Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232302e302f32342d3234203d3e203533313533.roa
File:                     3133382e3230342e3232302e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          EESzZ5M13utS51D81NuGi2Q342WPDpT4xegUEaDqvPw=
Subject key identifier:   28:79:97:24:54:85:2E:56:B2:C1:99:64:D4:A9:F4:D1:36:9D:BE:53
Certificate issuer:       /CN=887ECD441DC8308A3C5570D1D65DF4302780ED08
Certificate serial:       2AB708A35DA964243A5129162DCB052DC7EDB4F3
Authority key identifier: 88:7E:CD:44:1D:C8:30:8A:3C:55:70:D1:D6:5D:F4:30:27:80:ED:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/887ECD441DC8308A3C5570D1D65DF4302780ED08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232302e302f32342d3234203d3e203533313533.roa
Signing time:             Mon 25 May 2026 14:12:20 +0000
ROA not before:           Mon 25 May 2026 14:07:20 +0000
ROA not after:            Mon 24 May 2027 14:12:20 +0000
asID:                     53153
IP address blocks:        138.204.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/887ECD441DC8308A3C5570D1D65DF4302780ED08.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/887ECD441DC8308A3C5570D1D65DF4302780ED08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/887ECD441DC8308A3C5570D1D65DF4302780ED08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:25:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:b7:08:a3:5d:a9:64:24:3a:51:29:16:2d:cb:05:2d:c7:ed:b4:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=887ECD441DC8308A3C5570D1D65DF4302780ED08
        Validity
            Not Before: May 25 14:07:20 2026 GMT
            Not After : May 24 14:12:20 2027 GMT
        Subject: CN=2879972454852E56B2C19964D4A9F4D1369DBE53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:36:c7:68:1b:10:35:ee:57:2e:94:6a:02:7c:
                    6d:f0:36:8a:dd:d4:6b:d7:96:75:4f:79:35:38:4c:
                    57:87:94:09:25:d2:26:b8:78:ec:54:c1:dd:ea:0d:
                    dd:4e:95:4c:e4:e6:4d:f9:3d:16:80:48:22:fc:d5:
                    1c:0b:a7:9f:8a:23:27:a0:8c:5d:09:7b:3f:89:b0:
                    02:b6:03:93:f5:ee:02:19:5b:4d:3a:2f:53:26:56:
                    02:a0:05:d0:da:62:fc:dd:a2:bf:64:a9:ab:54:b8:
                    67:b9:80:47:b1:76:29:b2:7d:66:d1:f7:32:99:6a:
                    e9:3b:5d:a1:dd:65:bd:a2:8d:06:e2:7a:64:f8:e6:
                    bb:08:0a:1a:08:bb:ea:bf:a7:c9:c8:2c:1b:22:c5:
                    de:31:fb:e2:b5:ea:7b:80:ca:c8:da:f6:48:99:e3:
                    fe:0b:96:29:3b:7d:96:50:cc:a3:19:ac:5d:ab:2d:
                    d8:a9:2d:ee:2f:af:7f:f7:7f:db:fa:92:29:a3:56:
                    2c:74:5e:b1:e1:cc:17:20:ec:88:c0:0e:d5:b0:0c:
                    e6:b5:b0:4a:9c:e8:bf:0a:96:c5:97:76:bc:08:a0:
                    0e:5f:4d:4a:e7:de:ef:44:04:f8:1f:1f:1a:46:81:
                    fe:a0:c6:84:27:da:0b:d7:eb:d0:f6:3b:60:eb:fc:
                    a6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:79:97:24:54:85:2E:56:B2:C1:99:64:D4:A9:F4:D1:36:9D:BE:53
            X509v3 Authority Key Identifier:
                keyid:88:7E:CD:44:1D:C8:30:8A:3C:55:70:D1:D6:5D:F4:30:27:80:ED:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/887ECD441DC8308A3C5570D1D65DF4302780ED08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/887ECD441DC8308A3C5570D1D65DF4302780ED08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232302e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:fc:a3:c0:3f:7a:32:36:1a:9e:df:e8:df:86:69:bd:66:04:
         25:70:ca:33:70:99:e7:4d:72:40:c6:d7:65:a9:e6:21:73:ab:
         56:31:ab:44:ac:6e:83:9d:d3:15:6e:2e:b7:2a:27:a9:32:5b:
         b7:1d:c3:12:d6:1a:bb:63:49:6b:3e:ae:d5:e5:5c:d7:48:9c:
         37:d0:e8:4d:cc:03:1d:61:a3:70:fb:af:ed:63:57:4e:fa:43:
         98:ac:4b:e6:6a:c0:66:4a:25:83:ab:55:04:09:1e:15:f6:02:
         65:4d:1f:4b:15:21:f9:50:bc:58:0a:4a:4c:4c:ba:c2:90:38:
         13:8b:eb:47:e8:f0:56:40:70:72:c1:9f:7c:82:dd:ad:0e:0b:
         8e:60:4d:d6:7a:9d:aa:95:23:0a:4f:cd:ff:db:b6:c4:cc:5a:
         4d:cb:a9:8a:e5:83:2e:1d:1c:3a:17:63:71:ac:af:7a:2e:0f:
         a0:13:99:f5:36:ea:82:03:9d:fc:1c:0c:d1:bf:ff:7a:97:7f:
         9e:5f:62:5e:75:b6:6b:c9:9a:dd:b5:e5:7b:f3:d2:a4:bf:e9:
         2c:5b:ad:e1:37:9b:de:7a:bf:b5:1c:d5:3e:45:da:69:df:f2:
         e8:65:e3:37:ee:9a:6c:12:13:27:13:a0:bc:3e:d7:07:dd:3e:
         14:92:fb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:18:00 2026 by rpki-client