Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/3133382e3132312e3231362e302f32322d3332203d3e20323633343234.roa
File:                     3133382e3132312e3231362e302f32322d3332203d3e20323633343234.roa (raw, json)
Hash identifier:          I1BErZdub5B9JkEuijpnkXOArIXRlPDq+e51nCX2ebU=
Subject key identifier:   26:E2:DA:28:DE:AF:79:BD:04:3E:00:AC:63:68:0A:12:EA:DC:E0:A0
Certificate issuer:       /CN=695A28FC133EB5408B9BA126D9FFE20884EDECD2
Certificate serial:       1FA062917494F9273C4A7B2C73B63BFD4E7EB124
Authority key identifier: 69:5A:28:FC:13:3E:B5:40:8B:9B:A1:26:D9:FF:E2:08:84:ED:EC:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/3133382e3132312e3231362e302f32322d3332203d3e20323633343234.roa
Signing time:             Wed 25 Feb 2026 12:25:17 +0000
ROA not before:           Wed 25 Feb 2026 12:20:17 +0000
ROA not after:            Wed 24 Feb 2027 12:25:17 +0000
asID:                     263424
IP address blocks:        138.121.216.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.crl
                          rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Mar 2026 04:07:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:a0:62:91:74:94:f9:27:3c:4a:7b:2c:73:b6:3b:fd:4e:7e:b1:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=695A28FC133EB5408B9BA126D9FFE20884EDECD2
        Validity
            Not Before: Feb 25 12:20:17 2026 GMT
            Not After : Feb 24 12:25:17 2027 GMT
        Subject: CN=26E2DA28DEAF79BD043E00AC63680A12EADCE0A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d4:12:b5:98:26:18:3d:0d:e9:21:2c:d0:94:
                    0e:98:2e:bd:48:f1:d0:01:69:c0:54:74:6a:31:23:
                    90:52:03:40:e0:1a:bf:86:31:f7:f6:8d:09:98:89:
                    5b:a6:e9:29:c8:da:b1:ed:fd:da:99:43:1f:80:7e:
                    bf:2b:58:49:5a:7b:9d:6e:93:b6:30:bb:fc:f4:68:
                    41:14:5c:c6:47:21:64:db:02:72:2b:ba:82:6b:53:
                    7f:ac:9a:25:fb:07:db:45:66:2e:2d:ec:4f:65:ba:
                    44:66:2a:63:26:74:e0:c9:27:01:0f:18:52:76:05:
                    ee:37:ca:ba:76:0b:40:e3:81:d8:91:7c:2d:2c:19:
                    3c:d7:3c:d0:bf:18:74:68:da:b6:ac:cb:b5:94:c0:
                    fe:70:fe:5d:56:fb:61:65:d4:bf:ac:65:6e:85:c5:
                    a6:a5:df:5b:b5:58:5d:da:63:34:8f:50:83:ac:e5:
                    6b:e0:79:60:5a:53:03:16:86:b1:98:17:2f:c0:ca:
                    e9:cb:84:68:26:44:23:3b:53:e2:df:b4:f5:c4:d9:
                    65:48:0d:50:40:da:b7:11:75:02:e2:e0:74:66:05:
                    23:00:9e:9d:3a:d8:30:a7:6b:c3:d9:e4:d1:37:bf:
                    7f:bd:21:1f:cb:6e:0e:31:a9:3b:b4:b3:d2:e2:4e:
                    73:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E2:DA:28:DE:AF:79:BD:04:3E:00:AC:63:68:0A:12:EA:DC:E0:A0
            X509v3 Authority Key Identifier:
                keyid:69:5A:28:FC:13:3E:B5:40:8B:9B:A1:26:D9:FF:E2:08:84:ED:EC:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/3133382e3132312e3231362e302f32322d3332203d3e20323633343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:57:97:2b:43:15:71:5c:8c:fd:c3:9c:88:81:84:50:ce:00:
         c6:be:4d:37:e9:99:21:66:21:70:d3:59:7b:3e:94:12:ce:03:
         10:a3:6d:8a:9b:3d:83:c0:87:18:17:d8:7a:a6:07:1b:09:ac:
         fd:d8:45:df:e7:45:ef:b5:83:e4:db:bb:ed:2a:c8:cd:d3:25:
         55:0a:da:f1:f9:a0:11:25:61:2d:0c:ab:00:51:8c:37:9c:f9:
         22:d0:80:0f:0e:95:84:4e:af:48:8a:96:6b:6a:3e:67:af:ae:
         5a:cb:85:f4:ef:c0:37:54:59:f1:94:39:ef:83:20:a3:ab:ce:
         73:14:ee:5b:09:5a:6f:a2:b5:91:52:c6:98:5a:c1:9a:a0:4e:
         69:b9:0a:67:06:d2:c5:a8:3b:2b:f1:7c:51:8c:9b:e6:a0:d0:
         57:97:d8:3d:90:8c:a6:b1:1b:56:a2:02:19:26:1e:01:32:4e:
         eb:a3:9d:ed:14:77:c8:21:25:0d:8f:06:c3:49:21:d9:18:d0:
         12:5f:4b:cb:d8:b3:82:cd:c8:0f:2a:b6:b1:5c:9b:63:5c:c1:
         49:a3:d5:d3:bb:87:76:7b:96:eb:fd:88:af:58:75:9b:33:40:
         50:87:7f:5b:e0:1e:7f:83:d9:02:28:20:51:72:f7:c8:10:7a:
         38:54:1f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:59:50 2026 by rpki-client