Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3133382e302e3139312e302f32342d3234203d3e203532383338.roa
File:                     3133382e302e3139312e302f32342d3234203d3e203532383338.roa (raw, json)
Hash identifier:          G2yzsvoQ5OsefPzzbQj3K4ozHWKRC8o2Og/ovTakQxw=
Subject key identifier:   5E:62:B7:5C:7D:61:30:88:85:94:B4:CA:AB:62:9F:23:08:E4:71:1B
Certificate issuer:       /CN=24159525D9783B62253D92C07EC4EB5CB3204829
Certificate serial:       6B5B5DEF668B8692CA17E66B89834A35A03C7067
Authority key identifier: 24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3133382e302e3139312e302f32342d3234203d3e203532383338.roa
Signing time:             Wed 04 Nov 2026 01:21:29 +0000
ROA not before:           Wed 04 Nov 2026 01:16:29 +0000
ROA not after:            Wed 03 Nov 2027 01:21:29 +0000
asID:                     52838
IP address blocks:        138.0.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
                          rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 21:19:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:5b:5d:ef:66:8b:86:92:ca:17:e6:6b:89:83:4a:35:a0:3c:70:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24159525D9783B62253D92C07EC4EB5CB3204829
        Validity
            Not Before: Nov  4 01:16:29 2026 GMT
            Not After : Nov  3 01:21:29 2027 GMT
        Subject: CN=5E62B75C7D6130888594B4CAAB629F2308E4711B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0a:ed:54:25:d0:d7:0a:d0:22:e9:ca:0a:2a:
                    d9:51:46:ae:be:28:4a:40:cb:44:84:1d:d8:8b:c0:
                    ec:72:25:b6:8f:00:f5:f3:10:bc:2a:6e:23:6a:5e:
                    ca:b2:bc:5a:cf:16:d7:62:ae:64:ad:83:2c:1b:00:
                    6d:1b:b8:be:aa:d2:ee:ac:53:23:af:a2:2e:ed:bb:
                    6f:b4:f5:70:08:ce:38:73:d6:6c:ce:6d:1c:e2:0b:
                    08:d8:e9:16:99:d0:29:aa:91:99:2d:b0:c9:ce:2f:
                    5b:56:4e:0c:49:eb:70:06:97:40:da:29:3a:38:b0:
                    82:fc:d2:4d:c5:1f:dd:0f:19:1e:14:81:cf:5a:f6:
                    b6:01:a1:f0:94:69:29:95:fb:9f:96:17:b2:e6:b4:
                    3a:53:d7:32:a9:73:96:82:5d:d0:81:35:a5:c5:e5:
                    b1:3c:6d:72:a7:43:7c:c4:ba:25:e7:2e:d6:a3:6e:
                    e6:29:8c:fd:98:5a:1c:ad:ed:13:b0:59:fe:73:88:
                    8d:f9:75:94:60:0c:30:2c:96:91:d9:ad:a5:6f:9a:
                    17:bb:69:b1:df:f2:42:eb:d2:74:73:70:3f:61:ee:
                    ed:6e:7e:86:08:bf:35:11:3c:b9:15:1d:30:cb:56:
                    d6:71:bb:1a:ec:44:ba:ae:39:1a:7a:31:15:76:aa:
                    cc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:62:B7:5C:7D:61:30:88:85:94:B4:CA:AB:62:9F:23:08:E4:71:1B
            X509v3 Authority Key Identifier:
                keyid:24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3133382e302e3139312e302f32342d3234203d3e203532383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:14:16:88:d5:89:1a:d4:5e:75:2f:d3:11:20:d3:fe:ce:0a:
         5f:0a:57:e7:7d:16:4f:c4:e8:cf:ce:b4:8a:5d:bf:68:0a:bb:
         c7:97:b3:85:98:93:5f:1e:49:e4:bc:25:4f:ed:4f:d8:08:67:
         5e:75:1b:d3:c9:ab:8d:26:8f:4b:b7:c6:98:16:7c:c9:fd:27:
         ef:a8:cb:fe:a1:a6:7c:17:9b:70:ba:58:a9:0e:da:1d:7e:64:
         00:e9:1f:d6:ee:2a:52:9b:eb:ad:82:05:f3:de:20:99:98:92:
         64:4b:d1:9e:92:cf:3f:6c:36:65:59:ab:f0:07:ff:36:86:4f:
         b7:09:48:47:e3:e6:26:6f:6c:5c:2b:4f:f4:37:2b:c5:78:c8:
         67:c3:4f:b1:6f:ca:76:25:ec:b0:5c:f0:a2:8c:d6:22:d7:a6:
         19:8d:c2:fa:f2:61:95:fb:d4:12:69:58:f3:41:03:02:53:e2:
         4f:33:d0:e3:98:aa:22:cc:0a:5f:d9:e0:42:9c:e5:3a:78:b9:
         7e:ba:20:3d:20:6d:91:01:d4:7b:1e:fe:71:7a:ed:28:17:6a:
         fa:87:db:f4:01:27:24:60:35:44:4e:16:c3:32:3c:36:94:21:
         69:32:d9:36:4c:ee:5a:79:98:7d:27:c2:07:7c:73:6a:75:50:
         00:e4:dd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:20:41 2026 by rpki-client