Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3133382e3132312e35322e302f32322d3332203d3e20323634323831.roa
File:                     3133382e3132312e35322e302f32322d3332203d3e20323634323831.roa (raw, json)
Hash identifier:          bQzG0gy/9YZUHzP5yx9zRz9TIPAdWjzjEQmKyk88Tk4=
Subject key identifier:   50:39:B7:B2:19:1F:8C:AA:04:39:22:E1:29:9C:A7:3E:77:E4:3C:AE
Certificate issuer:       /CN=C6311968EBC105398794FB43DCF25FAA7999A36E
Certificate serial:       0421BFC57E464242C44A7A5A26C9BF6F55175417
Authority key identifier: C6:31:19:68:EB:C1:05:39:87:94:FB:43:DC:F2:5F:AA:79:99:A3:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6311968EBC105398794FB43DCF25FAA7999A36E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3133382e3132312e35322e302f32322d3332203d3e20323634323831.roa
Signing time:             Thu 19 Feb 2026 12:10:20 +0000
ROA not before:           Thu 19 Feb 2026 12:05:20 +0000
ROA not after:            Thu 18 Feb 2027 12:10:20 +0000
asID:                     264281
IP address blocks:        138.121.52.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/C6311968EBC105398794FB43DCF25FAA7999A36E.crl
                          rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/C6311968EBC105398794FB43DCF25FAA7999A36E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6311968EBC105398794FB43DCF25FAA7999A36E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 15:40:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:21:bf:c5:7e:46:42:42:c4:4a:7a:5a:26:c9:bf:6f:55:17:54:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6311968EBC105398794FB43DCF25FAA7999A36E
        Validity
            Not Before: Feb 19 12:05:20 2026 GMT
            Not After : Feb 18 12:10:20 2027 GMT
        Subject: CN=5039B7B2191F8CAA043922E1299CA73E77E43CAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:79:86:5a:36:cd:5d:90:5f:7d:a6:bb:94:dc:
                    27:a5:b4:e0:81:79:8c:74:6e:a4:5b:d8:e1:9d:f6:
                    20:ce:5c:d3:5d:f6:7b:70:be:f1:d1:66:1d:70:32:
                    da:85:21:da:19:2c:f3:ba:98:02:df:ea:f0:df:eb:
                    ad:bf:f6:5a:6d:cb:ea:c7:68:18:bd:0e:0d:bc:af:
                    bc:af:3f:30:e2:81:da:bd:54:48:97:aa:e1:c2:03:
                    bc:2f:3b:f6:10:50:2b:21:cb:86:09:7c:ea:56:f3:
                    eb:8a:f0:06:fb:f5:31:da:e4:20:1e:18:67:9a:b2:
                    cb:0a:c1:1e:81:a1:45:00:c2:f5:8a:03:25:c0:e2:
                    ed:28:70:6a:7c:1a:bb:13:72:f5:7b:36:28:9a:f4:
                    ba:86:93:b2:be:0d:e7:31:37:2f:33:0b:1e:4e:43:
                    95:07:0f:7d:74:2b:9d:2a:97:7e:bc:b3:c8:a8:50:
                    da:71:98:b6:8d:ae:f3:c2:c7:f9:8e:25:ce:33:5d:
                    f1:50:dd:68:78:e2:7f:82:f7:bb:ee:44:d1:be:90:
                    f0:7c:4e:23:5f:9a:aa:ee:bc:fe:e5:25:16:5a:db:
                    9f:73:cd:7e:9c:bd:4a:98:cd:fb:27:1d:07:69:65:
                    57:b5:e3:a8:2a:70:44:61:ce:41:5b:53:02:d1:02:
                    1b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:39:B7:B2:19:1F:8C:AA:04:39:22:E1:29:9C:A7:3E:77:E4:3C:AE
            X509v3 Authority Key Identifier:
                keyid:C6:31:19:68:EB:C1:05:39:87:94:FB:43:DC:F2:5F:AA:79:99:A3:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/C6311968EBC105398794FB43DCF25FAA7999A36E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6311968EBC105398794FB43DCF25FAA7999A36E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3133382e3132312e35322e302f32322d3332203d3e20323634323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c5:ac:ce:7b:51:8e:25:db:07:a1:cd:77:6d:82:94:94:4e:bd:
         f0:59:95:07:a8:21:7a:05:d8:c8:df:2b:c5:ca:4b:68:7f:17:
         b9:99:03:30:ae:fb:c6:13:69:d5:ac:5a:a9:b7:2c:49:cd:29:
         d9:25:42:7a:02:84:6d:16:bc:c8:82:2c:8c:47:1b:db:87:a8:
         e0:6a:83:45:b0:6b:8c:94:6a:ab:39:17:92:36:25:d4:0d:b1:
         2d:31:04:cf:a4:4e:97:d8:4d:78:17:f7:2d:b6:43:08:e1:95:
         05:5c:ab:37:e2:c5:4c:17:13:c3:d3:0c:c3:ec:00:05:53:6b:
         f4:94:26:7b:1e:e6:42:01:27:fd:c5:bf:e6:07:b6:14:63:23:
         76:31:01:89:4d:63:7f:99:20:ad:21:52:c4:74:d0:5d:3a:9e:
         96:e0:26:72:81:be:ec:75:b8:7e:c8:86:23:a9:17:77:ea:3e:
         5d:0f:05:17:4b:86:e7:e9:6e:0c:c2:d1:53:5d:1a:2b:c5:a5:
         13:d7:c5:f7:29:d0:c2:d4:d4:e0:df:46:57:4d:26:c8:d3:d9:
         1a:98:32:84:99:ac:38:d4:c1:57:b5:db:83:b4:c2:75:9b:56:
         00:46:44:20:24:be:cd:c6:0b:9f:51:f2:99:7e:bf:1a:d9:44:
         28:17:32:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:02:05 2026 by rpki-client