Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3133382e3131382e39312e302f32342d3234203d3e20323632343835.roa
File:                     3133382e3131382e39312e302f32342d3234203d3e20323632343835.roa (raw, json)
Hash identifier:          OFL65DAEq9WioI4Vwwyd7STuD2/9USja4NJaSuqwPfM=
Subject key identifier:   2E:09:75:B3:C8:1C:E4:7A:B4:64:65:12:5C:6D:CC:73:D5:68:7E:9A
Certificate issuer:       /CN=4774D086E10F29F42B699F993DE4061E0FDF8862
Certificate serial:       2EDD83E2596FA81D13F00265ADB1365BE50973F5
Authority key identifier: 47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3133382e3131382e39312e302f32342d3234203d3e20323632343835.roa
Signing time:             Sat 30 May 2026 21:56:52 +0000
ROA not before:           Sat 30 May 2026 21:51:52 +0000
ROA not after:            Sat 29 May 2027 21:56:52 +0000
asID:                     262485
IP address blocks:        138.118.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl
                          rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 22:05:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:dd:83:e2:59:6f:a8:1d:13:f0:02:65:ad:b1:36:5b:e5:09:73:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4774D086E10F29F42B699F993DE4061E0FDF8862
        Validity
            Not Before: May 30 21:51:52 2026 GMT
            Not After : May 29 21:56:52 2027 GMT
        Subject: CN=2E0975B3C81CE47AB46465125C6DCC73D5687E9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6e:e8:12:d1:40:ef:a9:cb:1f:b7:5c:21:2a:
                    68:ec:6e:96:48:f8:92:b1:89:d4:4b:0f:da:e4:4b:
                    98:51:26:b5:0b:89:b8:9a:41:20:94:e4:64:62:64:
                    5a:fa:71:8f:7c:e3:01:df:1f:8b:46:a5:34:6c:18:
                    90:5a:45:d6:62:2d:d3:d1:ee:2d:75:7d:f7:49:79:
                    6d:aa:8a:0c:09:1f:7c:ad:0a:9f:5f:62:e2:5e:db:
                    de:4c:71:19:06:a1:13:96:78:da:d7:c0:30:aa:2b:
                    20:fe:6c:a7:5e:b9:63:17:7d:c0:db:6a:52:8d:44:
                    59:a6:43:40:9c:84:2a:56:24:1f:14:dc:c3:5f:0c:
                    60:ea:05:89:a7:7d:35:ab:b1:68:90:dc:70:e3:ee:
                    ca:f9:10:dc:ff:fd:5d:d2:54:49:ec:31:33:50:04:
                    7b:e8:46:f0:77:0c:60:2e:9f:ab:56:a0:d5:8e:cc:
                    c5:43:48:95:c7:1e:41:84:51:40:66:81:cf:66:d7:
                    af:c1:7a:ef:2c:0d:6d:56:cb:bf:ef:9b:13:ca:2c:
                    82:74:48:59:8d:de:39:b2:11:52:8e:66:19:91:8a:
                    39:01:f4:6d:d0:1f:81:ef:5f:ed:95:0d:5f:9d:39:
                    f6:b3:58:ab:c1:14:02:9e:9b:e0:2b:db:51:58:b2:
                    83:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:09:75:B3:C8:1C:E4:7A:B4:64:65:12:5C:6D:CC:73:D5:68:7E:9A
            X509v3 Authority Key Identifier:
                keyid:47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3133382e3131382e39312e302f32342d3234203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:88:b5:63:07:09:f4:ec:06:dd:f7:16:31:2f:9b:18:14:57:
         18:b9:0b:ec:d2:07:43:f7:19:f2:45:e9:92:38:0d:21:b8:d7:
         14:7a:12:f9:05:27:86:94:84:60:33:b2:35:86:7c:0e:07:6a:
         e8:81:46:36:68:48:1a:16:62:cf:26:c1:aa:23:7e:9e:26:48:
         91:ba:d3:07:ec:82:34:77:fc:ed:ce:70:c1:ab:6e:ac:d3:c4:
         ed:f9:33:aa:28:b7:4c:d2:b1:65:85:4b:63:68:25:ea:5a:11:
         ba:5c:ad:48:a2:8d:d8:4c:0b:63:1e:d0:72:eb:0e:6f:d8:09:
         72:10:69:af:07:78:e4:2e:de:c0:14:54:d7:9e:bd:e1:d0:f6:
         76:e5:0c:d9:36:e3:3d:db:8a:98:03:20:bd:d6:26:1b:fc:62:
         a1:61:39:6d:67:07:f4:27:fb:c2:92:1d:1e:6f:f2:34:3f:27:
         75:ca:eb:f1:3a:8e:a2:f0:a7:fc:ef:5d:28:02:8f:d6:fe:eb:
         cf:3e:53:d7:8e:d8:66:e3:98:2f:1f:0f:18:11:a8:75:2f:90:
         4e:34:d8:77:91:bc:13:ab:45:32:f5:a0:63:0e:c9:0f:00:b3:
         28:ed:1a:b2:cc:21:fc:bf:d3:4d:73:12:7c:ae:13:bd:ee:e6:
         3d:fb:e4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:57:59 2026 by rpki-client