c4:c7:db:54:be:
         72:02:af:00:30:b3:7f:67:69:e1:2d:c7:63:2a:ad:8c:30:5b:
         a5:94:21:a0:e7:8c:9e:a4:d5:1e:3d:cc:ca:58:50:c3:c6:47:
         f1:a3:bb:ef:c0:72:41:53:6c:0e:80:be:6f:3b:bb:0f:10:8d:
         f3:f0:7a:2e:f9:c0:d3:77:a8:29:32:a7:e8:83:95:93:02:c2:
         fc:b3:46:ea:5e:fc:cc:c1:98:07:9f:10:5c:94:a4:c9:4a:2e:
         4f:18:e5:70:65:d9:63:5e:d9:44:67:d9:09:97:36:dc:4a:52:
         02:62:ab:a3:84:01:96:aa:0c:c5:62:72:92:dd:ea:c4:0c:51:
         2f:4f:8c:6a:5d:87:6d:cd:c8:80:48:31:a4:f6:9d:10:c9:21:
         fc:d1:62:4e:ae:63:33:64:dd:a5:86:c5:21:c7:08:4c:26:2b:
         25:e9:0e:26:57:22:70:3f:0e:0c:20:72:8f:12:49:e3:0c:af:
         45:1d:29:2b:27:0f:92:42:13:1e:bc:a8:c3:ea:aa:df:1f:8a:
         5a:a3:fc:f0:f5:73:04:fc:19:89:ca:d8:82:bd:8d:04:f7:53:
         17:7d:4d:18:c8:ad:26:6b:04:a5:a5:09:81:8d:2f:ac:ba:f9:
         2a:72:c3:ef
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUOJ9qDTUTMWNgfqVWNHen2Do9wd8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBFRTIxMEI4RDZBMDQ5NjIxNzMwMDREQzY4NjI5REJG
MDMzRUZCODAeFw0yNjAyMDkyMTMzNDdaFw0yNzAyMDgyMTM4NDdaMDMxMTAvBgNV
BAMTKEIyNDU4MUM1OEYxN0NGMUJDQjNCNkEwNTkyNjUxNTYxMzA4NEM0NEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc7Esk7sATAWwDiBezsuyjkN3S
tysF9Z8GrPPHKCfK8ioAOng60SkQgMvkEM8/ZYng1BypQ+jZxO0Qo+voCurJBolO
7x2pFyLaNKkzWFsQU0WLpurIq94hH+t1TQv/pwQjbKuZRn1YyLE3CbnRWQKZunIX
nGG/Ne6OwJU5MlBvpVKyV2/7CsPgYkm+3525Qv2kUxrclArJZS3SQ2Q0Q5XBzXji
6rrZBXOdaTQkiOWRI6/4dN52KK8BKw88Gw/qDMFmSF+ggXr/uv3W2SkDjXFrlzfZ
u0uD0PoURopbC5POh0Fb+Mzgrn8V46SCGdTb4/MKi7AfyghCoYlUCNpbF63zAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUskWBxY8XzxvLO2oFkmUVYTCExEswHwYDVR0j
BBgwFoAUIO4hC41qBJYhcwBNxoYp2/Az77gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0ROUHp6TFFURVYyODN4Q3ZaeFJTOVpxV0ppZ3dSdTFtYWhKWXdZZTlM
RDYvMC8yMEVFMjEwQjhENkEwNDk2MjE3MzAwNERDNjg2MjlEQkYwMzNFRkI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIwRUUyMTBCOEQ2QTA0OTYy
MTczMDA0REM2ODYyOURCRjAzM0VGQjguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NETlB6ekxRVEVWMjgzeEN2WnhSUzlacVdKaWd3UnUxbWFoSll3WWU5TEQ2LzAv
MzEzMzM4MmUzOTM0MmUzMTM5MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNjMx
MzUzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCil7EMA0GCSqGSIb3DQEBCwUAA4IBAQB+3Uc8geF3
M1bJWzDGxMfbVL5yAq8AMLN/Z2nhLcdjKq2MMFullCGg54yepNUePczKWFDDxkfx
o7vvwHJBU2wOgL5vO7sPEI3z8Hou+cDTd6gpMqfog5WTAsL8s0bqXvzMwZgHnxBc
lKTJSi5PGOVwZdljXtlEZ9kJlzbcSlICYqujhAGWqgzFYnKS3erEDFEvT4xqXYdt
zciASDGk9p0QySH80WJOrmMzZN2lhsUhxwhMJisl6Q4mVyJwPw4MIHKPEknjDK9F
HSkrJw+SQhMevKjD6qrfH4pao/zw9XME/BmJytiCvY0E91MXfU0YyK0mawSlpQmB
jS+suvkqcsPv
-----END CERTIFICATE-----
Generated at Mon Feb 23 02:54:48 2026 by rpki-client