Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E4QBSVrFvFjV7y2UPSLM7iHePPucC5fS6oasZ84CBDVb/0/3133382e302e32382e302f32322d3234203d3e20323634353239.roa
File:                     3133382e302e32382e302f32322d3234203d3e20323634353239.roa (raw, json)
Hash identifier:          1hOVnfmyv/UnMCV9hA0y4JdNx1WYNfUn4hyC7afgBTA=
Subject key identifier:   CA:F9:DC:17:5B:CA:BB:35:81:38:EC:EE:12:75:EB:55:44:42:B9:EA
Certificate issuer:       /CN=FD1351B4E96DAAC09EE456EE97B295D0E0ACD8F4
Certificate serial:       796BCA37516D37F773FE737322BFB22CC7D185D5
Authority key identifier: FD:13:51:B4:E9:6D:AA:C0:9E:E4:56:EE:97:B2:95:D0:E0:AC:D8:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD1351B4E96DAAC09EE456EE97B295D0E0ACD8F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E4QBSVrFvFjV7y2UPSLM7iHePPucC5fS6oasZ84CBDVb/0/3133382e302e32382e302f32322d3234203d3e20323634353239.roa
Signing time:             Fri 12 Jun 2026 12:53:01 +0000
ROA not before:           Fri 12 Jun 2026 12:48:01 +0000
ROA not after:            Fri 11 Jun 2027 12:53:01 +0000
asID:                     264529
IP address blocks:        138.0.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E4QBSVrFvFjV7y2UPSLM7iHePPucC5fS6oasZ84CBDVb/0/FD1351B4E96DAAC09EE456EE97B295D0E0ACD8F4.crl
                          rsync://rpki-repo.registro.br/repo/E4QBSVrFvFjV7y2UPSLM7iHePPucC5fS6oasZ84CBDVb/0/FD1351B4E96DAAC09EE456EE97B295D0E0ACD8F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD1351B4E96DAAC09EE456EE97B295D0E0ACD8F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 11:08:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:6b:ca:37:51:6d:37:f7:73:fe:73:73:22:bf:b2:2c:c7:d1:85:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD1351B4E96DAAC09EE456EE97B295D0E0ACD8F4
        Validity
            Not Before: Jun 12 12:48:01 2026 GMT
            Not After : Jun 11 12:53:01 2027 GMT
        Subject: CN=CAF9DC175BCABB358138ECEE1275EB554442B9EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b9:fa:bf:4c:91:ad:8c:cc:e8:9d:16:42:44:
                    6c:54:81:fa:55:c7:19:3f:e6:dc:cc:67:7b:20:d6:
                    7b:80:31:6d:77:47:f4:35:33:da:60:cc:89:d2:3b:
                    d5:32:b2:fc:af:bc:fe:1c:35:0a:b6:7a:2b:2e:36:
                    5c:a6:00:80:dc:49:da:7a:ba:ec:df:2f:b7:26:cb:
                    64:67:93:05:c0:69:39:13:83:db:32:db:b2:dd:a9:
                    fa:cc:85:3e:88:62:b9:5b:a0:58:d1:56:57:05:df:
                    0c:0f:7c:90:61:ff:6e:b2:f3:db:79:82:85:6b:90:
                    b0:9a:43:af:59:34:0a:08:4c:c9:df:df:41:6b:46:
                    27:7a:f7:6a:e5:4f:1a:2e:5b:4d:94:46:ea:cc:7a:
                    2d:ce:75:f1:a5:9e:9c:c9:3f:9c:e9:16:24:13:04:
                    be:c8:b2:15:38:a1:41:d4:34:8a:94:50:ed:3c:57:
                    95:09:88:b2:4f:29:2e:ee:af:4b:43:ca:5b:6c:84:
                    8d:f4:fe:19:59:a8:75:69:78:df:8e:10:ef:12:15:
                    05:fd:8f:56:24:04:12:e2:7e:29:0c:c7:13:5f:d3:
                    f9:e3:d5:b4:45:20:a8:04:d5:b7:f0:a7:ce:31:74:
                    2c:e8:a1:ab:b5:40:38:44:73:6d:9f:c7:d7:f7:15:
                    96:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F9:DC:17:5B:CA:BB:35:81:38:EC:EE:12:75:EB:55:44:42:B9:EA
            X509v3 Authority Key Identifier:
                keyid:FD:13:51:B4:E9:6D:AA:C0:9E:E4:56:EE:97:B2:95:D0:E0:AC:D8:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E4QBSVrFvFjV7y2UPSLM7iHePPucC5fS6oasZ84CBDVb/0/FD1351B4E96DAAC09EE456EE97B295D0E0ACD8F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD1351B4E96DAAC09EE456EE97B295D0E0ACD8F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E4QBSVrFvFjV7y2UPSLM7iHePPucC5fS6oasZ84CBDVb/0/3133382e302e32382e302f32322d3234203d3e20323634353239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:3f:b6:b9:d3:31:c8:8e:19:7a:58:44:7f:b5:e0:de:4c:fe:
         26:9b:58:7b:15:bb:a5:39:6a:ae:52:06:7d:17:58:8c:02:de:
         7f:7a:6a:be:84:dc:30:48:7e:51:56:c6:30:d8:01:79:98:84:
         97:e0:95:0f:af:2e:13:3f:d6:bd:5a:7e:b1:06:b3:02:04:b0:
         52:ef:ca:1c:be:b4:b7:38:31:95:34:d2:39:7d:34:e9:59:d3:
         b0:3f:0d:c3:2c:14:ae:e1:6d:e0:e5:33:e9:63:e2:2b:32:c4:
         e1:2a:10:f8:a5:ea:8a:bf:93:bf:13:0b:2e:ae:47:b5:88:32:
         af:ef:2b:63:fd:29:db:65:83:6a:56:9a:99:1c:16:f4:85:d2:
         0a:a9:2d:22:40:68:0f:79:60:8c:22:de:b6:18:7f:53:28:c6:
         cf:9e:83:67:ce:7d:a5:e8:a2:84:21:47:46:01:bf:86:6a:ee:
         fb:29:3e:3c:46:8c:0a:6c:75:90:df:d3:a0:ff:df:75:14:b4:
         fb:56:40:eb:35:f2:42:8b:a6:9e:60:ff:df:24:b0:0c:28:49:
         33:75:a2:3a:25:e9:3b:19:53:fe:00:f0:d1:4f:09:72:76:d6:
         52:d5:0b:f3:e4:bc:b1:e6:40:c3:e9:88:30:4d:bf:7c:f9:11:
         4c:af:a7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:44:48 2026 by rpki-client