Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/3133382e33362e3234302e302f32322d3232203d3e20323634353839.roa
File:                     3133382e33362e3234302e302f32322d3232203d3e20323634353839.roa (raw, json)
Hash identifier:          KplgFKPQB82D32Qj8ATIPW3/uXSoctBTxxNs6b1xEYQ=
Subject key identifier:   76:6B:44:A9:90:F0:D1:CD:94:86:F5:C6:1A:80:99:41:AF:ED:F9:57
Certificate issuer:       /CN=8386FB28634856B6B9770AB37BF1A60579AFDAD9
Certificate serial:       4AE08167BC93698C687A8A4DD5B30736FDA64610
Authority key identifier: 83:86:FB:28:63:48:56:B6:B9:77:0A:B3:7B:F1:A6:05:79:AF:DA:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8386FB28634856B6B9770AB37BF1A60579AFDAD9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/3133382e33362e3234302e302f32322d3232203d3e20323634353839.roa
Signing time:             Fri 28 Aug 2026 14:43:51 +0000
ROA not before:           Fri 28 Aug 2026 14:38:51 +0000
ROA not after:            Fri 27 Aug 2027 14:43:51 +0000
asID:                     264589
IP address blocks:        138.36.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/8386FB28634856B6B9770AB37BF1A60579AFDAD9.crl
                          rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/8386FB28634856B6B9770AB37BF1A60579AFDAD9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8386FB28634856B6B9770AB37BF1A60579AFDAD9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 08:27:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e0:81:67:bc:93:69:8c:68:7a:8a:4d:d5:b3:07:36:fd:a6:46:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8386FB28634856B6B9770AB37BF1A60579AFDAD9
        Validity
            Not Before: Aug 28 14:38:51 2026 GMT
            Not After : Aug 27 14:43:51 2027 GMT
        Subject: CN=766B44A990F0D1CD9486F5C61A809941AFEDF957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:2b:ae:38:63:59:07:f7:0b:04:3e:5e:74:2b:
                    06:36:4d:1c:ca:93:26:11:71:ac:b2:56:1d:4b:3f:
                    9b:47:47:7c:38:d3:99:ac:a6:7c:6f:8c:38:8f:ca:
                    62:dd:23:31:ae:8d:1e:d8:b2:e2:a3:cf:40:d2:6a:
                    59:2f:bd:5a:92:9d:99:f0:29:5e:48:f2:1a:94:b2:
                    c5:df:f8:70:a9:e4:a0:89:8f:52:3b:4d:5c:b6:3c:
                    9c:60:0b:26:35:fb:89:0e:6d:9a:26:16:24:a2:a9:
                    9f:c5:90:15:31:89:25:ac:59:d3:93:e5:e7:1d:d9:
                    7c:b4:ca:77:d9:41:d2:1f:9e:4c:55:bd:01:30:2a:
                    36:b6:14:a8:c8:10:3c:c7:1d:a4:4d:47:a6:9f:5c:
                    ce:ea:e5:56:7b:5f:f4:c5:7c:50:97:ca:cb:38:bb:
                    47:9b:d7:b8:54:7f:87:66:0b:66:0e:4a:7b:65:8c:
                    39:60:4d:f7:86:e5:98:3d:6e:72:24:38:ee:5a:61:
                    64:fb:f2:7d:23:19:ef:e9:3d:0e:cf:43:ee:42:4f:
                    3d:53:f9:32:28:e0:30:b5:a2:a2:7e:1f:37:1d:e3:
                    9a:8c:79:03:bd:56:7d:94:ab:dd:c9:75:2f:dc:9e:
                    92:aa:be:2c:d0:55:c5:d6:ec:7e:a1:44:b8:d1:21:
                    24:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:6B:44:A9:90:F0:D1:CD:94:86:F5:C6:1A:80:99:41:AF:ED:F9:57
            X509v3 Authority Key Identifier:
                keyid:83:86:FB:28:63:48:56:B6:B9:77:0A:B3:7B:F1:A6:05:79:AF:DA:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/8386FB28634856B6B9770AB37BF1A60579AFDAD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8386FB28634856B6B9770AB37BF1A60579AFDAD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/3133382e33362e3234302e302f32322d3232203d3e20323634353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:d2:9c:4b:a9:f3:8f:be:ea:87:ea:d8:0f:50:d5:59:18:5e:
         34:88:f7:41:b6:54:8a:5a:8b:18:ec:72:28:55:e3:c9:9c:8c:
         b0:02:7b:ab:77:4c:ac:c2:75:a4:1a:04:be:23:de:30:24:fe:
         21:54:43:37:f4:e7:19:8a:3c:c2:2b:78:13:bc:c1:71:66:3f:
         6f:c4:8c:ce:15:74:c1:e9:3a:57:39:fe:2f:a8:0b:e6:72:3d:
         81:dc:e2:62:fe:24:d2:b8:67:da:97:17:c1:b4:21:90:ef:22:
         19:4b:67:29:c1:d4:2d:18:90:5c:a9:d5:25:f7:5e:dd:2b:f1:
         fc:6d:95:1e:cb:70:12:50:d2:09:a3:89:7f:c1:b9:d0:f4:78:
         b8:44:72:58:e8:63:37:e8:51:ea:47:c9:f5:2d:55:cc:92:c6:
         9c:ab:57:ef:96:f2:2d:d8:1d:d1:6b:35:d1:e5:db:17:be:b0:
         98:5c:ee:ee:a9:c4:61:2e:f8:ff:53:35:6c:05:e0:6a:e2:74:
         e5:0f:9b:52:47:8a:ab:6b:f6:3e:e6:e7:1a:21:cc:30:4b:6c:
         96:c5:5a:66:b7:8d:46:46:63:c4:0a:dd:de:e7:c3:e1:d9:19:
         c2:79:18:8c:b2:42:f1:07:77:17:38:50:1c:e3:ec:5a:ba:89:
         f9:20:1e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 15:09:27 2026 by rpki-client