Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/3133382e33362e3234312e302f32342d3234203d3e20323634353839.roa
File:                     3133382e33362e3234312e302f32342d3234203d3e20323634353839.roa (raw, json)
Hash identifier:          TG4Kp0aLQyUz45k+9wjXvmRzxUtwhBIHd6IY/i3YbJc=
Subject key identifier:   88:36:4C:03:0C:BD:7F:FF:F5:6A:EF:A5:B6:11:22:95:3D:74:93:F6
Certificate issuer:       /CN=8386FB28634856B6B9770AB37BF1A60579AFDAD9
Certificate serial:       78F5A53DD411BC1226DD499389BED21C975C0C86
Authority key identifier: 83:86:FB:28:63:48:56:B6:B9:77:0A:B3:7B:F1:A6:05:79:AF:DA:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8386FB28634856B6B9770AB37BF1A60579AFDAD9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/3133382e33362e3234312e302f32342d3234203d3e20323634353839.roa
Signing time:             Fri 28 Aug 2026 14:59:08 +0000
ROA not before:           Fri 28 Aug 2026 14:54:08 +0000
ROA not after:            Fri 27 Aug 2027 14:59:08 +0000
asID:                     264589
IP address blocks:        138.36.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/8386FB28634856B6B9770AB37BF1A60579AFDAD9.crl
                          rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/8386FB28634856B6B9770AB37BF1A60579AFDAD9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8386FB28634856B6B9770AB37BF1A60579AFDAD9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 16:16:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f5:a5:3d:d4:11:bc:12:26:dd:49:93:89:be:d2:1c:97:5c:0c:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8386FB28634856B6B9770AB37BF1A60579AFDAD9
        Validity
            Not Before: Aug 28 14:54:08 2026 GMT
            Not After : Aug 27 14:59:08 2027 GMT
        Subject: CN=88364C030CBD7FFFF56AEFA5B61122953D7493F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8d:e4:8b:d9:86:0d:eb:1a:0c:2d:15:6d:45:
                    66:48:f8:0d:79:01:26:a3:9a:e3:32:55:12:e4:eb:
                    34:d3:0a:18:8d:ba:e5:2e:95:23:fc:e4:3e:ea:b8:
                    27:af:ad:fa:94:38:2e:fb:8d:20:ac:a5:55:47:ba:
                    73:09:8b:84:34:4d:86:82:8d:58:e3:fa:af:1f:46:
                    4b:61:e6:c9:d5:94:b1:44:10:d6:b5:14:1e:d5:03:
                    e5:b7:aa:9f:0e:67:80:24:ff:af:3e:c7:b5:fd:26:
                    f0:7f:b0:c7:69:6c:f8:50:ad:59:f2:38:ef:93:87:
                    bc:85:80:e8:6f:94:63:b4:99:4d:04:43:79:ba:67:
                    ec:74:c7:a9:88:78:9f:9d:96:b6:86:7f:a2:95:d6:
                    16:0f:e6:97:85:e3:44:83:5f:d5:87:2d:f1:57:cd:
                    d5:51:14:d1:c7:28:eb:99:61:82:69:96:e8:78:6a:
                    a3:e0:de:50:21:e7:7e:65:0c:bc:df:d7:23:bf:b7:
                    d6:fc:7d:49:73:22:fe:43:d5:44:da:09:4b:be:e2:
                    6c:9d:a0:67:17:9a:13:e3:12:56:08:4a:fc:ed:ca:
                    1b:fa:34:7e:3c:ad:d5:f2:b7:c7:75:40:90:fc:ef:
                    4b:97:a6:a8:8b:d7:88:bd:6f:7f:61:0f:7a:17:8b:
                    91:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:36:4C:03:0C:BD:7F:FF:F5:6A:EF:A5:B6:11:22:95:3D:74:93:F6
            X509v3 Authority Key Identifier:
                keyid:83:86:FB:28:63:48:56:B6:B9:77:0A:B3:7B:F1:A6:05:79:AF:DA:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/8386FB28634856B6B9770AB37BF1A60579AFDAD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8386FB28634856B6B9770AB37BF1A60579AFDAD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/3133382e33362e3234312e302f32342d3234203d3e20323634353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:b5:77:a0:d5:fd:91:f0:e0:0a:86:e7:dc:c3:96:05:86:02:
         d2:fa:7f:e4:7d:e4:dd:a2:f8:f7:bc:9d:45:02:66:8d:f9:c5:
         c2:30:85:62:11:a2:01:92:d3:46:28:f6:51:10:16:a3:d9:44:
         01:ea:42:c5:ae:a2:ac:f8:f5:96:dd:f8:8d:31:89:01:c9:e5:
         14:4e:d4:ac:f6:a3:ea:c4:3d:6d:df:e9:1a:2a:10:94:1b:4d:
         1b:09:90:6d:44:8e:11:2d:59:b4:b4:26:82:b6:3c:54:b5:fa:
         29:93:e3:2a:dd:af:c5:84:2a:d8:f7:a2:e6:e8:b4:b4:c0:30:
         66:90:4b:c7:88:c4:54:d0:8b:55:1f:99:37:e3:85:94:17:5f:
         99:5b:16:1b:c1:cb:1e:be:c4:5c:e2:42:3b:f0:28:05:78:e4:
         11:d8:60:63:99:c9:02:ef:41:5d:25:63:49:7c:51:5d:2f:28:
         f2:76:df:ee:f8:a6:4e:26:59:8a:73:c9:c4:ca:19:74:c3:af:
         e3:31:bd:40:49:c1:1c:59:82:75:9a:24:2b:2a:70:cc:84:83:
         e2:d3:1d:bf:0f:b2:7b:2f:0a:ae:89:fb:ac:76:fc:a6:e1:63:
         65:de:51:52:26:1e:14:89:c4:68:32:3b:64:5e:dd:82:e8:3b:
         e4:3b:aa:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 06:53:13 2026 by rpki-client