Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FB8u8Lz3WxiB9RCAU9qFL1JS3DBbq89VmiNA1HT9rgZj/0/3133382e3230342e3139322e302f32322d3234203d3e20323633393038.roa
File:                     3133382e3230342e3139322e302f32322d3234203d3e20323633393038.roa (raw, json)
Hash identifier:          yEgpOggHxGcGE66Rk9jrjQcq5P+TC8VdvAnFT9W7UzY=
Subject key identifier:   0E:61:BD:C7:14:21:C6:9C:0D:1B:C9:EF:F5:60:CA:20:F5:E6:B5:3C
Certificate issuer:       /CN=A49D684E481F275E0AB2351F7764731A491EEB70
Certificate serial:       4124A696D1DE05D34594CD74DADA0930AC46892D
Authority key identifier: A4:9D:68:4E:48:1F:27:5E:0A:B2:35:1F:77:64:73:1A:49:1E:EB:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A49D684E481F275E0AB2351F7764731A491EEB70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FB8u8Lz3WxiB9RCAU9qFL1JS3DBbq89VmiNA1HT9rgZj/0/3133382e3230342e3139322e302f32322d3234203d3e20323633393038.roa
Signing time:             Tue 03 Feb 2026 18:11:53 +0000
ROA not before:           Tue 03 Feb 2026 18:06:53 +0000
ROA not after:            Tue 02 Feb 2027 18:11:53 +0000
asID:                     263908
IP address blocks:        138.204.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FB8u8Lz3WxiB9RCAU9qFL1JS3DBbq89VmiNA1HT9rgZj/0/A49D684E481F275E0AB2351F7764731A491EEB70.crl
                          rsync://rpki-repo.registro.br/repo/FB8u8Lz3WxiB9RCAU9qFL1JS3DBbq89VmiNA1HT9rgZj/0/A49D684E481F275E0AB2351F7764731A491EEB70.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A49D684E481F275E0AB2351F7764731A491EEB70.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 13:28:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:24:a6:96:d1:de:05:d3:45:94:cd:74:da:da:09:30:ac:46:89:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A49D684E481F275E0AB2351F7764731A491EEB70
        Validity
            Not Before: Feb  3 18:06:53 2026 GMT
            Not After : Feb  2 18:11:53 2027 GMT
        Subject: CN=0E61BDC71421C69C0D1BC9EFF560CA20F5E6B53C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:07:25:1b:b7:17:c4:c5:f9:3d:b3:62:49:98:
                    66:1d:84:d6:2d:47:86:d2:46:07:0e:df:43:ef:97:
                    2f:aa:c7:cb:2f:a3:3b:2c:e2:09:d0:cd:59:2b:6d:
                    54:15:f0:91:4f:0d:72:24:95:93:e8:9a:ca:a2:01:
                    bf:54:0a:2e:0b:09:11:3f:58:08:61:06:28:f5:fd:
                    30:56:9e:40:5b:5d:ba:20:fa:83:ad:5c:c3:94:0c:
                    f6:1c:94:28:c3:b4:82:29:4a:19:d3:52:a8:2b:dc:
                    ae:88:39:bd:e4:c5:c3:57:91:84:ba:1e:c0:66:25:
                    fa:93:a7:88:e7:60:c9:4a:d5:37:a3:49:ae:63:92:
                    55:57:82:d5:c3:1d:92:93:f9:41:a5:5d:71:64:36:
                    5e:f5:34:eb:fa:ec:95:a5:bd:61:1f:2b:1c:52:81:
                    7a:aa:eb:6d:13:39:8e:77:49:8a:8e:2b:9b:b5:46:
                    5c:00:08:46:87:ac:86:5c:de:73:64:63:2e:47:0d:
                    49:01:b1:6e:83:33:0b:6d:e0:8b:04:ee:37:6a:c9:
                    6b:7c:f6:13:32:71:72:39:34:a2:e0:da:f1:61:dd:
                    4e:6f:e2:a0:b8:b5:87:73:49:f2:f8:aa:7d:7d:6d:
                    cc:41:c2:ae:31:7b:c9:e6:2b:51:fa:07:16:6e:81:
                    3f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:61:BD:C7:14:21:C6:9C:0D:1B:C9:EF:F5:60:CA:20:F5:E6:B5:3C
            X509v3 Authority Key Identifier:
                keyid:A4:9D:68:4E:48:1F:27:5E:0A:B2:35:1F:77:64:73:1A:49:1E:EB:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FB8u8Lz3WxiB9RCAU9qFL1JS3DBbq89VmiNA1HT9rgZj/0/A49D684E481F275E0AB2351F7764731A491EEB70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A49D684E481F275E0AB2351F7764731A491EEB70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FB8u8Lz3WxiB9RCAU9qFL1JS3DBbq89VmiNA1HT9rgZj/0/3133382e3230342e3139322e302f32322d3234203d3e20323633393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:13:98:3a:c5:55:7a:dc:e1:29:9e:64:8a:89:60:f4:8a:22:
         2e:e9:6a:04:75:ee:37:93:1c:a9:55:57:8c:d5:22:ed:30:e1:
         a3:78:94:19:cb:27:6e:00:60:31:10:e4:5c:71:40:8f:d8:e0:
         d2:9f:21:df:e2:e0:2a:43:91:68:c2:d1:bd:ae:0b:1d:1a:8e:
         fd:c2:f7:8f:67:bd:04:28:2b:b9:ce:c6:2f:21:6c:7f:af:00:
         09:12:93:26:c3:8a:92:96:a1:7c:7e:d8:e3:a0:47:e3:fe:5d:
         ef:37:cb:4e:c6:f8:1d:18:69:b0:0b:e5:c2:b4:79:07:a6:1b:
         cb:84:3b:3c:f6:4a:be:47:52:28:76:6a:52:e0:f2:21:97:f8:
         e6:f8:e5:fe:ac:c8:7b:77:9f:cf:d2:3a:a8:24:c4:ff:ae:8f:
         54:84:ec:f8:f8:61:f9:9c:65:bc:5e:bb:76:31:11:d0:2a:42:
         8b:23:d5:9e:1b:ea:ec:83:df:aa:48:21:b5:2a:30:ab:1d:ff:
         c7:43:42:7e:67:74:f2:df:e1:9d:4a:06:34:2e:cb:a2:65:39:
         c0:64:25:87:7b:34:92:15:87:9e:30:94:0a:2d:f1:8f:da:53:
         50:c4:3d:d0:2b:76:94:4e:28:94:83:a7:1a:3b:03:93:bf:d5:
         0d:f8:f9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:46:30 2026 by rpki-client