Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133362e302f32342d3234203d3e20323634353530.roa
File:                     3133382e302e3133362e302f32342d3234203d3e20323634353530.roa (raw, json)
Hash identifier:          aIllP6PcRD23AvSp2jg64kAWnLQk8QNN/M+jckWriiQ=
Subject key identifier:   F1:CC:46:E4:34:90:30:27:52:68:E3:43:8E:58:02:AD:2D:E5:2C:3E
Certificate issuer:       /CN=FB435E794D86CB9BAE800A6D289A88F771B5B583
Certificate serial:       4D900D3B4B6F9D8FE81F45921B89466FD69EEEDA
Authority key identifier: FB:43:5E:79:4D:86:CB:9B:AE:80:0A:6D:28:9A:88:F7:71:B5:B5:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB435E794D86CB9BAE800A6D289A88F771B5B583.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133362e302f32342d3234203d3e20323634353530.roa
Signing time:             Tue 25 Aug 2026 01:01:58 +0000
ROA not before:           Tue 25 Aug 2026 00:56:58 +0000
ROA not after:            Tue 24 Aug 2027 01:01:58 +0000
asID:                     264550
IP address blocks:        138.0.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/FB435E794D86CB9BAE800A6D289A88F771B5B583.crl
                          rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/FB435E794D86CB9BAE800A6D289A88F771B5B583.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB435E794D86CB9BAE800A6D289A88F771B5B583.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 Oct 2026 16:22:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:90:0d:3b:4b:6f:9d:8f:e8:1f:45:92:1b:89:46:6f:d6:9e:ee:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB435E794D86CB9BAE800A6D289A88F771B5B583
        Validity
            Not Before: Aug 25 00:56:58 2026 GMT
            Not After : Aug 24 01:01:58 2027 GMT
        Subject: CN=F1CC46E4349030275268E3438E5802AD2DE52C3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:73:ca:5b:a8:30:e9:55:af:1f:85:c0:98:c8:
                    4a:5f:35:f5:ed:5d:3b:12:16:5c:c4:4b:8e:a6:b3:
                    2b:2b:fe:6d:28:9e:ea:4a:8c:c8:70:66:62:43:0d:
                    42:0b:91:6a:cc:0d:be:b0:e3:b2:d4:84:1c:41:a8:
                    38:e8:6a:60:13:98:10:4a:6d:ab:ff:9f:67:ee:fd:
                    da:7e:71:1c:3e:cb:93:c6:21:aa:35:39:72:06:df:
                    7c:34:66:b3:6b:f5:47:e1:0b:6a:72:c3:fe:05:dc:
                    f2:e3:55:4b:9f:3d:c3:e3:ed:a2:b3:72:a7:0a:eb:
                    fa:d9:5f:fc:73:42:02:9a:ca:08:15:ab:17:9c:c1:
                    63:d3:c0:40:b7:5d:4f:4c:a4:47:e9:ba:a1:b6:a0:
                    9f:0c:c3:8e:8d:c4:ab:5c:26:45:e2:58:1e:00:df:
                    43:39:7e:c2:85:00:aa:80:39:ce:df:6c:2f:c4:87:
                    00:b0:15:7f:15:a7:6e:80:3a:a6:ec:6a:84:b4:f6:
                    c8:80:06:88:60:35:ff:e5:40:47:f3:98:22:9c:8c:
                    c4:67:70:f8:b4:09:f2:bb:5a:bf:86:80:1b:8a:df:
                    ff:c3:40:5e:37:1e:27:74:ef:ad:f3:f0:b6:72:a3:
                    49:b9:7b:f3:e6:9d:fe:9d:ba:58:12:7f:03:9c:c2:
                    16:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:CC:46:E4:34:90:30:27:52:68:E3:43:8E:58:02:AD:2D:E5:2C:3E
            X509v3 Authority Key Identifier:
                keyid:FB:43:5E:79:4D:86:CB:9B:AE:80:0A:6D:28:9A:88:F7:71:B5:B5:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/FB435E794D86CB9BAE800A6D289A88F771B5B583.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB435E794D86CB9BAE800A6D289A88F771B5B583.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133362e302f32342d3234203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:85:1a:69:20:24:32:6d:be:7c:a9:95:1d:e5:1c:3c:6b:c7:
         43:af:0d:79:83:bc:56:33:bb:d8:a2:32:8e:78:a8:2c:ab:84:
         37:d9:17:ef:10:c2:58:23:85:c1:8d:6f:07:01:d2:40:b4:5f:
         3f:b0:2a:e3:ab:f1:57:06:7d:bd:92:12:a1:42:73:2f:a7:50:
         09:82:13:c8:58:f3:c7:fd:b6:ca:0b:00:68:24:23:8e:60:73:
         15:2f:05:5c:82:e5:ce:9e:46:0d:a3:0a:05:68:b9:f8:6b:78:
         36:1e:a6:b5:2b:e5:15:e1:d5:4c:dc:61:af:33:93:62:d8:d1:
         46:91:38:82:3d:7e:3b:8e:08:3c:60:9a:36:d7:6d:28:e9:98:
         3c:0d:0e:cf:22:e1:bc:61:c5:7f:f2:57:12:e6:c6:8d:f9:28:
         99:c6:df:71:a3:02:d5:1c:89:5e:bb:00:f7:78:d8:95:1f:93:
         d5:8f:25:60:cb:f0:d2:13:61:20:72:80:f9:bf:66:40:b8:93:
         36:38:4c:62:89:03:e9:1e:b2:b8:c5:26:bb:b3:52:df:b3:90:
         f4:47:d4:1d:d3:75:03:37:d0:27:5d:54:61:03:cd:9a:2f:04:
         99:36:66:d6:f2:5f:2e:82:0a:cc:e5:14:96:a4:86:2b:e8:b8:
         86:c9:51:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:39:21 2026 by rpki-client