Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8u7gBrxeSEPWe41j1A2kRAGiXmjCF4g9cwymAQURdzsj/0/3133382e3235352e35332e302f32342d3234203d3e20323730393430.roa
File:                     3133382e3235352e35332e302f32342d3234203d3e20323730393430.roa (raw, json)
Hash identifier:          Ji0CR905uszuzqnVtqV9vRXGSL1khRow2ofzuPjQEJU=
Subject key identifier:   B1:B3:F2:98:55:4F:3B:7B:65:A5:04:82:85:00:08:F1:A2:90:59:6E
Certificate issuer:       /CN=72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0
Certificate serial:       5CA568C4895BFDA4D38C3E0A83538525F5403D86
Authority key identifier: 72:FC:DA:07:D7:D5:DB:A7:7F:CA:46:9D:40:F2:1D:81:57:F0:6A:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8u7gBrxeSEPWe41j1A2kRAGiXmjCF4g9cwymAQURdzsj/0/3133382e3235352e35332e302f32342d3234203d3e20323730393430.roa
Signing time:             Fri 12 Jun 2026 20:15:06 +0000
ROA not before:           Fri 12 Jun 2026 20:10:06 +0000
ROA not after:            Fri 11 Jun 2027 20:15:06 +0000
asID:                     270940
IP address blocks:        138.255.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8u7gBrxeSEPWe41j1A2kRAGiXmjCF4g9cwymAQURdzsj/0/72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0.crl
                          rsync://rpki-repo.registro.br/repo/8u7gBrxeSEPWe41j1A2kRAGiXmjCF4g9cwymAQURdzsj/0/72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 16:41:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:a5:68:c4:89:5b:fd:a4:d3:8c:3e:0a:83:53:85:25:f5:40:3d:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0
        Validity
            Not Before: Jun 12 20:10:06 2026 GMT
            Not After : Jun 11 20:15:06 2027 GMT
        Subject: CN=B1B3F298554F3B7B65A50482850008F1A290596E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5a:19:39:4f:56:df:14:b6:ed:00:9a:54:3c:
                    91:4b:0b:dc:26:25:23:bb:45:13:2b:43:26:d6:6c:
                    5c:c2:48:88:fa:66:40:46:29:b8:66:a7:13:fb:f0:
                    a3:bf:c5:ae:97:5e:03:69:40:15:f0:c9:ef:81:6b:
                    f1:34:66:6b:b9:d5:b6:a4:55:60:26:bd:b3:ff:dc:
                    95:78:51:df:d2:b8:8c:5e:91:c2:b4:d7:91:3f:db:
                    bf:3f:85:0a:d6:ff:b2:fe:2c:98:a7:0f:a4:bd:fb:
                    c8:87:18:aa:d2:0b:c2:fd:89:5b:4e:92:87:9c:ab:
                    60:e6:e4:57:c4:ce:10:7e:fb:cd:92:6b:ca:9b:4e:
                    8a:14:e6:a0:d9:52:21:c3:94:2d:db:e9:95:a3:ca:
                    76:86:fe:22:ef:e7:db:46:be:7a:f7:85:ee:6b:76:
                    53:6f:a8:32:f0:dd:dc:cf:1c:7a:81:eb:f8:f3:ea:
                    3c:5c:b6:2a:da:e4:e2:11:65:a7:35:57:4d:ef:d1:
                    64:75:07:b4:07:0d:83:b7:68:b7:51:68:23:05:1d:
                    8e:03:6a:11:21:6b:83:3b:11:02:4d:d0:7d:4a:0f:
                    da:12:23:b7:9f:2a:45:b8:05:13:26:fb:7e:36:07:
                    1f:85:2a:62:e2:ea:85:8c:36:36:fd:41:e5:7d:08:
                    03:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:B3:F2:98:55:4F:3B:7B:65:A5:04:82:85:00:08:F1:A2:90:59:6E
            X509v3 Authority Key Identifier:
                keyid:72:FC:DA:07:D7:D5:DB:A7:7F:CA:46:9D:40:F2:1D:81:57:F0:6A:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8u7gBrxeSEPWe41j1A2kRAGiXmjCF4g9cwymAQURdzsj/0/72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8u7gBrxeSEPWe41j1A2kRAGiXmjCF4g9cwymAQURdzsj/0/3133382e3235352e35332e302f32342d3234203d3e20323730393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:01:8d:9f:5e:1c:df:a2:a1:0e:28:87:0c:6f:14:48:57:c0:
         05:c1:ae:6a:93:56:43:c8:50:6f:ed:65:82:87:36:30:f4:64:
         b4:83:4f:b9:26:b4:4a:32:aa:62:15:dd:31:1a:07:e2:3c:fe:
         f7:01:76:c0:a5:c9:20:6a:6e:51:28:a4:f0:52:46:7a:9e:95:
         95:96:18:73:df:c7:97:e4:e6:b9:db:f3:b6:cd:fc:ae:75:f2:
         bb:72:d6:a5:f8:7f:26:47:64:9b:03:33:a9:40:bb:2b:cb:59:
         31:c3:c9:ee:ab:b7:76:cf:ad:f5:c3:09:6b:35:89:18:75:dc:
         86:23:6b:ae:d3:76:14:dd:fe:74:e9:39:f7:7d:76:11:1f:80:
         b3:20:d0:a0:6b:ce:2f:22:b1:0c:3a:97:9e:68:6f:a9:f4:26:
         cc:42:c7:b2:a5:bb:61:bb:a5:b9:f7:48:90:41:9f:30:bf:ca:
         1a:23:e5:d6:d8:9f:1f:bc:8e:eb:f0:26:f4:58:60:de:be:0a:
         3f:e8:1c:3d:a5:a4:9f:ce:88:fb:f2:4d:91:03:fe:c4:88:00:
         70:da:23:1b:51:40:86:6a:aa:15:9e:cf:34:52:80:3b:86:d7:
         df:6b:22:1f:ee:67:89:4e:ef:dd:f7:e7:ac:fa:43:78:1e:88:
         65:8e:01:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:18:49 2026 by rpki-client