Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3133382e3132322e3134302e302f32322d3332203d3e203631363738.roa
File:                     3133382e3132322e3134302e302f32322d3332203d3e203631363738.roa (raw, json)
Hash identifier:          k+OYIPafOPyxewPaNEllAN4XrYOU55urLV+aDorsq9s=
Subject key identifier:   38:4C:07:E3:3E:23:D3:F1:C0:2E:B8:32:3B:19:5C:71:CD:D7:C9:CD
Certificate issuer:       /CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC
Certificate serial:       1CACF7BCAAF1BCC649FF66E651C95E2A9D4111DD
Authority key identifier: 8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3133382e3132322e3134302e302f32322d3332203d3e203631363738.roa
Signing time:             Sat 13 Jun 2026 23:53:21 +0000
ROA not before:           Sat 13 Jun 2026 23:48:21 +0000
ROA not after:            Sat 12 Jun 2027 23:53:21 +0000
asID:                     61678
IP address blocks:        138.122.140.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl
                          rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 02:53:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:ac:f7:bc:aa:f1:bc:c6:49:ff:66:e6:51:c9:5e:2a:9d:41:11:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC
        Validity
            Not Before: Jun 13 23:48:21 2026 GMT
            Not After : Jun 12 23:53:21 2027 GMT
        Subject: CN=384C07E33E23D3F1C02EB8323B195C71CDD7C9CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:92:a9:f5:98:33:e5:05:bb:98:0f:98:b4:ff:
                    bd:76:74:58:8e:e0:4b:77:53:f4:51:10:cd:da:5a:
                    38:57:ba:ba:a1:47:cb:52:77:40:56:ae:d3:12:76:
                    25:79:38:a4:06:15:5c:ef:67:ff:32:37:58:03:69:
                    0b:70:f5:a3:f4:ec:45:93:c0:d4:5b:a2:b8:2d:5a:
                    a0:17:fa:0d:f1:ec:1e:3a:34:b7:e9:6c:e2:f7:eb:
                    67:07:7d:18:06:21:51:f2:62:0c:cc:cd:f2:1d:ed:
                    a0:50:19:9c:3b:27:cb:7a:bf:f1:d8:80:17:1e:b4:
                    2b:86:b4:fe:7f:58:70:dd:5f:96:b3:15:c0:7b:3f:
                    44:0a:2d:8a:9f:b5:04:0b:0f:d7:90:0c:47:4c:7c:
                    be:c5:dd:0e:b6:be:35:92:d2:e7:03:c3:7a:1d:e7:
                    59:ed:53:a4:07:2a:90:97:41:cc:f9:6f:fb:3d:d5:
                    c2:dc:9e:67:aa:3a:61:2c:80:83:8b:4d:5a:5e:44:
                    2b:ca:25:91:1c:bb:d8:68:d5:09:91:3a:6b:d4:cf:
                    10:c0:80:37:54:22:0b:8f:19:50:8b:03:07:29:16:
                    29:a4:a3:13:76:57:da:ba:1b:69:ec:45:7a:c6:b4:
                    45:a8:1d:80:32:f5:5e:ed:32:fc:56:33:59:25:f7:
                    cb:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:4C:07:E3:3E:23:D3:F1:C0:2E:B8:32:3B:19:5C:71:CD:D7:C9:CD
            X509v3 Authority Key Identifier:
                keyid:8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3133382e3132322e3134302e302f32322d3332203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:b2:ac:26:5f:e7:3d:17:28:f1:91:5e:52:8e:56:2e:d4:18:
         2c:26:eb:5a:97:f9:35:5a:4f:16:37:98:d3:0c:5d:a2:d8:bb:
         5f:26:93:ca:52:66:2a:30:3e:c8:79:87:e2:bc:37:3e:7d:14:
         13:7b:2f:94:9d:19:1d:ed:c1:ac:7b:71:22:d1:80:25:16:48:
         54:91:00:8e:1c:d9:83:48:ef:aa:76:39:a7:ac:5f:0d:35:48:
         58:94:e6:6a:33:4f:52:e6:a0:bc:07:a4:f2:bf:b1:df:08:c2:
         5a:94:0c:78:18:ea:5d:f2:fe:41:97:2e:8f:47:d2:a0:aa:b9:
         0a:29:60:34:48:f0:b6:18:91:00:c3:f6:4b:d0:9d:42:b5:38:
         a7:aa:4a:8c:5e:be:42:c5:f6:13:0c:1a:e3:79:d2:77:f5:5a:
         1b:42:0a:12:b2:36:3d:27:fa:fe:16:2a:61:16:61:5f:28:4a:
         95:6e:40:08:26:18:3e:2a:5d:ef:f3:e2:69:34:9e:1c:e3:16:
         5f:27:55:75:2b:a6:af:36:bf:af:d0:99:a9:e4:a6:27:ec:aa:
         a1:65:98:18:64:23:c5:b3:38:76:76:38:41:d3:53:bf:6a:39:
         11:e5:4f:31:89:5a:31:dc:1f:8e:71:0e:06:ba:b6:f1:9f:a6:
         3d:5e:19:5c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHKz3vKrxvMZJ/2bmUcleKp1BEd0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU1MkM2QTlCRUFENzlEQzk1MEY5REE1NjBDNTMwRjI4
QkM2RkNEQzAeFw0yNjA2MTMyMzQ4MjFaFw0yNzA2MTIyMzUzMjFaMDMxMTAvBgNV
BAMTKDM4NEMwN0UzM0UyM0QzRjFDMDJFQjgzMjNCMTk1QzcxQ0REN0M5Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDukqn1mDPlBbuYD5i0/712dFiO
4Et3U/RREM3aWjhXurqhR8tSd0BWrtMSdiV5OKQGFVzvZ/8yN1gDaQtw9aP07EWT
wNRborgtWqAX+g3x7B46NLfpbOL362cHfRgGIVHyYgzMzfId7aBQGZw7J8t6v/HY
gBcetCuGtP5/WHDdX5azFcB7P0QKLYqftQQLD9eQDEdMfL7F3Q62vjWS0ucDw3od
51ntU6QHKpCXQcz5b/s91cLcnmeqOmEsgIOLTVpeRCvKJZEcu9ho1QmROmvUzxDA
gDdUIguPGVCLAwcpFimkoxN2V9q6G2nsRXrGtEWoHYAy9V7tMvxWM1kl98uvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUOEwH4z4j0/HALrgyOxlccc3Xyc0wHwYDVR0j
BBgwFoAUjlLGqb6tedyVD52lYMUw8ovG/NwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFRoeGNNVkJuekZRSml3cFdCMW1LZ01EU3p4VlI2aDYxTDkzeW1iS3Yy
azkvMC84RTUyQzZBOUJFQUQ3OURDOTUwRjlEQTU2MEM1MzBGMjhCQzZGQ0RDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFNTJDNkE5QkVBRDc5REM5
NTBGOURBNTYwQzUzMEYyOEJDNkZDREMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRUaHhjTVZCbnpGUUppd3BXQjFtS2dNRFN6eFZSNmg2MUw5M3ltYkt2Mms5LzAv
MzEzMzM4MmUzMTMyMzIyZTMxMzQzMDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDM2
MzEzNjM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKeowwDQYJKoZIhvcNAQELBQADggEBABKyrCZf
5z0XKPGRXlKOVi7UGCwm61qX+TVaTxY3mNMMXaLYu18mk8pSZiowPsh5h+K8Nz59
FBN7L5SdGR3twax7cSLRgCUWSFSRAI4c2YNI76p2OaesXw01SFiU5mozT1LmoLwH
pPK/sd8IwlqUDHgY6l3y/kGXLo9H0qCquQopYDRI8LYYkQDD9kvQnUK1OKeqSoxe
vkLF9hMMGuN50nf1WhtCChKyNj0n+v4WKmEWYV8oSpVuQAgmGD4qXe/z4mk0nhzj
Fl8nVXUrpq82v6/QmankpifsqqFlmBhkI8WzOHZ2OEHTU79qORHlTzGJWjHcH45x
Dga6tvGfpj1eGVw=
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:18:52 2026 by rpki-client