Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3133382e39372e34312e302f32342d3234203d3e20323634313230.roa
File:                     3133382e39372e34312e302f32342d3234203d3e20323634313230.roa (raw, json)
Hash identifier:          wxv3l0ciW5CA0XrdwcZe0PlD/XsPzba+O6/MRirnVXs=
Subject key identifier:   38:29:17:ED:EF:7A:B5:17:D6:07:26:AC:9E:C0:FD:09:E7:F6:54:41
Certificate issuer:       /CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
Certificate serial:       6D14D6BEAE948EF63B655B66860E7AD4C350D24A
Authority key identifier: 1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3133382e39372e34312e302f32342d3234203d3e20323634313230.roa
Signing time:             Mon 02 Mar 2026 15:41:05 +0000
ROA not before:           Mon 02 Mar 2026 15:36:05 +0000
ROA not after:            Mon 01 Mar 2027 15:41:05 +0000
asID:                     264120
IP address blocks:        138.97.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl
                          rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 17:53:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:14:d6:be:ae:94:8e:f6:3b:65:5b:66:86:0e:7a:d4:c3:50:d2:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
        Validity
            Not Before: Mar  2 15:36:05 2026 GMT
            Not After : Mar  1 15:41:05 2027 GMT
        Subject: CN=382917EDEF7AB517D60726AC9EC0FD09E7F65441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c5:a5:2f:2f:17:4c:8b:51:ab:a6:4f:5e:a2:
                    fc:90:7e:98:27:93:bc:cd:76:8f:fb:01:ba:42:b5:
                    92:cd:16:45:72:76:b7:7d:46:8f:72:4d:da:0b:e8:
                    83:3f:a8:a7:3b:39:1b:e4:9f:0e:c7:1b:56:90:36:
                    2a:bf:30:ac:95:37:32:ba:49:d8:b1:0b:08:b8:4a:
                    1f:c5:90:40:1f:26:78:6a:94:f9:cd:bf:63:89:dd:
                    40:51:d4:a5:93:68:ec:ef:96:e9:bc:ea:08:fe:c3:
                    e1:1d:fd:e0:85:ae:0f:02:14:03:4e:9c:33:3e:fe:
                    1e:b9:12:e9:6b:f4:86:38:f4:08:ff:61:0a:dc:da:
                    94:6c:25:8a:c8:80:2a:da:00:f8:b1:e2:59:da:f0:
                    3f:88:de:26:4d:98:38:b5:5b:1f:7b:49:56:72:2b:
                    5a:82:cd:00:10:2a:15:1f:e8:97:07:d1:15:6f:e9:
                    53:df:0c:ba:6c:a6:57:ce:db:99:4e:c4:d8:29:75:
                    68:4c:6c:16:25:ae:11:39:85:1e:55:6f:0e:e9:9d:
                    b5:08:7c:48:29:96:c3:2c:7f:32:10:ff:d2:4c:fc:
                    f8:9e:60:b4:45:05:40:37:b3:e0:df:77:d5:73:8f:
                    df:ce:41:f0:69:97:b0:79:4a:61:73:41:1f:0d:29:
                    7f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:29:17:ED:EF:7A:B5:17:D6:07:26:AC:9E:C0:FD:09:E7:F6:54:41
            X509v3 Authority Key Identifier:
                keyid:1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3133382e39372e34312e302f32342d3234203d3e20323634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:36:2c:cc:c4:e1:89:4a:cf:5a:05:01:ca:87:e2:92:36:1d:
         36:d2:31:41:ee:24:64:c6:bb:b0:67:8e:54:91:5c:89:47:8b:
         24:a1:47:d1:39:9d:7b:bf:42:2b:d2:2d:a5:e0:1a:ee:e1:f9:
         e6:7d:f7:51:12:3e:76:e1:ce:1a:99:43:84:ea:0e:f1:65:3d:
         fe:a2:0b:57:2c:38:1b:a9:1b:d8:16:ea:64:27:27:75:95:63:
         e1:f3:bb:e4:c1:c7:8b:58:74:f5:d2:3b:34:6d:b3:b7:9b:9a:
         d6:6e:54:e8:ae:60:20:1e:88:c4:ad:d2:c7:0f:01:d0:38:31:
         eb:8c:29:bc:84:ae:de:f9:45:64:83:7c:bf:b7:e8:83:aa:d4:
         9a:01:ad:cc:6b:12:21:9d:8b:5b:c8:33:9a:8d:69:09:6d:3a:
         8a:5e:13:50:8d:82:f8:1d:78:be:db:99:d1:5b:70:7e:c3:9d:
         1c:17:ca:9b:03:7e:d5:46:70:5f:f7:c9:03:be:c7:24:ea:8c:
         e9:c1:ab:41:88:39:0f:82:26:4f:19:de:76:4a:a7:07:1c:8f:
         1d:b8:42:68:cf:70:84:17:26:16:2e:51:e3:9b:a7:07:2f:19:
         08:2b:fa:9e:e2:5f:e9:17:8b:9d:ce:07:1c:c6:41:ba:55:25:
         c0:de:3c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:52:14 2026 by rpki-client