Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/1/3133382e39372e3230382e302f32322d3332203d3e20323634323031.roa
File:                     3133382e39372e3230382e302f32322d3332203d3e20323634323031.roa (raw, json)
Hash identifier:          sOyp7qf9n/FdCaSgwrusvhwbcxD4st8nS/5+WEwV+UU=
Subject key identifier:   71:6E:FD:64:84:2E:10:AF:E4:D9:FC:AA:FE:1F:01:C2:C7:89:D6:A8
Certificate issuer:       /CN=8E1E54DB030D4E86E9AF9B44C4588E78821D597A
Certificate serial:       65C4E054DCA13F69360AABAD890A814EDA9E4F05
Authority key identifier: 8E:1E:54:DB:03:0D:4E:86:E9:AF:9B:44:C4:58:8E:78:82:1D:59:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E1E54DB030D4E86E9AF9B44C4588E78821D597A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/1/3133382e39372e3230382e302f32322d3332203d3e20323634323031.roa
Signing time:             Wed 25 Feb 2026 04:00:00 +0000
ROA not before:           Wed 25 Feb 2026 03:55:00 +0000
ROA not after:            Thu 25 Feb 2027 04:00:00 +0000
asID:                     264201
IP address blocks:        138.97.208.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/1/8E1E54DB030D4E86E9AF9B44C4588E78821D597A.crl
                          rsync://rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/1/8E1E54DB030D4E86E9AF9B44C4588E78821D597A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E1E54DB030D4E86E9AF9B44C4588E78821D597A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:c4:e0:54:dc:a1:3f:69:36:0a:ab:ad:89:0a:81:4e:da:9e:4f:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1E54DB030D4E86E9AF9B44C4588E78821D597A
        Validity
            Not Before: Feb 25 03:55:00 2026 GMT
            Not After : Feb 25 04:00:00 2027 GMT
        Subject: CN=3082010A0282010100D15EA7BB8C98AB38830D6EF7E1B2413A2FE11E139DB6A5E496EC11AA04710C12020356F356DB7769918CA993BE21E449CCCB4090F65368EC3B418EB241AAC9DAFB375042D15BCF15B67F38D3568358EE9F4DD33EB2B98D8FEB4D811745A5559C5EDABEAAF3A1CA2DA76743F72E1F5A8ECAA9EE95C9C4ABC29D66DA5922FC811A27BBD443C8116FB6DAC67E2597EC8AA5861BDC6F5DE89C00B3759A613E4EB1BDB24E74C5DC14C50F80E711EEEC9EFFD6BA5550082310BA28894C5BEA6F11696544EB2152BCDA14CAC8C2F5F5F3BEC71A58EC0A976F090110D88D0D222CC631A795C8216C62974F7D360A0097E6DEBA89164512CBE9DEBE4B0AAD2FF55927A45D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5e:a7:bb:8c:98:ab:38:83:0d:6e:f7:e1:b2:
                    41:3a:2f:e1:1e:13:9d:b6:a5:e4:96:ec:11:aa:04:
                    71:0c:12:02:03:56:f3:56:db:77:69:91:8c:a9:93:
                    be:21:e4:49:cc:cb:40:90:f6:53:68:ec:3b:41:8e:
                    b2:41:aa:c9:da:fb:37:50:42:d1:5b:cf:15:b6:7f:
                    38:d3:56:83:58:ee:9f:4d:d3:3e:b2:b9:8d:8f:eb:
                    4d:81:17:45:a5:55:9c:5e:da:be:aa:f3:a1:ca:2d:
                    a7:67:43:f7:2e:1f:5a:8e:ca:a9:ee:95:c9:c4:ab:
                    c2:9d:66:da:59:22:fc:81:1a:27:bb:d4:43:c8:11:
                    6f:b6:da:c6:7e:25:97:ec:8a:a5:86:1b:dc:6f:5d:
                    e8:9c:00:b3:75:9a:61:3e:4e:b1:bd:b2:4e:74:c5:
                    dc:14:c5:0f:80:e7:11:ee:ec:9e:ff:d6:ba:55:50:
                    08:23:10:ba:28:89:4c:5b:ea:6f:11:69:65:44:eb:
                    21:52:bc:da:14:ca:c8:c2:f5:f5:f3:be:c7:1a:58:
                    ec:0a:97:6f:09:01:10:d8:8d:0d:22:2c:c6:31:a7:
                    95:c8:21:6c:62:97:4f:7d:36:0a:00:97:e6:de:ba:
                    89:16:45:12:cb:e9:de:be:4b:0a:ad:2f:f5:59:27:
                    a4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:6E:FD:64:84:2E:10:AF:E4:D9:FC:AA:FE:1F:01:C2:C7:89:D6:A8
            X509v3 Authority Key Identifier:
                keyid:8E:1E:54:DB:03:0D:4E:86:E9:AF:9B:44:C4:58:8E:78:82:1D:59:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/1/8E1E54DB030D4E86E9AF9B44C4588E78821D597A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E1E54DB030D4E86E9AF9B44C4588E78821D597A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/1/3133382e39372e3230382e302f32322d3332203d3e20323634323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:cf:0c:3f:ef:1e:52:e6:a0:b5:ef:76:35:37:11:8e:d1:1d:
         8a:b8:98:53:8b:aa:d2:38:70:a9:94:6e:40:a4:49:3b:e7:bc:
         df:8a:25:e0:b3:2c:ad:44:63:46:5f:60:d4:a2:dd:0b:6c:81:
         2b:18:a5:19:e8:00:ad:a8:33:79:00:5d:6d:57:67:5b:b8:01:
         75:dc:54:a0:3a:a8:f8:ce:29:08:93:5c:67:94:f3:3f:0e:c3:
         6d:eb:03:c8:05:99:77:75:a7:62:3d:d3:67:14:57:15:cc:4c:
         97:0c:94:47:f8:83:d9:6d:c3:2e:0b:de:1b:18:e1:a3:bd:26:
         cc:75:04:ee:4b:96:cc:eb:bf:fe:84:17:ca:5b:fe:a5:51:da:
         be:89:2e:a2:c3:ed:73:c0:bb:38:82:ee:b6:10:2c:50:8b:b2:
         47:ef:5e:15:95:84:45:0d:30:4c:b7:5b:ba:da:0e:c8:cc:51:
         8b:5f:b6:4e:d0:2d:f5:1b:d6:c0:09:d2:68:39:14:2d:23:36:
         7f:48:86:f4:42:d9:3e:a4:3b:65:92:86:ca:62:5c:0d:e3:60:
         c5:5a:c5:ec:cb:84:1e:40:af:97:89:8c:bb:aa:22:18:66:ae:
         c8:0a:54:63:a2:fe:a9:4a:00:e0:c6:64:d5:78:c8:15:79:88:
         92:48:f0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:13:21 2026 by rpki-client