Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/3133382e39372e3130342e302f32322d3232203d3e203533313037.roa
File:                     3133382e39372e3130342e302f32322d3232203d3e203533313037.roa (raw, json)
Hash identifier:          OQ54HBdoM3/smdsuBA/Bq7jqrkA8y/qWRfu0J9nSKjA=
Subject key identifier:   71:A4:75:98:13:0B:79:6B:40:1B:56:8A:89:63:EB:27:01:DF:C8:E5
Certificate issuer:       /CN=7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1
Certificate serial:       1EF3327D3E37E5EC00A319BD52F585A5C320C548
Authority key identifier: 71:25:BE:DD:FE:C2:9C:0A:4C:F5:91:E5:EB:40:83:8B:FE:3C:7A:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/3133382e39372e3130342e302f32322d3232203d3e203533313037.roa
Signing time:             Thu 05 Feb 2026 01:24:23 +0000
ROA not before:           Thu 05 Feb 2026 01:19:23 +0000
ROA not after:            Thu 04 Feb 2027 01:24:23 +0000
asID:                     53107
IP address blocks:        138.97.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.crl
                          rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 03:53:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:f3:32:7d:3e:37:e5:ec:00:a3:19:bd:52:f5:85:a5:c3:20:c5:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1
        Validity
            Not Before: Feb  5 01:19:23 2026 GMT
            Not After : Feb  4 01:24:23 2027 GMT
        Subject: CN=71A47598130B796B401B568A8963EB2701DFC8E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d1:d2:79:a8:6f:0f:9d:23:f1:b2:44:de:e8:
                    31:23:f4:4f:37:a5:08:33:a9:64:c6:79:c0:9b:47:
                    ac:ad:91:26:9c:6a:34:6f:5f:9c:83:a7:5f:b3:f7:
                    8a:55:8e:86:ec:89:89:a6:c1:79:a9:94:21:54:eb:
                    5d:b3:15:13:64:04:d5:cc:48:25:e8:a1:e1:66:bc:
                    ca:01:b0:ee:cf:3d:7f:a1:ab:40:5d:2c:05:52:68:
                    44:b8:39:d8:2b:b9:0d:64:ed:a9:26:66:7f:f7:3d:
                    65:ee:ee:fa:e4:0b:79:81:1a:ca:a7:35:a9:8d:cb:
                    f9:5d:8f:21:53:cb:07:74:5c:66:13:26:fd:d6:48:
                    85:ef:4f:a5:3f:b4:36:54:7c:b4:67:71:ee:c5:31:
                    a6:cd:4f:62:d9:bf:09:c2:4e:46:53:50:3d:c2:d6:
                    6a:f4:94:10:b9:54:f5:71:83:20:40:70:5a:4d:6a:
                    24:f7:48:fd:26:16:a6:58:79:d4:4e:ab:5b:50:19:
                    f0:65:2d:1a:22:17:5b:a6:98:88:3c:6c:e4:16:1a:
                    39:7a:d8:eb:2c:ca:50:00:f0:fa:7b:b9:b6:48:7a:
                    44:26:61:8c:1d:e0:2c:6f:30:ea:e7:5e:c4:79:4c:
                    a6:33:c2:82:7e:a8:3e:c5:7b:fb:d2:b6:35:af:71:
                    e1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A4:75:98:13:0B:79:6B:40:1B:56:8A:89:63:EB:27:01:DF:C8:E5
            X509v3 Authority Key Identifier:
                keyid:71:25:BE:DD:FE:C2:9C:0A:4C:F5:91:E5:EB:40:83:8B:FE:3C:7A:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/3133382e39372e3130342e302f32322d3232203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:2c:da:cf:18:cb:c3:78:d1:18:00:30:43:77:8b:8c:d8:24:
         02:8e:40:bf:3a:00:62:98:9c:2d:73:9f:88:ea:7d:67:82:52:
         2c:5e:14:dd:1b:06:99:36:05:7f:2d:a9:05:8a:6a:50:ad:29:
         5d:c2:da:9f:32:89:30:d1:25:d1:f0:40:f8:be:3c:55:a4:86:
         b3:e4:b2:ae:d9:dc:c4:d9:fd:60:ef:39:d1:19:84:23:25:aa:
         86:8a:75:a7:76:ba:bc:0d:24:18:8f:0a:75:4c:85:56:b5:58:
         12:e3:a5:13:1e:f1:cc:ba:bf:2e:d8:d2:d6:95:be:14:10:85:
         81:54:d4:b8:40:df:98:18:c1:ff:70:09:bb:c7:c8:b8:5b:e4:
         e8:fe:d3:61:4e:08:2b:5c:6e:d4:c5:be:fa:d4:22:5f:9f:bc:
         7b:ea:58:e2:1d:85:83:c8:9f:ef:8e:fe:c5:9f:6a:65:59:db:
         42:0d:f6:97:a8:62:11:25:ff:e9:91:df:e4:57:96:df:c1:d2:
         e3:e8:a4:52:ee:45:5d:cb:85:c0:c5:8f:45:69:79:4f:43:3d:
         6a:fe:3c:2e:30:45:cf:73:62:fd:46:25:1e:d2:da:18:ce:f5:
         ae:bb:09:e2:50:b6:99:56:99:7f:cc:b4:54:83:48:4a:81:4f:
         d6:be:f8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:57:53 2026 by rpki-client