Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/3133382e39372e32302e302f32322d3232203d3e20323634313132.roa
File:                     3133382e39372e32302e302f32322d3232203d3e20323634313132.roa (raw, json)
Hash identifier:          y8r0uQQJJqa5U3xIcN/oZY8CHFP8bYBxl/PdanlaOiY=
Subject key identifier:   E8:27:02:9D:D1:9B:15:35:79:B1:67:25:5A:B1:4F:04:E9:2B:3C:6F
Certificate issuer:       /CN=A72039C80A7A3A4EF3A2115F93A143C78CACBCF1
Certificate serial:       1E851C0AC34D4FB479FF22225AA7EC6AE9153F8B
Authority key identifier: A7:20:39:C8:0A:7A:3A:4E:F3:A2:11:5F:93:A1:43:C7:8C:AC:BC:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A72039C80A7A3A4EF3A2115F93A143C78CACBCF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/3133382e39372e32302e302f32322d3232203d3e20323634313132.roa
Signing time:             Fri 05 Jun 2026 01:02:19 +0000
ROA not before:           Fri 05 Jun 2026 00:57:19 +0000
ROA not after:            Fri 04 Jun 2027 01:02:19 +0000
asID:                     264112
IP address blocks:        138.97.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A72039C80A7A3A4EF3A2115F93A143C78CACBCF1.crl
                          rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A72039C80A7A3A4EF3A2115F93A143C78CACBCF1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A72039C80A7A3A4EF3A2115F93A143C78CACBCF1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 15:22:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:85:1c:0a:c3:4d:4f:b4:79:ff:22:22:5a:a7:ec:6a:e9:15:3f:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A72039C80A7A3A4EF3A2115F93A143C78CACBCF1
        Validity
            Not Before: Jun  5 00:57:19 2026 GMT
            Not After : Jun  4 01:02:19 2027 GMT
        Subject: CN=E827029DD19B153579B167255AB14F04E92B3C6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:af:bf:b3:51:22:59:6e:7e:ad:26:a5:c0:46:
                    15:9d:f4:71:49:14:c7:58:4a:33:35:d8:56:42:26:
                    b2:07:52:b0:6d:80:e8:5e:7e:54:06:b9:8c:60:e9:
                    fb:ef:e0:46:07:89:d0:cc:16:3f:74:8b:a2:17:c1:
                    d4:1b:26:da:c0:67:20:fd:d3:f1:c2:ac:e1:26:59:
                    29:b0:ff:46:09:08:45:61:ef:fd:c1:ba:57:46:88:
                    a9:29:9d:c8:4b:ed:66:5c:56:b2:9c:d6:13:f0:40:
                    a3:1d:71:5e:40:41:69:0e:a7:b6:b2:ea:6a:24:b4:
                    dd:cd:1a:ec:34:04:0c:97:a2:e0:5a:01:50:95:1d:
                    c1:97:ce:dd:36:f4:a4:35:2a:2c:ba:7b:0a:f4:b9:
                    53:56:ae:1f:6e:de:07:44:56:aa:ce:bb:8c:56:5f:
                    9d:56:5d:d7:ff:ef:0e:5e:57:cc:88:3e:c4:d3:18:
                    7e:c7:7d:5e:d9:f2:7c:8e:6d:09:47:a8:4d:35:82:
                    dd:51:22:3d:c6:05:87:06:a4:7b:66:f8:26:ef:01:
                    26:63:ce:3b:f3:51:d8:75:90:1a:2d:1b:b4:c9:69:
                    c8:94:67:4c:d1:ea:44:79:04:f1:8f:4c:c4:17:23:
                    f8:02:52:b3:1e:af:2a:cc:0c:18:e0:0d:77:c3:a7:
                    3d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:27:02:9D:D1:9B:15:35:79:B1:67:25:5A:B1:4F:04:E9:2B:3C:6F
            X509v3 Authority Key Identifier:
                keyid:A7:20:39:C8:0A:7A:3A:4E:F3:A2:11:5F:93:A1:43:C7:8C:AC:BC:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A72039C80A7A3A4EF3A2115F93A143C78CACBCF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A72039C80A7A3A4EF3A2115F93A143C78CACBCF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/3133382e39372e32302e302f32322d3232203d3e20323634313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:38:77:95:48:7e:4a:11:3d:a0:44:44:d3:c3:5c:44:f9:b9:
         b3:28:f3:6d:26:77:61:84:a3:11:24:d6:27:5e:84:09:be:c5:
         d7:04:30:71:62:e2:ab:c4:3c:95:8e:a4:9c:f9:e8:13:e5:a1:
         30:13:0e:c7:45:7f:df:0f:c3:27:7b:2d:5c:5b:36:f1:67:3f:
         38:db:6e:b9:f1:03:13:5b:ee:d4:5c:c2:8d:ec:91:53:38:00:
         af:0a:ed:5f:08:59:16:29:b9:51:4d:44:fe:e0:6e:6c:00:e1:
         76:95:35:ad:e6:d3:ff:08:d1:8e:e4:0e:04:57:28:ee:a5:39:
         a0:cf:ad:7d:08:81:2d:44:54:3d:06:93:7a:4e:29:f2:a1:f4:
         71:ad:fb:cc:18:12:4f:1f:c7:a1:1f:22:b3:8d:55:7f:93:2e:
         c3:40:67:52:f8:33:c3:cf:4e:3e:bf:bc:6f:fb:a5:3a:bd:c8:
         f0:1a:a0:cf:bc:e7:e2:5f:ce:e0:7d:14:3a:ad:e2:20:6e:13:
         2c:59:bd:64:e3:b2:31:84:f6:c2:c0:59:76:ee:c9:4f:bc:60:
         f2:e0:96:7f:2e:22:59:5f:d8:42:bf:ca:16:81:90:33:86:0e:
         8e:24:44:e5:8a:f9:f9:a2:12:9f:95:52:af:da:d6:fa:c8:e9:
         d7:75:5d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:20:41 2026 by rpki-client