Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/0/3133382e3230342e3132342e302f32322d3232203d3e20323634343131.roa
File:                     3133382e3230342e3132342e302f32322d3232203d3e20323634343131.roa (raw, json)
Hash identifier:          HHx5Ld/khw0OBQeByvrR1ufj/P/7BZ2fHRMIOSbyza0=
Subject key identifier:   FA:3D:33:B2:8D:A7:D3:15:AC:F5:D7:F5:A0:85:50:20:AD:F3:16:E2
Certificate issuer:       /CN=0FC679D7315FDF14EBEF014559AE8C78EC5497FE
Certificate serial:       2493E1B90CFB14DFFA4FE4199B06861B57EA820D
Authority key identifier: 0F:C6:79:D7:31:5F:DF:14:EB:EF:01:45:59:AE:8C:78:EC:54:97:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FC679D7315FDF14EBEF014559AE8C78EC5497FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/0/3133382e3230342e3132342e302f32322d3232203d3e20323634343131.roa
Signing time:             Tue 09 Jun 2026 11:48:43 +0000
ROA not before:           Tue 09 Jun 2026 11:43:43 +0000
ROA not after:            Tue 08 Jun 2027 11:48:43 +0000
asID:                     264411
IP address blocks:        138.204.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/0/0FC679D7315FDF14EBEF014559AE8C78EC5497FE.crl
                          rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/0/0FC679D7315FDF14EBEF014559AE8C78EC5497FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FC679D7315FDF14EBEF014559AE8C78EC5497FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 02:09:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:93:e1:b9:0c:fb:14:df:fa:4f:e4:19:9b:06:86:1b:57:ea:82:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FC679D7315FDF14EBEF014559AE8C78EC5497FE
        Validity
            Not Before: Jun  9 11:43:43 2026 GMT
            Not After : Jun  8 11:48:43 2027 GMT
        Subject: CN=FA3D33B28DA7D315ACF5D7F5A0855020ADF316E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e6:bc:03:bc:ad:6a:a5:1d:ba:ad:e6:24:c0:
                    4f:ad:45:6f:22:ee:ef:15:8a:aa:fe:4a:25:85:34:
                    78:7a:a7:16:89:03:de:b0:87:c3:14:28:08:45:ae:
                    ed:17:d8:72:a8:56:db:db:50:f2:07:8b:cc:31:e5:
                    f5:3e:f2:77:3f:e2:f0:21:f7:6d:da:bd:fe:54:d2:
                    64:44:dd:2e:a5:78:34:fc:b7:15:86:3c:1e:ee:93:
                    cb:b0:0f:c7:33:4e:30:96:80:e5:68:2d:a5:24:48:
                    d4:22:98:a4:b7:04:14:7b:98:ab:58:3f:9f:04:41:
                    f2:b7:8e:5f:94:6d:df:bd:d9:ea:b7:ae:40:15:56:
                    30:b7:00:d1:7e:dc:f4:8b:eb:46:61:df:d0:be:c1:
                    6e:43:2d:69:a6:4f:c2:d4:d0:eb:71:89:18:a9:f3:
                    78:d5:a6:72:1f:d9:2c:ee:88:76:c9:b0:1b:5b:80:
                    27:a5:aa:d9:ea:a0:ca:78:9d:db:e8:68:72:04:d7:
                    2b:83:c3:2b:5c:5f:51:5d:ea:cc:a4:0e:aa:0e:fd:
                    79:45:05:c4:da:05:57:d9:71:b6:9d:6b:81:f3:89:
                    56:0f:ed:56:71:03:79:ca:e2:6c:c7:38:c8:a3:0e:
                    ca:fc:dd:f8:03:d6:63:45:39:0e:f4:dd:33:37:9c:
                    12:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:3D:33:B2:8D:A7:D3:15:AC:F5:D7:F5:A0:85:50:20:AD:F3:16:E2
            X509v3 Authority Key Identifier:
                keyid:0F:C6:79:D7:31:5F:DF:14:EB:EF:01:45:59:AE:8C:78:EC:54:97:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/0/0FC679D7315FDF14EBEF014559AE8C78EC5497FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FC679D7315FDF14EBEF014559AE8C78EC5497FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/0/3133382e3230342e3132342e302f32322d3232203d3e20323634343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:f3:99:19:4d:b6:ba:9e:e8:97:73:1e:45:5a:e9:59:5d:f8:
         7d:04:0b:39:87:a2:8b:32:e2:34:71:26:0c:c8:aa:bc:4e:35:
         05:fb:91:7b:10:71:a9:de:c9:73:25:cc:56:72:ba:22:f4:45:
         42:14:b4:16:2e:72:25:8e:5b:83:06:1c:28:be:ac:b6:c2:6d:
         09:ea:af:ec:a6:48:bd:fc:67:15:02:f5:92:56:4f:7f:d1:2d:
         b1:dd:d8:13:db:80:7a:10:8e:9f:d0:e8:0d:35:08:b9:5d:c8:
         15:f6:c7:2a:51:e8:60:b9:ea:61:39:be:f6:8c:4c:e5:e7:56:
         14:b5:7e:36:c0:cd:8d:08:6a:a3:ff:31:b2:5a:4a:12:ce:3e:
         1b:e4:a3:03:a3:78:d6:0d:77:1d:19:de:fd:de:34:af:3d:65:
         f6:0f:07:b2:14:84:71:ed:3d:01:42:32:a6:20:50:dc:fb:2e:
         62:fa:1f:17:e0:83:ab:c2:5d:fc:0a:16:13:d2:2a:9c:58:3b:
         b5:5b:1d:84:6f:fe:fa:b5:81:e5:30:55:ca:99:d7:05:a5:79:
         62:6f:14:a7:88:ab:ec:e9:0f:fd:3d:a4:ec:af:29:d7:4a:a1:
         c1:23:6b:ef:5a:c9:6d:9b:42:43:5b:71:5f:9b:ea:a2:78:dc:
         06:50:2b:d7
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUJJPhuQz7FN/6T+QZmwaGG1fqgg0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEZDNjc5RDczMTVGREYxNEVCRUYwMTQ1NTlBRThDNzhF
QzU0OTdGRTAeFw0yNjA2MDkxMTQzNDNaFw0yNzA2MDgxMTQ4NDNaMDMxMTAvBgNV
BAMTKEZBM0QzM0IyOERBN0QzMTVBQ0Y1RDdGNUEwODU1MDIwQURGMzE2RTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL5rwDvK1qpR26reYkwE+tRW8i
7u8Viqr+SiWFNHh6pxaJA96wh8MUKAhFru0X2HKoVtvbUPIHi8wx5fU+8nc/4vAh
923avf5U0mRE3S6leDT8txWGPB7uk8uwD8czTjCWgOVoLaUkSNQimKS3BBR7mKtY
P58EQfK3jl+Ubd+92eq3rkAVVjC3ANF+3PSL60Zh39C+wW5DLWmmT8LU0OtxiRip
83jVpnIf2SzuiHbJsBtbgCelqtnqoMp4ndvoaHIE1yuDwytcX1Fd6sykDqoO/XlF
BcTaBVfZcbada4HziVYP7VZxA3nK4mzHOMijDsr83fgD1mNFOQ703TM3nBKTAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU+j0zso2n0xWs9df1oIVQIK3zFuIwHwYDVR0j
BBgwFoAUD8Z51zFf3xTr7wFFWa6MeOxUl/4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREtEdDFGMkRUbnV0U1l4UmZxaERHdnJ0QjlEZkVjcUdSUHJSTHVXUWFr
ZXcvMC8wRkM2NzlENzMxNUZERjE0RUJFRjAxNDU1OUFFOEM3OEVDNTQ5N0ZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGQzY3OUQ3MzE1RkRGMTRF
QkVGMDE0NTU5QUU4Qzc4RUM1NDk3RkUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RLRHQxRjJEVG51dFNZeFJmcWhER3ZydEI5RGZFY3FHUlByUkx1V1Fha2V3LzAv
MzEzMzM4MmUzMjMwMzQyZTMxMzIzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzNDM0MzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAorMfDANBgkqhkiG9w0BAQsFAAOCAQEAofOZ
GU22up7ol3MeRVrpWV34fQQLOYeiizLiNHEmDMiqvE41BfuRexBxqd7JcyXMVnK6
IvRFQhS0Fi5yJY5bgwYcKL6stsJtCeqv7KZIvfxnFQL1klZPf9Etsd3YE9uAehCO
n9DoDTUIuV3IFfbHKlHoYLnqYTm+9oxM5edWFLV+NsDNjQhqo/8xslpKEs4+G+Sj
A6N41g13HRne/d40rz1l9g8HshSEce09AUIypiBQ3PsuYvofF+CDq8Jd/AoWE9Iq
nFg7tVsdhG/++rWB5TBVypnXBaV5Ym8Up4ir7OkP/T2k7K8p10qhwSNr71rJbZtC
Q1txX5vqonjcBlAr1w==
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:07:20 2026 by rpki-client