Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DqaPW3yMaZm5zCsnbtzHWqUXWe6UiqfHKjW9rVAyEizG/0/3133382e3132312e3230342e302f32322d3234203d3e203631393038.roa
File:                     3133382e3132312e3230342e302f32322d3234203d3e203631393038.roa (raw, json)
Hash identifier:          4xAIo70cfoXe6KcM4NOtDxHJVGpql5/liSqM52Mz+yA=
Subject key identifier:   80:AF:42:AC:00:91:77:94:E9:A4:07:46:3B:77:FF:62:45:BD:63:C7
Certificate issuer:       /CN=5D62945067A432F6ECF2AEED5374A6819AB60607
Certificate serial:       4C7C0391C8434AB5AC51B61A05BE94153FAC14FF
Authority key identifier: 5D:62:94:50:67:A4:32:F6:EC:F2:AE:ED:53:74:A6:81:9A:B6:06:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D62945067A432F6ECF2AEED5374A6819AB60607.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DqaPW3yMaZm5zCsnbtzHWqUXWe6UiqfHKjW9rVAyEizG/0/3133382e3132312e3230342e302f32322d3234203d3e203631393038.roa
Signing time:             Fri 30 Jan 2026 15:52:24 +0000
ROA not before:           Fri 30 Jan 2026 15:47:24 +0000
ROA not after:            Fri 29 Jan 2027 15:52:24 +0000
asID:                     61908
IP address blocks:        138.121.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DqaPW3yMaZm5zCsnbtzHWqUXWe6UiqfHKjW9rVAyEizG/0/5D62945067A432F6ECF2AEED5374A6819AB60607.crl
                          rsync://rpki-repo.registro.br/repo/DqaPW3yMaZm5zCsnbtzHWqUXWe6UiqfHKjW9rVAyEizG/0/5D62945067A432F6ECF2AEED5374A6819AB60607.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D62945067A432F6ECF2AEED5374A6819AB60607.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 11:52:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:7c:03:91:c8:43:4a:b5:ac:51:b6:1a:05:be:94:15:3f:ac:14:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D62945067A432F6ECF2AEED5374A6819AB60607
        Validity
            Not Before: Jan 30 15:47:24 2026 GMT
            Not After : Jan 29 15:52:24 2027 GMT
        Subject: CN=80AF42AC00917794E9A407463B77FF6245BD63C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e5:63:db:e5:c4:55:a4:27:dc:b4:5d:0e:86:
                    98:5b:51:9c:a3:56:f5:c8:c2:4a:89:14:e3:0f:82:
                    5f:67:87:e6:5d:42:5b:49:78:21:65:f4:d5:3e:3d:
                    9e:21:2e:f4:ac:22:25:49:19:55:85:3a:64:41:47:
                    68:23:80:56:b3:b8:dd:e9:0f:f6:80:e2:e1:3d:3e:
                    f0:3b:8f:d9:dd:d6:cf:cb:89:45:8f:1e:54:c7:2d:
                    42:46:df:1b:01:03:8c:b2:c3:ed:18:e6:4c:f7:96:
                    16:00:e0:77:97:da:ba:90:e8:f5:ce:3d:f9:c2:97:
                    4b:b1:e6:71:f6:97:8b:fd:b8:2c:79:a8:d7:08:4e:
                    83:20:51:1a:21:4a:27:c0:b8:e8:b1:bc:57:b3:33:
                    54:72:a2:0c:5e:bb:ba:98:3a:f7:e6:d7:dc:81:83:
                    36:84:74:0a:58:5e:bc:fc:6a:b2:ee:b8:14:a8:39:
                    fb:b8:d5:83:a4:eb:a6:b4:9a:74:b4:17:84:c7:c8:
                    f3:58:52:99:9f:d3:5a:27:6f:76:7f:ab:26:31:9a:
                    35:a0:cb:a8:e6:d3:f2:aa:7b:e5:3c:9d:4c:06:85:
                    2a:56:c1:9e:ed:53:e0:8c:03:4e:c7:38:1e:90:ef:
                    ea:1b:31:dd:20:9d:b4:dd:ba:6a:67:c1:00:d3:bd:
                    4e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:AF:42:AC:00:91:77:94:E9:A4:07:46:3B:77:FF:62:45:BD:63:C7
            X509v3 Authority Key Identifier:
                keyid:5D:62:94:50:67:A4:32:F6:EC:F2:AE:ED:53:74:A6:81:9A:B6:06:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DqaPW3yMaZm5zCsnbtzHWqUXWe6UiqfHKjW9rVAyEizG/0/5D62945067A432F6ECF2AEED5374A6819AB60607.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D62945067A432F6ECF2AEED5374A6819AB60607.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqaPW3yMaZm5zCsnbtzHWqUXWe6UiqfHKjW9rVAyEizG/0/3133382e3132312e3230342e302f32322d3234203d3e203631393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:73:80:57:64:31:50:e0:74:b1:9c:06:e1:7c:c1:52:4a:82:
         2d:21:ad:65:7e:28:2c:7b:e7:39:46:5e:a8:31:29:63:d9:13:
         d6:92:20:42:92:fe:ac:a5:fe:ee:cb:1a:28:fe:a6:7c:32:ce:
         90:be:47:07:41:61:56:7a:26:1a:84:6b:af:f4:4e:ad:4e:32:
         0f:dc:6f:5a:ca:4f:74:ef:ae:5a:df:5e:39:d7:8b:d4:4e:0d:
         92:14:b2:29:12:73:83:81:2b:33:d2:c2:bc:8f:8b:cb:97:f6:
         4c:34:84:35:47:26:d8:7c:d5:e7:78:2c:7a:83:61:99:68:70:
         96:6b:09:a5:fd:b1:bb:81:59:60:5b:b8:c5:9e:d2:71:06:dc:
         71:44:8b:87:62:ae:9b:5d:63:0d:7b:31:0e:dc:b3:2c:ac:de:
         61:a3:e8:b7:07:b2:bf:81:1d:07:a5:1e:b0:7c:c0:83:ad:97:
         76:16:f2:9f:55:3b:70:74:ed:f2:26:ff:2b:53:31:d0:1a:b9:
         06:59:cf:39:d2:3a:67:a1:7f:fc:af:1a:d2:c2:46:c6:3a:54:
         c1:fd:5e:08:03:31:d9:41:e4:0e:57:c8:9a:8b:0a:2b:9d:1c:
         69:13:44:74:c1:e6:79:ba:3b:00:78:8a:c2:34:a2:81:5d:b5:
         5e:9c:72:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:44:47 2026 by rpki-client