Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8h334Zm2BCT5NrdMWsu4uDXCErAdMZ6oWkhhiCE9Anfz/0/3133382e33362e3232382e302f32322d3234203d3e20323634353938.roa
File:                     3133382e33362e3232382e302f32322d3234203d3e20323634353938.roa (raw, json)
Hash identifier:          UKfVHt82FBw/kwyJ4Tx/strI2LbAVGgS5VDtuacEMWE=
Subject key identifier:   97:ED:9D:FE:A3:37:B5:50:B9:77:C7:22:98:E9:7E:EE:54:8B:09:47
Certificate issuer:       /CN=68DCF9CE56E6B22F6D39A5FE19C4843DFA725EC1
Certificate serial:       4F000821383785A765611C05C8FB33BBB99BA600
Authority key identifier: 68:DC:F9:CE:56:E6:B2:2F:6D:39:A5:FE:19:C4:84:3D:FA:72:5E:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DCF9CE56E6B22F6D39A5FE19C4843DFA725EC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8h334Zm2BCT5NrdMWsu4uDXCErAdMZ6oWkhhiCE9Anfz/0/3133382e33362e3232382e302f32322d3234203d3e20323634353938.roa
Signing time:             Wed 10 Jun 2026 11:21:56 +0000
ROA not before:           Wed 10 Jun 2026 11:16:56 +0000
ROA not after:            Wed 09 Jun 2027 11:21:56 +0000
asID:                     264598
IP address blocks:        138.36.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8h334Zm2BCT5NrdMWsu4uDXCErAdMZ6oWkhhiCE9Anfz/0/68DCF9CE56E6B22F6D39A5FE19C4843DFA725EC1.crl
                          rsync://rpki-repo.registro.br/repo/8h334Zm2BCT5NrdMWsu4uDXCErAdMZ6oWkhhiCE9Anfz/0/68DCF9CE56E6B22F6D39A5FE19C4843DFA725EC1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DCF9CE56E6B22F6D39A5FE19C4843DFA725EC1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 08:28:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:00:08:21:38:37:85:a7:65:61:1c:05:c8:fb:33:bb:b9:9b:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68DCF9CE56E6B22F6D39A5FE19C4843DFA725EC1
        Validity
            Not Before: Jun 10 11:16:56 2026 GMT
            Not After : Jun  9 11:21:56 2027 GMT
        Subject: CN=97ED9DFEA337B550B977C72298E97EEE548B0947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d8:65:3a:01:a9:58:13:05:21:5e:03:df:da:
                    d9:8c:f6:aa:21:6a:97:87:bf:b1:3c:52:df:e4:22:
                    85:c5:01:ab:b5:63:12:f7:7d:25:ff:e0:31:e7:40:
                    58:d0:cf:a3:6e:16:cc:e7:12:13:dd:5d:d9:c7:30:
                    db:ef:a9:14:01:fb:8c:2e:1f:0f:6d:48:f1:77:d8:
                    f8:0a:ed:00:68:a4:66:17:a1:22:5e:47:81:fd:f4:
                    3d:21:05:56:a1:ad:bb:c9:b8:0d:8c:75:29:29:0a:
                    a6:b6:30:ad:3a:ba:0d:92:ed:8e:45:2b:25:23:d8:
                    48:eb:bf:bc:1f:7e:ed:48:fd:72:4a:ac:43:af:fe:
                    28:aa:e3:73:0d:5a:15:a5:53:69:bf:46:d1:d0:e4:
                    4c:3c:22:fc:aa:27:ea:29:a1:e8:ac:a6:90:27:c1:
                    42:f3:a7:de:ad:e6:46:23:8e:64:34:60:0c:0d:5a:
                    c4:e4:69:f8:12:cb:45:3c:94:c5:33:ce:93:0f:f4:
                    ee:37:3d:c4:bd:2c:aa:b0:b1:e2:4c:49:29:e0:2f:
                    11:a7:49:cb:4c:44:37:56:40:65:9f:41:d5:3e:16:
                    bb:68:90:6b:fc:6f:ff:d9:c4:25:94:7b:26:ec:0e:
                    95:c5:4c:a4:d8:77:5e:0b:43:1b:16:8e:f2:54:b1:
                    c9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:ED:9D:FE:A3:37:B5:50:B9:77:C7:22:98:E9:7E:EE:54:8B:09:47
            X509v3 Authority Key Identifier:
                keyid:68:DC:F9:CE:56:E6:B2:2F:6D:39:A5:FE:19:C4:84:3D:FA:72:5E:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8h334Zm2BCT5NrdMWsu4uDXCErAdMZ6oWkhhiCE9Anfz/0/68DCF9CE56E6B22F6D39A5FE19C4843DFA725EC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DCF9CE56E6B22F6D39A5FE19C4843DFA725EC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8h334Zm2BCT5NrdMWsu4uDXCErAdMZ6oWkhhiCE9Anfz/0/3133382e33362e3232382e302f32322d3234203d3e20323634353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:1d:76:fe:d0:28:c4:07:6c:2b:b5:e9:15:91:79:c1:81:78:
         8f:98:6b:62:17:49:a9:cf:89:b8:cd:2d:af:72:c2:2a:e5:7b:
         b1:fe:7e:d9:ad:ed:71:48:b5:11:78:f5:2c:20:39:94:73:c2:
         62:eb:db:2e:3a:f2:00:60:8b:15:30:87:99:2c:e4:06:25:57:
         a5:0b:25:eb:70:ad:64:55:86:d0:07:9d:54:59:5e:54:24:9b:
         c0:2b:d1:74:c6:68:e2:d7:ee:aa:4f:5c:4d:1f:1d:5b:12:98:
         33:1e:53:72:78:46:dc:6a:ae:c8:cf:9a:8c:28:dc:77:3d:10:
         99:fa:c8:9f:a8:31:53:68:cf:d2:1c:bf:ab:a7:b6:f6:cb:02:
         23:96:06:8c:23:93:bb:74:0d:7c:08:a7:06:ff:74:2f:92:b0:
         af:b6:2f:62:de:34:0e:8e:38:21:dd:61:d2:87:cb:d1:a3:d4:
         6b:2c:7c:11:ca:11:d8:b4:4e:23:ab:40:45:c3:c4:5b:1a:82:
         44:d8:e8:e6:6c:5b:81:5b:25:fa:21:7d:2f:0a:37:b0:4f:23:
         d5:15:39:80:1a:ed:f5:df:5b:1e:dd:a0:3f:6b:9a:87:e0:92:
         5a:2a:4d:0f:df:82:4b:e2:b2:a7:07:1a:f8:40:b2:54:8e:3c:
         1b:10:2e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 10:51:02 2026 by rpki-client