Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FJj14DHw1LFwNbGKYyTUgnYNkjDTYm97nKNmM886uZ66/0/3133382e39372e3234302e302f32322d3332203d3e20323634323137.roa
File:                     3133382e39372e3234302e302f32322d3332203d3e20323634323137.roa (raw, json)
Hash identifier:          8FOdBz0YGnW05LA9Mbpc0ww/5LEHAN56csLDaz/79gU=
Subject key identifier:   80:82:C5:A3:E1:53:B2:54:B9:EA:EC:F2:30:96:66:B2:C1:BC:46:E6
Certificate issuer:       /CN=36477FCF0E92EFE73476E16A0AC5A6C8458B29E1
Certificate serial:       25D60FF562F502017007F8422F826B893E6E9BD8
Authority key identifier: 36:47:7F:CF:0E:92:EF:E7:34:76:E1:6A:0A:C5:A6:C8:45:8B:29:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36477FCF0E92EFE73476E16A0AC5A6C8458B29E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FJj14DHw1LFwNbGKYyTUgnYNkjDTYm97nKNmM886uZ66/0/3133382e39372e3234302e302f32322d3332203d3e20323634323137.roa
Signing time:             Fri 05 Jun 2026 16:17:19 +0000
ROA not before:           Fri 05 Jun 2026 16:12:19 +0000
ROA not after:            Fri 04 Jun 2027 16:17:19 +0000
asID:                     264217
IP address blocks:        138.97.240.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FJj14DHw1LFwNbGKYyTUgnYNkjDTYm97nKNmM886uZ66/0/36477FCF0E92EFE73476E16A0AC5A6C8458B29E1.crl
                          rsync://rpki-repo.registro.br/repo/FJj14DHw1LFwNbGKYyTUgnYNkjDTYm97nKNmM886uZ66/0/36477FCF0E92EFE73476E16A0AC5A6C8458B29E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36477FCF0E92EFE73476E16A0AC5A6C8458B29E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 23:08:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:d6:0f:f5:62:f5:02:01:70:07:f8:42:2f:82:6b:89:3e:6e:9b:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36477FCF0E92EFE73476E16A0AC5A6C8458B29E1
        Validity
            Not Before: Jun  5 16:12:19 2026 GMT
            Not After : Jun  4 16:17:19 2027 GMT
        Subject: CN=8082C5A3E153B254B9EAECF2309666B2C1BC46E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:8b:4f:cb:9a:44:87:e9:3e:38:ed:63:7a:9c:
                    c9:40:33:e3:b7:60:06:f7:bd:2c:a7:85:88:87:97:
                    3e:40:47:54:d5:a7:44:66:06:08:16:89:8e:b9:a2:
                    8c:ff:2e:47:d7:c2:a9:c2:27:ce:0e:56:74:54:e4:
                    21:e7:a4:75:25:6c:26:07:70:e0:28:7b:a3:c8:55:
                    9e:ff:4e:df:45:77:e5:e0:ba:4a:0d:63:b4:dc:bf:
                    ff:0a:32:48:b2:71:31:8a:4a:47:01:9c:1a:64:a9:
                    b9:28:33:17:6d:bc:53:c2:e3:f1:65:d2:5d:c1:58:
                    6e:03:2b:3b:0e:e9:f1:61:c8:91:0a:42:5c:3e:18:
                    07:e7:e3:35:62:da:f8:70:56:bc:33:2d:09:e1:5f:
                    a1:ac:f1:61:d2:7f:e7:12:f1:e5:06:63:cc:46:74:
                    e7:56:d0:c5:8c:a3:78:c5:b4:11:80:bb:46:b8:32:
                    69:35:52:4a:6a:23:97:e8:1a:29:8c:5c:b1:37:01:
                    ae:a6:cd:76:d5:0a:72:be:50:c8:ef:60:48:3c:95:
                    bd:42:de:38:ad:d7:62:1d:99:89:ff:78:af:05:8f:
                    8d:03:bf:e3:53:60:d7:9e:f0:f1:cc:f7:b5:f1:7c:
                    45:06:db:aa:f9:7c:36:d8:bd:02:00:1c:33:88:74:
                    aa:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:82:C5:A3:E1:53:B2:54:B9:EA:EC:F2:30:96:66:B2:C1:BC:46:E6
            X509v3 Authority Key Identifier:
                keyid:36:47:7F:CF:0E:92:EF:E7:34:76:E1:6A:0A:C5:A6:C8:45:8B:29:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FJj14DHw1LFwNbGKYyTUgnYNkjDTYm97nKNmM886uZ66/0/36477FCF0E92EFE73476E16A0AC5A6C8458B29E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36477FCF0E92EFE73476E16A0AC5A6C8458B29E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FJj14DHw1LFwNbGKYyTUgnYNkjDTYm97nKNmM886uZ66/0/3133382e39372e3234302e302f32322d3332203d3e20323634323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:ed:70:13:60:d9:2b:62:3e:b7:0e:b6:5d:74:5e:a5:dc:33:
         b5:07:37:d3:47:92:28:2e:65:02:72:c7:6b:33:78:50:c9:71:
         10:09:d4:fa:a5:03:bc:13:03:4e:5f:78:ca:7e:5c:6b:77:2f:
         96:40:a4:57:a9:9c:30:ea:73:ad:6b:92:14:58:5d:9f:66:c6:
         c0:bf:4e:54:1c:b3:a5:ba:08:a5:45:d7:39:b1:77:03:1a:4a:
         d7:06:c8:dc:21:c1:07:ce:3d:a1:37:ea:c5:4f:ae:1f:fc:59:
         da:11:69:31:70:b1:db:4d:eb:04:c9:4f:17:f2:d0:15:9d:52:
         56:b4:69:a4:39:05:6a:fa:53:39:1c:50:2e:6f:0f:7b:4c:be:
         59:90:b7:f5:8c:ac:81:bc:b3:c0:c7:a8:13:4d:c4:58:27:9b:
         a1:d8:7d:ea:25:c3:b0:37:19:58:64:d5:34:fd:7a:43:38:c6:
         3c:fd:91:f5:13:91:cd:2f:b9:d6:18:cb:2b:c4:2e:d1:d2:84:
         aa:d1:9b:6e:f1:31:bf:21:89:70:c9:9f:78:6f:33:34:10:9f:
         3f:81:63:87:65:bb:25:b3:08:e9:1e:c8:e8:47:18:4a:2d:45:
         12:ef:74:f3:2e:61:90:55:da:6e:06:3f:fc:91:6e:04:cd:01:
         1d:7a:3a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:41:09 2026 by rpki-client