Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EojyFvHCeNPxVLBwB7PTvC1BY9hxQWKhQCPMnZQSqRHS/0/3133382e3138362e3136382e302f32342d3234203d3e20323634343834.roa
File:                     3133382e3138362e3136382e302f32342d3234203d3e20323634343834.roa (raw, json)
Hash identifier:          fEpXxl69sQdYQ5LEtsPinB1NENWfkq0CtlI7+4460g0=
Subject key identifier:   B9:4C:6A:32:53:C3:B0:92:0B:A9:A9:A1:BF:C3:5C:01:38:A4:ED:A0
Certificate issuer:       /CN=EABBC5494AFF48709E3D64D65220EBB9DE71EBD4
Certificate serial:       60877E5D4FD64753D8E7C70194E43F32BED7A6FA
Authority key identifier: EA:BB:C5:49:4A:FF:48:70:9E:3D:64:D6:52:20:EB:B9:DE:71:EB:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EABBC5494AFF48709E3D64D65220EBB9DE71EBD4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EojyFvHCeNPxVLBwB7PTvC1BY9hxQWKhQCPMnZQSqRHS/0/3133382e3138362e3136382e302f32342d3234203d3e20323634343834.roa
Signing time:             Thu 12 Feb 2026 00:14:37 +0000
ROA not before:           Thu 12 Feb 2026 00:09:37 +0000
ROA not after:            Thu 11 Feb 2027 00:14:37 +0000
asID:                     264484
IP address blocks:        138.186.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EojyFvHCeNPxVLBwB7PTvC1BY9hxQWKhQCPMnZQSqRHS/0/EABBC5494AFF48709E3D64D65220EBB9DE71EBD4.crl
                          rsync://rpki-repo.registro.br/repo/EojyFvHCeNPxVLBwB7PTvC1BY9hxQWKhQCPMnZQSqRHS/0/EABBC5494AFF48709E3D64D65220EBB9DE71EBD4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EABBC5494AFF48709E3D64D65220EBB9DE71EBD4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 17:20:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:87:7e:5d:4f:d6:47:53:d8:e7:c7:01:94:e4:3f:32:be:d7:a6:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EABBC5494AFF48709E3D64D65220EBB9DE71EBD4
        Validity
            Not Before: Feb 12 00:09:37 2026 GMT
            Not After : Feb 11 00:14:37 2027 GMT
        Subject: CN=B94C6A3253C3B0920BA9A9A1BFC35C0138A4EDA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d5:f4:2b:fb:9e:ff:90:9a:8b:d5:f0:85:0f:
                    34:18:eb:9c:6b:2d:03:47:26:6e:4f:61:7f:4b:d9:
                    e1:2b:9c:a9:6b:52:af:27:f6:a5:ba:e5:42:0f:71:
                    db:69:5d:79:8d:2f:e1:35:44:ae:aa:e6:62:8d:0f:
                    39:5a:4d:0e:3d:77:32:2c:73:6d:87:ab:83:94:5e:
                    e9:8a:74:f7:09:c7:37:97:e7:dc:02:b0:0b:8a:ec:
                    53:58:3d:50:68:4d:c6:c0:22:1b:d7:0a:5a:c5:ff:
                    f7:cf:d4:2a:ad:ac:f5:95:45:af:99:05:58:52:78:
                    10:2d:d5:ad:ae:2b:74:d8:ed:ad:e8:67:b4:b0:15:
                    aa:b0:44:52:8a:fc:f7:5a:7b:e0:0c:0b:5b:94:90:
                    1a:73:da:58:3f:88:dd:56:da:d3:a7:95:13:98:fc:
                    38:b8:17:34:17:93:aa:47:80:45:d0:14:63:d7:42:
                    d4:ae:42:d5:18:d4:6a:96:4f:c5:7c:cb:e9:2a:15:
                    93:4d:ef:22:28:55:f0:36:12:37:32:70:33:b0:0b:
                    a7:54:28:1a:95:39:ac:a1:e5:3b:ac:46:7e:33:ad:
                    7f:2f:68:72:26:6d:47:51:64:36:e2:8e:75:73:f8:
                    07:c8:85:bf:12:75:16:08:a7:e6:ca:9a:f4:8b:31:
                    a2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:4C:6A:32:53:C3:B0:92:0B:A9:A9:A1:BF:C3:5C:01:38:A4:ED:A0
            X509v3 Authority Key Identifier:
                keyid:EA:BB:C5:49:4A:FF:48:70:9E:3D:64:D6:52:20:EB:B9:DE:71:EB:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EojyFvHCeNPxVLBwB7PTvC1BY9hxQWKhQCPMnZQSqRHS/0/EABBC5494AFF48709E3D64D65220EBB9DE71EBD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EABBC5494AFF48709E3D64D65220EBB9DE71EBD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EojyFvHCeNPxVLBwB7PTvC1BY9hxQWKhQCPMnZQSqRHS/0/3133382e3138362e3136382e302f32342d3234203d3e20323634343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:cb:ff:a5:8e:31:53:9d:99:4a:42:98:e9:72:67:5f:10:ff:
         bd:58:d8:87:96:bf:c9:8d:cb:07:fd:eb:b9:36:15:5d:48:e1:
         ac:09:9d:3e:c3:7f:e1:a9:89:d9:ba:ee:e7:56:9d:15:0a:81:
         fb:89:e0:1a:39:3b:2b:34:84:da:a6:23:07:41:d0:36:56:25:
         04:8c:d2:84:96:3b:ac:9c:43:70:bf:cc:4e:72:19:7c:66:ed:
         17:9c:16:3c:be:52:99:f4:16:14:b7:b3:e0:7a:92:90:bb:94:
         2b:23:8e:08:b1:20:ef:85:22:34:81:40:f0:c9:fd:01:fd:61:
         9a:37:65:88:01:9b:3a:ba:aa:7b:ae:f4:e1:c2:96:6c:a6:6c:
         fb:33:97:be:6a:97:a6:d1:17:a5:d5:f2:6b:52:b1:c9:c4:e1:
         34:24:fc:43:60:03:9f:33:21:c3:a3:84:35:ee:9c:92:ce:a1:
         fb:16:da:31:f7:a8:2b:53:b2:d2:41:0a:b2:81:ef:e0:2f:95:
         80:a5:ea:fe:ea:ad:85:20:69:12:61:5c:7b:9d:77:1d:21:d1:
         10:58:71:83:60:6d:c3:5f:a4:28:3c:c4:b9:f9:01:19:f6:99:
         f3:25:ef:67:84:b4:b2:48:91:d3:2b:0b:31:ff:d7:8e:94:d9:
         85:db:af:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:36:10 2026 by rpki-client