Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/3133382e39372e32322e302f32332d3233203d3e20323634313132.roa
File:                     3133382e39372e32322e302f32332d3233203d3e20323634313132.roa (raw, json)
Hash identifier:          +PopTkLI/xndQI+8QVkE0iJq5hQlzOaDVswTN46FLm4=
Subject key identifier:   5F:C7:82:AE:3D:71:CD:88:74:67:A6:4D:C9:BF:07:2D:6F:32:4A:A6
Certificate issuer:       /CN=A72039C80A7A3A4EF3A2115F93A143C78CACBCF1
Certificate serial:       24C4D57EE31E065F7DF1C62C08999E1A7D9D8F38
Authority key identifier: A7:20:39:C8:0A:7A:3A:4E:F3:A2:11:5F:93:A1:43:C7:8C:AC:BC:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A72039C80A7A3A4EF3A2115F93A143C78CACBCF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/3133382e39372e32322e302f32332d3233203d3e20323634313132.roa
Signing time:             Fri 05 Jun 2026 02:01:06 +0000
ROA not before:           Fri 05 Jun 2026 01:56:06 +0000
ROA not after:            Fri 04 Jun 2027 02:01:06 +0000
asID:                     264112
IP address blocks:        138.97.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A72039C80A7A3A4EF3A2115F93A143C78CACBCF1.crl
                          rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A72039C80A7A3A4EF3A2115F93A143C78CACBCF1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A72039C80A7A3A4EF3A2115F93A143C78CACBCF1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 15:22:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:c4:d5:7e:e3:1e:06:5f:7d:f1:c6:2c:08:99:9e:1a:7d:9d:8f:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A72039C80A7A3A4EF3A2115F93A143C78CACBCF1
        Validity
            Not Before: Jun  5 01:56:06 2026 GMT
            Not After : Jun  4 02:01:06 2027 GMT
        Subject: CN=5FC782AE3D71CD887467A64DC9BF072D6F324AA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e9:b8:54:b3:e0:69:0e:c8:c2:dc:0c:fb:3b:
                    3e:8a:8f:c0:77:bd:c7:75:97:3f:fe:fd:20:4e:1c:
                    97:48:6a:21:27:12:e2:34:92:bd:d7:e1:92:da:77:
                    8a:3c:20:36:24:db:e6:ed:85:3c:68:c2:ea:25:c1:
                    ff:55:58:32:5d:74:4c:68:ac:95:ba:e4:ce:c2:26:
                    da:e2:9b:a5:ca:07:a0:29:39:8d:bc:04:f2:2c:14:
                    49:61:cd:60:21:f5:7a:7f:cb:03:d9:9d:84:d0:ef:
                    4b:86:7e:f9:87:a5:c9:db:04:b0:5c:4b:8a:54:23:
                    26:50:ce:3e:46:11:fb:bd:b8:37:e6:0c:3a:19:49:
                    14:9a:e5:0c:49:0d:81:4a:a1:3e:c4:34:76:63:41:
                    09:74:d9:80:f3:96:70:ed:4e:e6:b2:7b:76:60:ef:
                    72:af:41:a8:4d:c5:7c:25:f8:39:e4:8d:59:5d:47:
                    a8:43:15:b7:02:ba:e8:e9:83:8f:ca:01:0f:c1:50:
                    05:dd:81:be:87:c5:26:55:9a:17:69:25:57:5e:6d:
                    80:79:25:73:6b:ee:12:fa:14:fe:e2:0c:a1:b7:1c:
                    24:47:65:3d:92:2b:4f:15:92:5f:31:17:a3:47:b0:
                    d7:a7:d6:e0:92:cb:cd:a6:33:29:57:f0:61:71:79:
                    c9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C7:82:AE:3D:71:CD:88:74:67:A6:4D:C9:BF:07:2D:6F:32:4A:A6
            X509v3 Authority Key Identifier:
                keyid:A7:20:39:C8:0A:7A:3A:4E:F3:A2:11:5F:93:A1:43:C7:8C:AC:BC:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A72039C80A7A3A4EF3A2115F93A143C78CACBCF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A72039C80A7A3A4EF3A2115F93A143C78CACBCF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/3133382e39372e32322e302f32332d3233203d3e20323634313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:6b:3a:f2:35:69:9b:be:b9:45:bd:df:0c:57:b4:77:59:f1:
         3b:19:a9:a4:3f:98:0b:07:35:94:0b:c6:ea:0b:c5:49:b5:fb:
         58:ed:f9:84:2c:7c:c2:b3:e7:ce:e4:d0:8d:5a:37:fc:56:aa:
         52:fe:98:64:87:1f:3f:bd:b4:4b:7a:12:cb:75:ae:73:e9:13:
         11:fd:c7:ec:cb:fb:4d:22:a7:8b:f1:fd:7e:e8:8a:a8:22:41:
         39:cc:e4:24:ea:15:db:47:80:70:4b:32:b5:25:46:a2:b5:8a:
         59:fc:32:ed:16:80:9e:d1:c6:4b:84:d8:92:ee:54:a8:27:f5:
         6c:49:f2:eb:52:4f:7b:49:08:8a:b0:6c:db:34:4b:82:2a:dc:
         df:df:df:c2:dc:81:62:0a:aa:19:57:00:50:12:2d:b7:90:03:
         bd:5c:6c:38:c9:f8:1d:d6:ab:01:47:7c:d8:c8:df:89:39:cc:
         1c:76:96:10:d9:58:cd:3c:a1:cd:14:f8:f8:f6:e4:9c:1b:1c:
         9f:ac:bd:c7:8c:47:1a:bb:82:27:18:1e:81:59:8b:32:83:34:
         5b:f4:3c:b5:22:f0:1e:27:73:35:95:61:2b:ec:ce:06:0a:35:
         76:bc:b6:91:09:3b:e5:99:cf:0e:e5:1d:7d:4a:4b:4f:b4:78:
         9b:99:ed:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:20:42 2026 by rpki-client