Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9osFR31ygvVe7eHbAv5ZuxQQ252Wc4CpuP11eYFti6sZ/0/3133382e3131372e3138342e302f32322d3234203d3e20323634323434.roa
File:                     3133382e3131372e3138342e302f32322d3234203d3e20323634323434.roa (raw, json)
Hash identifier:          tny8gWHXYccx3dyyIXybpnbOOgENAQbkoTWQOxnDMhg=
Subject key identifier:   64:56:1F:B3:93:20:89:B2:42:FE:18:F9:C6:A4:74:49:1C:32:EA:61
Certificate issuer:       /CN=D7B9D90D2FA1E622BB66B3A55D920BA6C2C05648
Certificate serial:       4CE61F4CFE897AAF844BFBA47BCD5094EE9BDD50
Authority key identifier: D7:B9:D9:0D:2F:A1:E6:22:BB:66:B3:A5:5D:92:0B:A6:C2:C0:56:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B9D90D2FA1E622BB66B3A55D920BA6C2C05648.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9osFR31ygvVe7eHbAv5ZuxQQ252Wc4CpuP11eYFti6sZ/0/3133382e3131372e3138342e302f32322d3234203d3e20323634323434.roa
Signing time:             Wed 27 May 2026 20:29:07 +0000
ROA not before:           Wed 27 May 2026 20:24:07 +0000
ROA not after:            Wed 26 May 2027 20:29:07 +0000
asID:                     264244
IP address blocks:        138.117.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9osFR31ygvVe7eHbAv5ZuxQQ252Wc4CpuP11eYFti6sZ/0/D7B9D90D2FA1E622BB66B3A55D920BA6C2C05648.crl
                          rsync://rpki-repo.registro.br/repo/9osFR31ygvVe7eHbAv5ZuxQQ252Wc4CpuP11eYFti6sZ/0/D7B9D90D2FA1E622BB66B3A55D920BA6C2C05648.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B9D90D2FA1E622BB66B3A55D920BA6C2C05648.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 13:20:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e6:1f:4c:fe:89:7a:af:84:4b:fb:a4:7b:cd:50:94:ee:9b:dd:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7B9D90D2FA1E622BB66B3A55D920BA6C2C05648
        Validity
            Not Before: May 27 20:24:07 2026 GMT
            Not After : May 26 20:29:07 2027 GMT
        Subject: CN=64561FB3932089B242FE18F9C6A474491C32EA61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:07:16:f5:81:f7:c2:75:b2:53:62:f8:15:58:
                    3f:15:6f:0c:50:9c:31:ff:59:9a:e9:79:5f:79:b9:
                    7f:98:da:c4:2e:ba:24:34:bc:af:3d:91:4c:f4:77:
                    19:d3:05:1f:f0:6d:e9:bd:49:b0:4c:b1:de:83:72:
                    4f:70:00:ea:be:80:6c:8e:06:6b:72:a3:94:3b:ed:
                    a0:e0:2b:63:2d:fd:58:a2:19:13:53:d4:ab:a2:94:
                    75:87:3c:07:e8:e0:e4:ab:e7:a2:c6:f7:9f:fa:c5:
                    46:6e:d1:c5:eb:c7:b0:d1:f7:ce:e8:1b:a9:ce:a5:
                    10:88:44:73:b9:cf:8c:11:f5:c1:3f:08:de:23:7e:
                    60:7b:7e:3c:a8:f1:06:a8:65:97:fc:02:80:29:11:
                    f8:c9:99:ec:ce:f0:c0:7d:ca:55:c9:ca:e2:c2:56:
                    75:ae:bd:95:38:ac:e0:70:ee:ab:09:31:23:82:b5:
                    8e:e3:f7:70:ee:1a:e8:c0:5d:41:48:58:68:33:cc:
                    b8:35:7c:19:b6:43:1a:e5:29:1a:7a:f5:89:2d:19:
                    a2:3a:07:5a:4a:0e:89:5c:07:79:50:79:a3:91:a0:
                    f9:18:b0:4d:8a:48:96:93:8e:8e:28:bc:9d:75:67:
                    14:00:76:35:3c:5c:ba:f5:04:79:0e:f0:cf:b5:87:
                    2e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:56:1F:B3:93:20:89:B2:42:FE:18:F9:C6:A4:74:49:1C:32:EA:61
            X509v3 Authority Key Identifier:
                keyid:D7:B9:D9:0D:2F:A1:E6:22:BB:66:B3:A5:5D:92:0B:A6:C2:C0:56:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9osFR31ygvVe7eHbAv5ZuxQQ252Wc4CpuP11eYFti6sZ/0/D7B9D90D2FA1E622BB66B3A55D920BA6C2C05648.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B9D90D2FA1E622BB66B3A55D920BA6C2C05648.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9osFR31ygvVe7eHbAv5ZuxQQ252Wc4CpuP11eYFti6sZ/0/3133382e3131372e3138342e302f32322d3234203d3e20323634323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:21:76:23:66:1e:83:7d:24:cd:ca:d4:b3:a4:a1:a7:74:72:
         08:a1:10:0a:f7:66:9a:e2:d0:73:42:ed:f8:ee:10:6e:a5:68:
         f0:1b:3f:8c:6c:c6:7c:56:42:19:83:c9:2e:ce:a9:13:72:cd:
         41:de:ec:44:c2:3d:af:fb:75:81:a9:70:0f:c0:9d:e5:b5:9f:
         71:10:cf:12:b1:bd:b0:cf:df:24:ba:f0:53:e9:92:c3:e8:eb:
         ee:79:61:1c:47:24:51:39:1b:61:49:74:27:93:59:2c:c7:84:
         22:c5:90:73:b4:c3:58:d4:30:27:2f:5b:d6:1e:2e:26:16:f2:
         01:53:ca:dd:bd:38:84:49:e5:91:9d:5a:83:f2:1c:c8:75:90:
         69:cb:62:ca:67:ad:37:50:62:af:36:35:3e:a8:d6:82:5d:e7:
         75:81:23:f1:96:20:a7:4a:61:11:34:7f:9e:b1:2d:a3:e9:e1:
         0a:75:61:fe:24:02:6b:4b:83:e2:ac:b8:9f:f9:86:14:83:59:
         8f:8f:93:77:f4:9c:1d:7d:76:86:c0:e6:49:dd:65:fe:d1:d9:
         6d:8c:78:ab:9c:0a:1b:8b:a9:d8:9c:1a:25:5d:52:9f:4d:f8:
         4e:5b:f9:17:de:ec:aa:ce:7c:fa:6d:d1:6c:7e:93:8b:13:d5:
         1c:65:8b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:34:59 2026 by rpki-client