Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/3133382e33362e3234302e302f32342d3234203d3e20323634353839.roa
File:                     3133382e33362e3234302e302f32342d3234203d3e20323634353839.roa (raw, json)
Hash identifier:          eKJ4Rsd2veituj7KfJ4G94EZYiQ+ziDpIf0AY6+EC1g=
Subject key identifier:   F8:11:1E:DF:04:15:80:7C:B3:C5:DE:5C:4B:6F:2A:C1:68:41:36:9C
Certificate issuer:       /CN=8386FB28634856B6B9770AB37BF1A60579AFDAD9
Certificate serial:       21837FB99CCC1C2DAEA124972ED6B8023B9ECE28
Authority key identifier: 83:86:FB:28:63:48:56:B6:B9:77:0A:B3:7B:F1:A6:05:79:AF:DA:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8386FB28634856B6B9770AB37BF1A60579AFDAD9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/3133382e33362e3234302e302f32342d3234203d3e20323634353839.roa
Signing time:             Fri 28 Aug 2026 14:56:17 +0000
ROA not before:           Fri 28 Aug 2026 14:51:17 +0000
ROA not after:            Fri 27 Aug 2027 14:56:17 +0000
asID:                     264589
IP address blocks:        138.36.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/8386FB28634856B6B9770AB37BF1A60579AFDAD9.crl
                          rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/8386FB28634856B6B9770AB37BF1A60579AFDAD9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8386FB28634856B6B9770AB37BF1A60579AFDAD9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 08:27:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:83:7f:b9:9c:cc:1c:2d:ae:a1:24:97:2e:d6:b8:02:3b:9e:ce:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8386FB28634856B6B9770AB37BF1A60579AFDAD9
        Validity
            Not Before: Aug 28 14:51:17 2026 GMT
            Not After : Aug 27 14:56:17 2027 GMT
        Subject: CN=F8111EDF0415807CB3C5DE5C4B6F2AC16841369C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:13:6b:42:ca:f3:57:3a:7f:25:69:c3:47:82:
                    9e:c5:f6:83:77:f7:98:69:cf:31:48:89:0f:8a:15:
                    b3:e8:bc:bf:8d:f8:80:2e:69:33:6e:28:56:83:1c:
                    54:11:5e:98:54:d9:1f:6c:17:7b:67:00:75:83:83:
                    d6:2d:51:a7:02:a4:dc:16:a8:ce:5c:98:1a:a0:50:
                    46:cc:44:22:b6:20:83:17:3b:ec:3e:b3:fc:54:de:
                    06:94:2e:22:ff:67:a9:c5:a7:d8:f9:b6:be:9c:af:
                    ad:dd:1a:0c:f3:89:e3:52:ac:21:ee:56:99:0d:0e:
                    db:8d:8d:71:d9:cf:17:5e:24:67:c0:ee:d2:51:fb:
                    6f:64:89:49:5c:6c:86:a2:35:2c:09:e6:5c:a3:7c:
                    22:d3:9c:1a:33:d0:cd:1a:5b:ed:95:6a:c6:e6:2a:
                    a5:66:4e:4a:12:16:1d:9a:10:7f:48:7f:a1:73:17:
                    b2:3b:39:e2:f1:d0:f6:2f:4b:e4:cf:5e:86:77:e1:
                    77:09:0f:b2:58:4f:08:33:c0:76:74:06:3e:8f:c5:
                    69:2f:dc:88:69:21:2e:f9:bd:a1:1a:e7:fe:2f:8a:
                    0a:5c:5f:93:1c:27:36:af:19:b9:e4:73:7b:73:53:
                    48:a0:d4:1d:93:ac:de:e5:30:16:36:af:fb:f6:8b:
                    60:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:11:1E:DF:04:15:80:7C:B3:C5:DE:5C:4B:6F:2A:C1:68:41:36:9C
            X509v3 Authority Key Identifier:
                keyid:83:86:FB:28:63:48:56:B6:B9:77:0A:B3:7B:F1:A6:05:79:AF:DA:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/8386FB28634856B6B9770AB37BF1A60579AFDAD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8386FB28634856B6B9770AB37BF1A60579AFDAD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/3133382e33362e3234302e302f32342d3234203d3e20323634353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:fa:3c:a2:14:56:6b:35:ea:da:03:09:32:7e:97:b4:93:69:
         00:7e:a2:4a:ee:b0:3f:24:d0:89:d7:21:2c:ae:fc:6c:04:b4:
         26:c8:89:71:48:8e:0a:d4:94:40:3e:eb:5b:f5:e0:46:55:24:
         f9:ab:f6:77:e4:8d:e6:ab:73:aa:1e:9e:a1:1d:ac:c3:91:11:
         dc:4e:e6:06:0a:cb:50:03:e5:3d:9a:78:b4:40:b4:6c:c7:3a:
         a8:c2:62:0e:ff:53:b1:65:e8:4c:d5:5c:92:9b:c2:7e:98:0d:
         f6:a0:ae:fb:fd:0e:25:3f:b2:5b:27:ba:86:f9:79:51:44:d1:
         1a:d6:7a:a0:25:2d:50:9b:2e:db:b3:78:a2:36:64:ea:e5:63:
         7f:df:5e:ac:3b:dc:43:64:e5:31:2a:95:37:c3:f8:83:f9:63:
         b9:36:b5:74:1a:9f:37:47:12:8e:88:bf:9a:1b:fd:90:2b:e5:
         d0:30:90:04:8b:d3:71:da:df:a2:42:e3:d5:da:6a:79:9a:82:
         1e:9b:98:77:1c:1a:b2:df:90:31:6a:50:c9:3c:03:93:cf:66:
         94:fe:14:7a:57:1a:25:2c:a8:bf:0d:04:d9:29:db:b1:43:5c:
         2c:29:f4:36:1b:44:a5:67:6b:79:74:73:33:b9:d6:80:eb:ce:
         2c:e6:77:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 10:43:56 2026 by rpki-client