Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/3133382e39372e32322e302f32342d3234203d3e20323634313132.roa
File:                     3133382e39372e32322e302f32342d3234203d3e20323634313132.roa (raw, json)
Hash identifier:          75VZ5irYsTT4OyjPrWXpdp0RRlwkpJy065zbdsm1F/Q=
Subject key identifier:   0B:04:C6:EE:EC:59:9D:79:3C:30:B5:9A:A5:17:F2:E7:4A:3B:2A:3B
Certificate issuer:       /CN=A72039C80A7A3A4EF3A2115F93A143C78CACBCF1
Certificate serial:       7C0989C9351BF31B881D8BA2980CF4A2767A9CC5
Authority key identifier: A7:20:39:C8:0A:7A:3A:4E:F3:A2:11:5F:93:A1:43:C7:8C:AC:BC:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A72039C80A7A3A4EF3A2115F93A143C78CACBCF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/3133382e39372e32322e302f32342d3234203d3e20323634313132.roa
Signing time:             Fri 05 Jun 2026 02:01:05 +0000
ROA not before:           Fri 05 Jun 2026 01:56:05 +0000
ROA not after:            Fri 04 Jun 2027 02:01:05 +0000
asID:                     264112
IP address blocks:        138.97.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A72039C80A7A3A4EF3A2115F93A143C78CACBCF1.crl
                          rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A72039C80A7A3A4EF3A2115F93A143C78CACBCF1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A72039C80A7A3A4EF3A2115F93A143C78CACBCF1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 15:22:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:09:89:c9:35:1b:f3:1b:88:1d:8b:a2:98:0c:f4:a2:76:7a:9c:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A72039C80A7A3A4EF3A2115F93A143C78CACBCF1
        Validity
            Not Before: Jun  5 01:56:05 2026 GMT
            Not After : Jun  4 02:01:05 2027 GMT
        Subject: CN=0B04C6EEEC599D793C30B59AA517F2E74A3B2A3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:87:58:3b:7f:c1:46:dc:45:75:2c:e5:a1:30:
                    d6:56:cb:33:1e:f8:60:75:f7:6d:06:7e:82:69:cc:
                    81:0b:61:41:0f:6c:6f:0a:03:bc:b5:bd:7b:7d:91:
                    ac:35:b1:4b:52:4a:b4:da:db:d4:51:27:36:75:37:
                    af:53:14:59:da:13:80:69:6a:5c:9e:66:4f:85:90:
                    39:0b:5f:f4:d4:88:fb:eb:9a:d4:8f:91:f8:dc:2a:
                    63:ae:be:21:af:01:ad:41:7c:54:a8:81:97:9a:04:
                    25:81:7e:a5:a8:88:ec:08:17:f2:5b:8a:fa:fd:08:
                    ca:a6:6b:48:a9:8d:1d:e5:62:b0:fa:02:11:b9:28:
                    0e:5d:cd:c3:f9:51:07:b8:fb:61:10:67:f8:1f:21:
                    35:d1:6e:ef:f8:c9:f7:fa:4a:e5:1b:d2:fe:04:d4:
                    23:fc:c6:e8:50:8c:1d:b3:de:7e:d6:6b:3d:e2:3b:
                    40:98:e3:73:40:bb:96:ad:1c:c4:dc:6d:b2:ef:78:
                    0d:43:f5:42:6a:c8:f4:3c:8c:c9:e5:fb:0c:d4:43:
                    e0:11:64:83:2c:d0:29:c9:aa:47:12:55:79:b8:29:
                    d1:79:e0:a4:f2:d4:65:bc:60:42:49:cf:90:7f:b0:
                    c3:fe:cf:4d:a9:6b:8b:29:28:23:5b:54:c4:04:d8:
                    30:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:04:C6:EE:EC:59:9D:79:3C:30:B5:9A:A5:17:F2:E7:4A:3B:2A:3B
            X509v3 Authority Key Identifier:
                keyid:A7:20:39:C8:0A:7A:3A:4E:F3:A2:11:5F:93:A1:43:C7:8C:AC:BC:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A72039C80A7A3A4EF3A2115F93A143C78CACBCF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A72039C80A7A3A4EF3A2115F93A143C78CACBCF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/3133382e39372e32322e302f32342d3234203d3e20323634313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:ed:53:7b:78:7e:28:0e:25:55:c3:14:62:ac:91:d7:64:65:
         90:18:87:0a:3a:fc:85:b8:90:50:6e:30:df:c0:cc:3d:b3:79:
         b7:d0:d8:42:8d:73:d4:d5:56:19:d7:6b:27:3c:d2:27:80:8c:
         a2:e3:29:c0:d0:03:11:54:23:a8:68:36:84:22:6f:ed:20:63:
         51:4c:3a:fd:42:bb:80:4e:b2:df:03:89:5f:6c:a2:0d:c4:87:
         cf:34:aa:36:ef:ed:ca:d1:dc:4f:4b:f7:1f:61:ab:99:8d:07:
         0e:d2:3a:27:01:c0:9a:15:00:14:77:de:d4:9c:bf:ba:47:ec:
         ca:e7:65:f3:39:4e:72:35:58:72:a5:24:9a:83:1e:90:07:f7:
         7b:d8:f6:14:5c:05:45:de:dc:a3:de:9c:76:1c:21:7d:ca:53:
         bc:f5:bf:47:b2:52:ab:04:e9:df:88:2e:56:bb:f5:e8:e0:5b:
         03:d8:0d:19:e6:c2:1d:85:24:82:5f:90:0a:d8:b0:cd:c5:62:
         ff:89:71:dd:f1:e0:91:ff:72:4a:85:f3:9c:f9:54:9d:fe:e5:
         3e:68:48:f0:30:a4:2e:a7:d8:30:d1:81:7d:29:53:2d:a4:64:
         4f:39:2f:4a:20:95:ff:8f:2c:5b:76:83:2a:ca:e7:70:f3:58:
         1b:ba:76:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:13:28 2026 by rpki-client