Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3133382e3131382e38392e302f32342d3234203d3e20323632343835.roa
File:                     3133382e3131382e38392e302f32342d3234203d3e20323632343835.roa (raw, json)
Hash identifier:          il7Vb0SXVIxlhm8clUhj13iQS8BN1v5a59PhhND7wIg=
Subject key identifier:   28:45:AF:43:24:74:4D:D4:3B:83:35:55:8B:91:00:42:B1:7C:88:F7
Certificate issuer:       /CN=4774D086E10F29F42B699F993DE4061E0FDF8862
Certificate serial:       1104A9CED7CA02A325BEF890DA71EA75BF7D6B54
Authority key identifier: 47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3133382e3131382e38392e302f32342d3234203d3e20323632343835.roa
Signing time:             Sat 30 May 2026 21:56:54 +0000
ROA not before:           Sat 30 May 2026 21:51:54 +0000
ROA not after:            Sat 29 May 2027 21:56:54 +0000
asID:                     262485
IP address blocks:        138.118.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl
                          rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 22:05:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:04:a9:ce:d7:ca:02:a3:25:be:f8:90:da:71:ea:75:bf:7d:6b:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4774D086E10F29F42B699F993DE4061E0FDF8862
        Validity
            Not Before: May 30 21:51:54 2026 GMT
            Not After : May 29 21:56:54 2027 GMT
        Subject: CN=2845AF4324744DD43B8335558B910042B17C88F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:09:36:b7:db:c0:51:a3:89:93:12:5d:cc:aa:
                    a3:72:ff:ab:e5:bc:a8:75:07:7c:d3:af:25:f0:32:
                    73:eb:36:61:b1:90:47:ca:3b:c2:a7:a0:89:15:69:
                    76:97:6e:c2:5b:39:4d:01:27:28:93:51:bc:33:3a:
                    5b:bc:4d:43:f6:08:7c:b7:52:8f:be:e7:fe:e6:26:
                    a5:9a:e5:f2:96:19:ad:8f:4e:80:39:7c:fe:80:6a:
                    3e:a5:1f:d5:14:77:f3:c7:ea:0d:ae:13:68:44:5d:
                    1d:97:d9:ec:1f:72:4a:15:ff:8a:4f:90:5d:f8:35:
                    14:f9:21:ea:2d:cc:44:64:01:a8:d0:8b:f2:75:60:
                    bf:f2:0a:b8:98:6b:a8:a6:66:a5:10:07:ff:48:c8:
                    91:78:b8:69:ed:b5:53:33:39:7b:b7:88:50:c9:44:
                    56:f2:13:62:83:61:9b:27:c5:3a:d3:0c:84:01:d4:
                    a9:23:86:13:b8:db:88:d2:4c:ff:96:69:67:36:1a:
                    08:43:21:ae:87:eb:71:f8:5b:5d:c4:e2:49:96:c4:
                    57:ce:65:f5:dd:52:fd:fe:e8:ec:1f:ed:13:88:14:
                    22:35:b3:a7:cc:e5:a3:33:21:be:ea:bc:c6:50:cf:
                    66:03:18:d9:c9:1e:7c:61:dd:25:0d:ce:48:00:ab:
                    df:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:45:AF:43:24:74:4D:D4:3B:83:35:55:8B:91:00:42:B1:7C:88:F7
            X509v3 Authority Key Identifier:
                keyid:47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3133382e3131382e38392e302f32342d3234203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:d0:72:bb:bf:f8:43:29:93:5f:ce:16:ec:81:24:02:4a:12:
         6f:12:2b:f4:98:82:24:87:cb:d7:11:e2:96:ea:b2:8f:18:a0:
         23:ea:47:94:66:90:cd:b1:2d:f8:83:03:f3:e2:bd:5b:24:9b:
         12:a8:4f:5a:87:17:fd:06:b1:f5:87:f7:23:f9:90:c2:ef:a8:
         ce:c6:8b:f5:e1:c7:7c:e1:36:f8:6f:41:44:54:ef:77:59:13:
         09:5e:d1:b2:7a:4d:8c:75:19:e0:2b:6c:d0:1b:29:bf:b7:39:
         b4:5a:cc:2b:30:2b:09:46:62:2c:3c:43:29:ab:cf:75:55:78:
         37:0d:66:93:48:94:9d:96:02:1c:68:2a:17:0f:c0:ca:2b:69:
         ed:d1:0d:22:64:bb:37:1b:72:1d:1e:55:8e:78:cb:3d:17:65:
         75:55:7f:63:9e:07:f7:7a:d7:81:5a:31:ed:3c:99:5d:17:cf:
         8c:b4:e7:8d:e4:64:91:d6:72:35:c3:81:65:1c:a6:1a:57:33:
         b0:a8:19:73:e8:f0:b1:b7:bf:5d:5d:3d:67:ae:ba:e0:3b:6b:
         ac:c8:79:05:90:40:17:63:58:20:fd:82:ee:4a:12:94:c5:11:
         ab:98:ea:76:2e:4d:5f:da:70:0e:fb:99:a9:be:9e:4d:9e:8b:
         4c:fb:54:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:06:02 2026 by rpki-client