Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7cadQc5zU5yEbQtG3vGTkNF7Q4XtjnUKsGyc2eVPVxd/0/3133382e3132322e33322e302f32322d3234203d3e20323634333130.roa
File:                     3133382e3132322e33322e302f32322d3234203d3e20323634333130.roa (raw, json)
Hash identifier:          9sRiApgqWUPeqNPZielx+mB+yYHlNfufRs5tBB0qhWI=
Subject key identifier:   65:CA:B2:94:67:40:35:4E:B4:AC:C5:0E:FA:58:2F:84:E6:10:01:93
Certificate issuer:       /CN=ADBBDC22DFFC572346705DC21FD364B79726B65C
Certificate serial:       2EECEDF08E055B64B88CF8B18607413D43EDB085
Authority key identifier: AD:BB:DC:22:DF:FC:57:23:46:70:5D:C2:1F:D3:64:B7:97:26:B6:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADBBDC22DFFC572346705DC21FD364B79726B65C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7cadQc5zU5yEbQtG3vGTkNF7Q4XtjnUKsGyc2eVPVxd/0/3133382e3132322e33322e302f32322d3234203d3e20323634333130.roa
Signing time:             Wed 10 Jun 2026 17:19:38 +0000
ROA not before:           Wed 10 Jun 2026 17:14:38 +0000
ROA not after:            Wed 09 Jun 2027 17:19:38 +0000
asID:                     264310
IP address blocks:        138.122.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7cadQc5zU5yEbQtG3vGTkNF7Q4XtjnUKsGyc2eVPVxd/0/ADBBDC22DFFC572346705DC21FD364B79726B65C.crl
                          rsync://rpki-repo.registro.br/repo/B7cadQc5zU5yEbQtG3vGTkNF7Q4XtjnUKsGyc2eVPVxd/0/ADBBDC22DFFC572346705DC21FD364B79726B65C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADBBDC22DFFC572346705DC21FD364B79726B65C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 00:46:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ec:ed:f0:8e:05:5b:64:b8:8c:f8:b1:86:07:41:3d:43:ed:b0:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADBBDC22DFFC572346705DC21FD364B79726B65C
        Validity
            Not Before: Jun 10 17:14:38 2026 GMT
            Not After : Jun  9 17:19:38 2027 GMT
        Subject: CN=65CAB2946740354EB4ACC50EFA582F84E6100193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:07:a7:65:45:32:ed:81:f8:b2:b6:bc:f5:47:
                    f5:6c:7f:c0:d3:d1:29:a5:94:e5:4a:d8:d4:66:2b:
                    0e:e7:1c:60:6e:91:f6:dc:5c:2e:9a:f0:cf:8b:dd:
                    9e:b3:1d:08:a0:94:3b:08:15:ba:df:e5:3c:4b:d4:
                    ae:84:2d:00:28:28:78:87:65:53:3c:7b:26:f2:5e:
                    f7:86:a0:95:36:f7:59:7b:59:d7:b8:fb:9d:e9:84:
                    c4:c8:b6:1a:18:10:2c:3a:bf:d3:5a:c3:ca:18:4d:
                    18:f2:59:08:70:c2:86:d4:db:cf:e2:af:c9:2d:4f:
                    1e:8d:dd:bd:42:04:42:11:7e:e3:c2:25:c9:b5:eb:
                    e8:97:8f:64:03:3c:46:31:89:8f:4c:84:1e:4d:2e:
                    ad:2f:99:df:2a:db:c3:15:6c:63:23:08:e4:98:9a:
                    01:a5:f1:44:83:6a:d7:20:a1:97:a3:f5:09:41:43:
                    41:d6:80:da:9f:54:92:94:25:49:2b:8e:c6:10:43:
                    a5:54:0a:1c:30:d8:1d:94:43:5b:c0:c8:10:b6:75:
                    9c:ee:96:f0:a7:55:73:49:ae:af:d5:c3:b9:c4:02:
                    07:05:95:34:5a:3b:cb:0d:06:1d:e4:21:5b:58:12:
                    da:ff:6a:b4:40:b3:4b:4b:4a:de:09:7d:42:13:5c:
                    39:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:CA:B2:94:67:40:35:4E:B4:AC:C5:0E:FA:58:2F:84:E6:10:01:93
            X509v3 Authority Key Identifier:
                keyid:AD:BB:DC:22:DF:FC:57:23:46:70:5D:C2:1F:D3:64:B7:97:26:B6:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7cadQc5zU5yEbQtG3vGTkNF7Q4XtjnUKsGyc2eVPVxd/0/ADBBDC22DFFC572346705DC21FD364B79726B65C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADBBDC22DFFC572346705DC21FD364B79726B65C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7cadQc5zU5yEbQtG3vGTkNF7Q4XtjnUKsGyc2eVPVxd/0/3133382e3132322e33322e302f32322d3234203d3e20323634333130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:13:e4:88:68:46:8b:00:ea:b5:2e:18:36:0b:8f:6c:55:c2:
         72:8f:1b:a1:11:ff:88:42:04:bf:db:34:75:2a:f7:3a:c3:d3:
         08:99:af:4c:59:e8:8f:aa:2c:64:86:3a:7b:3e:d0:c2:fa:b5:
         27:00:0e:c0:1e:99:09:39:09:40:b0:40:ff:38:5c:e6:57:bc:
         a2:2f:c1:50:3a:d5:16:5d:1d:31:8b:b6:8c:7e:ff:e2:30:7f:
         de:63:a4:ed:b5:e4:03:97:f4:71:a8:64:07:c5:fe:85:c9:b0:
         20:38:c0:9a:ec:71:97:6e:d8:e9:f3:70:bc:bc:b2:60:9b:dc:
         64:3d:13:a1:e2:02:17:4e:94:46:20:7b:5d:a7:0c:8f:5f:7a:
         f6:80:53:aa:f7:9d:2a:6a:e3:30:2a:87:3d:9e:0f:3b:18:31:
         5d:59:ce:b7:52:3d:6d:77:5a:46:73:74:45:0a:eb:63:be:8d:
         83:1e:e9:d9:2d:16:74:ab:9e:b0:97:74:e3:a0:c6:11:fa:b9:
         f2:ff:31:ee:12:0d:68:f2:c6:88:97:17:e0:ef:ec:ae:ad:23:
         3b:07:b5:96:cd:9c:78:3a:da:1b:a4:6f:77:b2:ec:8d:a3:c0:
         70:93:b3:68:64:65:9f:cb:76:02:44:84:8a:80:ef:d5:9c:fc:
         5a:60:2a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:57:49 2026 by rpki-client