Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3133382e3132312e3234392e302f32342d3234203d3e20323632333933.roa
File:                     3133382e3132312e3234392e302f32342d3234203d3e20323632333933.roa (raw, json)
Hash identifier:          7LslvY2bLSA0JlkeIFuqVrOfMfgyxLIUsHPLWA4Kr9s=
Subject key identifier:   51:95:E6:FA:24:B4:07:B9:23:53:64:97:47:1F:1D:D5:A0:82:73:AF
Certificate issuer:       /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Certificate serial:       6AF9EFB00A074BB0BF668C3A8B7DF8FF08BBB8CA
Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3133382e3132312e3234392e302f32342d3234203d3e20323632333933.roa
Signing time:             Sat 28 Feb 2026 15:57:04 +0000
ROA not before:           Sat 28 Feb 2026 15:52:04 +0000
ROA not after:            Sat 27 Feb 2027 15:57:04 +0000
asID:                     262393
IP address blocks:        138.121.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl
                          rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Mar 2026 12:32:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:f9:ef:b0:0a:07:4b:b0:bf:66:8c:3a:8b:7d:f8:ff:08:bb:b8:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
        Validity
            Not Before: Feb 28 15:52:04 2026 GMT
            Not After : Feb 27 15:57:04 2027 GMT
        Subject: CN=5195E6FA24B407B923536497471F1DD5A08273AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:55:89:f1:61:6b:be:01:f9:c5:6b:66:1b:94:
                    31:8d:c2:36:cd:94:b7:e0:f7:b4:73:4d:58:d4:2e:
                    ac:57:e7:6c:3c:db:55:74:64:a0:55:9c:c1:1a:a2:
                    d8:f7:9e:e0:aa:72:b4:b2:17:69:d9:18:19:fb:0a:
                    c3:8a:ef:89:69:4c:90:59:5b:6c:35:52:e2:15:0b:
                    ba:54:e7:ce:88:50:20:ad:aa:be:c9:6f:90:65:6b:
                    a0:29:bf:e2:63:3a:44:bd:f8:5c:e8:5d:dc:9a:54:
                    36:75:35:a8:89:59:8a:2a:e1:ac:d4:e1:33:cf:46:
                    9d:f5:d9:d5:ae:c7:16:e8:19:c4:9b:81:b9:f4:ec:
                    17:a6:02:49:18:c0:f2:e4:0d:db:64:e1:ee:37:86:
                    88:60:84:e6:fb:f0:7d:c1:a7:11:74:21:20:cf:e0:
                    ee:bb:a6:0e:12:3c:fe:d0:a3:a7:00:c2:4c:9d:d9:
                    5d:57:dc:03:f1:53:c7:1f:24:ee:71:7d:32:de:ba:
                    dd:25:98:d3:44:51:37:01:1f:6f:eb:01:2f:b7:13:
                    a7:58:6e:91:f8:3c:ad:6a:53:c1:7b:da:aa:db:c1:
                    0f:d8:8e:1a:94:ac:d7:45:22:3f:f0:42:db:31:9c:
                    74:01:fd:bb:30:30:09:bb:49:7a:b9:40:42:28:7b:
                    61:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:95:E6:FA:24:B4:07:B9:23:53:64:97:47:1F:1D:D5:A0:82:73:AF
            X509v3 Authority Key Identifier:
                keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3133382e3132312e3234392e302f32342d3234203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:a9:2c:b9:68:d5:e3:f8:a9:9e:68:71:04:d5:d6:1c:3d:a4:
         29:87:c5:3d:db:79:b7:8a:a2:6a:aa:d3:76:12:ce:02:63:67:
         a8:9d:c1:4f:66:d2:24:eb:ac:c1:06:4f:39:96:30:a6:bd:2d:
         4c:12:cd:9d:48:31:48:7f:a8:83:93:dd:3a:70:16:54:52:1e:
         3f:9b:30:15:3b:ed:dc:51:70:7f:98:46:83:68:1c:c8:99:e4:
         76:e7:69:d3:44:10:13:4c:18:2f:40:28:51:a8:73:93:84:8a:
         9c:51:a0:f1:c6:61:8b:76:c8:18:49:c2:d3:02:53:3d:7d:53:
         c3:4e:f2:25:6f:f9:ac:22:91:a5:0a:7e:55:ff:e4:b8:17:17:
         ce:2c:35:86:e7:a1:08:3f:9e:7b:45:59:d2:90:77:60:ff:22:
         0c:31:74:a0:c4:03:36:b6:b1:83:34:fd:70:45:dc:e4:c6:49:
         4f:80:32:85:e7:7d:a4:38:3d:fa:16:4e:e8:a5:c4:02:7c:cf:
         46:6b:30:c1:76:1e:80:1f:f6:3f:42:ed:f6:e1:7b:c0:b4:05:
         50:2e:80:a3:94:4d:53:44:eb:04:91:f0:90:fb:44:25:0a:56:
         a7:17:b7:5d:c7:a9:06:38:b8:12:4b:26:e7:34:09:d4:15:16:
         c0:e6:56:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:56:31 2026 by rpki-client