Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3133382e3230342e33322e302f32322d3234203d3e203532353733.roa
File:                     3133382e3230342e33322e302f32322d3234203d3e203532353733.roa (raw, json)
Hash identifier:          Q67tuouv2+wKzaP3mfTKi7fJX1esT4VtF1LnJfVqvMI=
Subject key identifier:   38:63:85:D2:B0:81:51:42:22:EF:71:AA:C1:5F:80:33:5D:CC:0F:96
Certificate issuer:       /CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
Certificate serial:       3BB9524F729F15F0B3A0C87E940D7BD7DC4425DB
Authority key identifier: D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3133382e3230342e33322e302f32322d3234203d3e203532353733.roa
Signing time:             Thu 19 Feb 2026 14:28:02 +0000
ROA not before:           Thu 19 Feb 2026 14:23:02 +0000
ROA not after:            Thu 18 Feb 2027 14:28:02 +0000
asID:                     52573
IP address blocks:        138.204.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl
                          rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 22:55:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:b9:52:4f:72:9f:15:f0:b3:a0:c8:7e:94:0d:7b:d7:dc:44:25:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
        Validity
            Not Before: Feb 19 14:23:02 2026 GMT
            Not After : Feb 18 14:28:02 2027 GMT
        Subject: CN=386385D2B081514222EF71AAC15F80335DCC0F96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:26:56:6b:64:bf:bd:84:9e:da:ed:67:59:e6:
                    8f:7d:04:17:ea:ac:cc:f0:48:9e:72:7d:f6:47:6b:
                    ce:07:6e:95:e4:95:a7:57:bd:80:8f:97:6f:d0:46:
                    6e:43:0f:de:5e:74:c6:d4:3c:a5:e7:04:70:b9:e2:
                    64:11:ea:e0:b8:2d:11:23:36:d6:26:79:a8:81:c8:
                    3a:9d:24:4b:62:54:cd:b7:84:1a:1d:49:dc:61:c3:
                    37:da:3c:79:95:1b:02:59:85:4c:2b:53:fc:63:ba:
                    1e:b4:c4:21:be:2a:8c:69:34:63:1c:4b:80:d1:00:
                    c5:58:aa:2c:81:b4:96:32:f7:ea:88:00:6d:ba:b2:
                    7e:fc:be:d4:91:fd:70:d4:8e:6f:68:dd:8a:6e:24:
                    6b:36:8a:8f:67:77:ff:84:46:4f:6e:b2:32:88:9b:
                    bf:a7:10:6b:d7:e2:ce:20:69:cb:fc:43:5a:48:ac:
                    d0:72:2b:8a:88:43:f5:5b:0f:3b:93:6d:87:11:73:
                    5b:e8:f0:cb:d0:0a:5c:a4:94:5b:23:02:87:a5:36:
                    1b:fc:4c:83:88:b0:c6:b4:7a:5c:82:0d:3f:3c:72:
                    74:c5:a9:98:cd:ba:ad:10:ab:05:1e:b2:84:ca:dc:
                    81:2d:87:ca:4b:42:2a:78:0b:f7:26:94:e9:8a:24:
                    5c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:63:85:D2:B0:81:51:42:22:EF:71:AA:C1:5F:80:33:5D:CC:0F:96
            X509v3 Authority Key Identifier:
                keyid:D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3133382e3230342e33322e302f32322d3234203d3e203532353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:a8:9c:83:e2:5e:66:24:1e:4f:f8:69:f0:e1:66:d5:a7:6b:
         0b:3c:41:4c:85:01:19:0a:ba:49:b8:20:f1:2a:10:a0:c8:42:
         23:05:e7:eb:d5:78:d2:c1:6c:ee:5a:0a:71:a4:6e:08:da:74:
         cd:88:32:cf:bf:f9:e2:57:e1:c6:d9:28:8e:ce:b5:91:b6:68:
         fd:e8:4f:bd:df:2f:c3:93:82:e8:95:f5:5f:f0:79:4b:91:f7:
         72:38:58:be:74:b8:b1:21:fd:89:cd:1a:60:35:76:5f:c5:44:
         d2:7a:0a:48:c7:4c:34:2e:e4:0f:23:ed:b5:e3:40:81:38:a8:
         8e:21:d4:26:b0:51:2a:82:af:4d:e6:32:14:05:32:ff:b3:cf:
         e0:7e:25:21:f9:0a:17:6c:aa:89:05:6e:c2:df:a8:14:e9:c2:
         5d:8f:40:40:38:8a:af:2c:f3:90:10:c8:95:b1:62:c9:2b:1f:
         27:c4:05:12:3b:62:6d:44:96:6f:0c:f2:f5:43:fc:3e:c7:3a:
         c4:b5:27:8f:97:26:c2:3a:78:bd:73:73:37:5d:49:d4:6e:2b:
         a9:ce:67:d1:e6:14:d7:a0:cf:4b:19:e3:08:da:fd:c7:1e:ab:
         e9:40:bd:f5:94:a0:56:d2:79:a7:64:b2:96:50:df:56:dc:99:
         18:00:48:07
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUO7lST3KfFfCzoMh+lA1719xEJdswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDY4NkYyRDFDOEQ2RjBFMTgyMDBEN0JBM0I0RTEzOEE4
NjdFMjVDNzAeFw0yNjAyMTkxNDIzMDJaFw0yNzAyMTgxNDI4MDJaMDMxMTAvBgNV
BAMTKDM4NjM4NUQyQjA4MTUxNDIyMkVGNzFBQUMxNUY4MDMzNURDQzBGOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqJlZrZL+9hJ7a7WdZ5o99BBfq
rMzwSJ5yffZHa84HbpXkladXvYCPl2/QRm5DD95edMbUPKXnBHC54mQR6uC4LREj
NtYmeaiByDqdJEtiVM23hBodSdxhwzfaPHmVGwJZhUwrU/xjuh60xCG+KoxpNGMc
S4DRAMVYqiyBtJYy9+qIAG26sn78vtSR/XDUjm9o3YpuJGs2io9nd/+ERk9usjKI
m7+nEGvX4s4gacv8Q1pIrNByK4qIQ/VbDzuTbYcRc1vo8MvQClyklFsjAoelNhv8
TIOIsMa0elyCDT88cnTFqZjNuq0QqwUesoTK3IEth8pLQip4C/cmlOmKJFyZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUOGOF0rCBUUIi73GqwV+AM13MD5YwHwYDVR0j
BBgwFoAU1oby0cjW8OGCANe6O04TioZ+JccwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkpmeWJDaDRQMWZhaHZpUUNQOE5MSDloaDRxU0t1NEdqQkNWR2U4WnZF
ZVovMC9ENjg2RjJEMUM4RDZGMEUxODIwMEQ3QkEzQjRFMTM4QTg2N0UyNUM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2ODZGMkQxQzhENkYwRTE4
MjAwRDdCQTNCNEUxMzhBODY3RTI1QzcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJKZnliQ2g0UDFmYWh2aVFDUDhOTEg5aGg0cVNLdTRHakJDVkdlOFp2RWVaLzAv
MzEzMzM4MmUzMjMwMzQyZTMzMzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMy
MzUzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCiswgMA0GCSqGSIb3DQEBCwUAA4IBAQCJqJyD4l5m
JB5P+Gnw4WbVp2sLPEFMhQEZCrpJuCDxKhCgyEIjBefr1XjSwWzuWgpxpG4I2nTN
iDLPv/niV+HG2SiOzrWRtmj96E+93y/Dk4LolfVf8HlLkfdyOFi+dLixIf2JzRpg
NXZfxUTSegpIx0w0LuQPI+2140CBOKiOIdQmsFEqgq9N5jIUBTL/s8/gfiUh+QoX
bKqJBW7C36gU6cJdj0BAOIqvLPOQEMiVsWLJKx8nxAUSO2JtRJZvDPL1Q/w+xzrE
tSePlybCOni9c3M3XUnUbiupzmfR5hTXoM9LGeMI2v3HHqvpQL31lKBW0nmnZLKW
UN9W3JkYAEgH
-----END CERTIFICATE-----
Generated at Tue Mar 3 05:44:05 2026 by rpki-client