Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3133382e3235352e3139322e302f32322d3332203d3e203532373833.roa
File:                     3133382e3235352e3139322e302f32322d3332203d3e203532373833.roa (raw, json)
Hash identifier:          V7RV34Dt13VRnRvCHNaHDYDDQYXnsSq9O8TvHKCV7G4=
Subject key identifier:   D5:D4:44:43:E2:51:BB:1A:45:10:D9:07:2C:52:FF:D3:49:D0:21:B9
Certificate issuer:       /CN=3DDE2C96A736983C4145E6A74FA601EF275DE118
Certificate serial:       1352494C159D0461E273F444B177B944E1232241
Authority key identifier: 3D:DE:2C:96:A7:36:98:3C:41:45:E6:A7:4F:A6:01:EF:27:5D:E1:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3133382e3235352e3139322e302f32322d3332203d3e203532373833.roa
Signing time:             Mon 06 Apr 2026 14:05:44 +0000
ROA not before:           Mon 06 Apr 2026 14:00:44 +0000
ROA not after:            Mon 05 Apr 2027 14:05:44 +0000
asID:                     52783
IP address blocks:        138.255.192.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.crl
                          rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 04:22:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:52:49:4c:15:9d:04:61:e2:73:f4:44:b1:77:b9:44:e1:23:22:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DDE2C96A736983C4145E6A74FA601EF275DE118
        Validity
            Not Before: Apr  6 14:00:44 2026 GMT
            Not After : Apr  5 14:05:44 2027 GMT
        Subject: CN=D5D44443E251BB1A4510D9072C52FFD349D021B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6e:e5:07:af:cc:69:16:b6:d8:a9:76:8f:bf:
                    5f:3d:33:87:39:ce:62:cd:8e:42:99:da:aa:ee:62:
                    c3:43:ab:98:0c:64:50:3f:08:4c:72:af:26:b3:d1:
                    57:8b:11:b0:a2:a3:e5:f5:ee:75:4c:96:af:69:35:
                    a8:7c:21:28:f7:33:6c:c8:25:88:15:5b:ee:63:54:
                    94:6e:11:3a:fc:8f:e4:cc:93:35:1a:28:11:2e:d4:
                    79:32:95:47:f7:01:9c:e4:98:7c:9b:d9:e8:93:48:
                    f8:c2:14:9e:29:ae:0d:fc:b2:64:0a:b9:d3:31:89:
                    e6:b6:44:93:33:65:89:b7:b0:32:57:b0:7b:80:be:
                    92:24:4b:05:14:d2:b3:93:5c:f8:75:29:7b:d5:98:
                    a5:8b:6e:df:97:14:59:34:c6:31:30:08:3c:13:09:
                    20:4c:0b:f6:19:82:92:d1:29:86:71:12:32:e1:ac:
                    f2:61:08:d5:3e:13:a4:ab:d2:dc:38:b5:67:8a:f5:
                    53:0e:6d:fb:50:7c:62:04:a1:bc:28:42:55:40:bb:
                    86:c4:97:13:2c:d9:f6:6b:79:89:9c:13:a1:be:d0:
                    e0:e6:09:f0:f1:5c:51:1c:56:c7:b8:a8:eb:f3:0b:
                    4d:9a:9c:00:93:93:85:72:75:8d:13:48:88:4c:1f:
                    0f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D4:44:43:E2:51:BB:1A:45:10:D9:07:2C:52:FF:D3:49:D0:21:B9
            X509v3 Authority Key Identifier:
                keyid:3D:DE:2C:96:A7:36:98:3C:41:45:E6:A7:4F:A6:01:EF:27:5D:E1:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3133382e3235352e3139322e302f32322d3332203d3e203532373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:3f:1f:fa:94:f5:7f:89:e3:60:94:ff:75:90:84:b2:38:7e:
         73:1a:70:74:a3:a5:ec:fb:d0:18:01:67:6d:d5:55:76:47:be:
         17:5b:30:27:a6:b6:85:c0:96:e5:08:64:ca:69:c2:81:11:d8:
         49:e9:e9:21:a5:8a:e0:d6:97:dc:a2:f8:5c:09:d1:25:5e:1f:
         9f:ce:db:54:2f:b2:60:8c:c7:15:09:90:b5:44:b3:20:76:79:
         35:cf:a4:ed:88:3c:84:85:0c:2d:01:ef:d9:f3:79:d9:5f:06:
         dc:5d:30:9f:f6:ed:11:5e:67:c9:4b:e0:54:66:df:47:5d:71:
         bb:69:68:8a:a8:69:10:05:2c:5f:b1:74:bb:3c:59:48:cc:81:
         fe:e7:2c:f7:4b:9c:e4:ab:24:d0:c6:b9:52:1f:69:05:d6:4c:
         45:e7:0e:5f:0b:5a:e7:bc:7b:03:2c:1a:df:08:84:f0:77:53:
         e9:18:a8:c2:a4:be:91:c9:02:9b:ee:54:95:6e:63:06:6a:49:
         38:09:d8:28:c7:3e:13:d3:80:a2:68:b4:7f:fb:42:f0:0a:20:
         83:35:f1:eb:58:9b:7e:47:5e:43:e0:bc:77:72:bd:89:ab:ff:
         50:5b:a8:19:23:ea:e8:4b:cb:a6:16:5b:a9:0e:8c:4d:d0:bf:
         53:d3:10:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 17:12:07 2026 by rpki-client