Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/0/3133382e3230342e3132352e302f32342d3234203d3e20323634343131.roa
File:                     3133382e3230342e3132352e302f32342d3234203d3e20323634343131.roa (raw, json)
Hash identifier:          ptEaEoGhRjqkYOMVZeXixkpLN7CHJ0XsdnTwXsKtDgw=
Subject key identifier:   D5:D7:0D:38:DF:E6:A1:DB:CE:1C:AB:38:2F:80:07:5A:7F:73:BF:5C
Certificate issuer:       /CN=0FC679D7315FDF14EBEF014559AE8C78EC5497FE
Certificate serial:       39F55D95E990F345AE7F1F86906DAD6DD55647C7
Authority key identifier: 0F:C6:79:D7:31:5F:DF:14:EB:EF:01:45:59:AE:8C:78:EC:54:97:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FC679D7315FDF14EBEF014559AE8C78EC5497FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/0/3133382e3230342e3132352e302f32342d3234203d3e20323634343131.roa
Signing time:             Tue 09 Jun 2026 11:48:43 +0000
ROA not before:           Tue 09 Jun 2026 11:43:43 +0000
ROA not after:            Tue 08 Jun 2027 11:48:43 +0000
asID:                     264411
IP address blocks:        138.204.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/0/0FC679D7315FDF14EBEF014559AE8C78EC5497FE.crl
                          rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/0/0FC679D7315FDF14EBEF014559AE8C78EC5497FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FC679D7315FDF14EBEF014559AE8C78EC5497FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 02:09:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:f5:5d:95:e9:90:f3:45:ae:7f:1f:86:90:6d:ad:6d:d5:56:47:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FC679D7315FDF14EBEF014559AE8C78EC5497FE
        Validity
            Not Before: Jun  9 11:43:43 2026 GMT
            Not After : Jun  8 11:48:43 2027 GMT
        Subject: CN=D5D70D38DFE6A1DBCE1CAB382F80075A7F73BF5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e5:c5:4f:65:7c:87:41:07:31:46:aa:6b:04:
                    7a:8c:ea:82:e7:00:4e:7f:3a:d0:ae:1e:0c:ee:08:
                    2f:4f:bd:c1:35:70:6b:df:55:56:38:85:74:25:64:
                    cf:c8:55:60:be:58:6e:7a:32:89:43:08:38:c4:2e:
                    ed:1e:28:20:1c:e0:77:f6:10:97:f5:9d:10:b6:f9:
                    e8:7f:5c:c7:f3:00:1d:11:96:2d:ee:eb:d8:9f:b4:
                    0f:11:8a:2f:3c:bb:44:bd:29:fe:f6:64:68:b2:fc:
                    d6:1b:77:cb:53:94:58:e9:a7:5d:ec:c4:6b:0b:40:
                    2a:0a:68:c3:cf:3e:cc:7c:21:cd:62:d1:e8:01:e1:
                    c1:13:cd:50:61:01:71:42:19:ad:ed:0c:74:40:d5:
                    87:92:bd:49:91:84:e5:c5:01:30:87:4c:4b:bb:f0:
                    2b:cb:ff:12:91:b2:7b:98:5b:34:89:8a:8c:98:68:
                    0e:86:18:f3:0b:5b:cc:c5:a8:35:96:c2:16:98:13:
                    46:48:d5:bc:ef:38:eb:7d:1b:29:2a:e3:be:92:dc:
                    01:f8:a9:74:43:9b:da:be:f6:42:cb:c5:90:88:00:
                    6c:ee:2f:9a:56:e1:d7:8c:9c:65:6f:89:e2:4f:ed:
                    14:14:b6:ab:05:3a:63:6a:ca:d0:14:fc:3f:99:ff:
                    cc:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D7:0D:38:DF:E6:A1:DB:CE:1C:AB:38:2F:80:07:5A:7F:73:BF:5C
            X509v3 Authority Key Identifier:
                keyid:0F:C6:79:D7:31:5F:DF:14:EB:EF:01:45:59:AE:8C:78:EC:54:97:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/0/0FC679D7315FDF14EBEF014559AE8C78EC5497FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FC679D7315FDF14EBEF014559AE8C78EC5497FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/0/3133382e3230342e3132352e302f32342d3234203d3e20323634343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:6e:d3:7f:9e:ad:71:88:c6:d4:eb:05:1b:d5:b8:11:25:50:
         a7:a4:e9:1b:f0:83:db:ff:0d:c3:36:e3:b9:6b:80:4c:ea:34:
         31:43:1c:08:34:01:87:f4:bb:bb:00:cb:fe:25:59:8c:ad:74:
         cd:70:b8:9c:e6:8a:05:1c:7d:0c:a5:b7:0b:b7:d6:f7:69:d1:
         d9:29:11:7f:e4:08:49:0b:6b:f4:ce:24:00:d9:e3:e9:9e:a2:
         bc:7a:ef:78:bc:75:f3:d9:24:da:ac:f2:fd:65:e6:54:dc:4d:
         63:b8:b0:ac:a1:1e:e9:74:54:e0:09:9d:9e:33:22:6f:1d:ab:
         bc:e1:36:11:7c:0c:0b:12:ba:15:99:a7:59:0e:0f:00:f2:73:
         3d:7e:28:d5:6d:fa:38:93:d0:0e:1c:fb:e4:f5:33:14:94:11:
         ea:f3:95:16:a5:31:ca:f8:f0:04:86:0a:b1:92:25:76:a7:ee:
         a0:f4:da:8c:f5:36:e0:67:0c:7b:b9:21:13:40:7a:1d:cc:f9:
         01:7f:5e:ca:cd:0b:af:06:01:65:10:fd:95:06:75:3f:e5:a0:
         92:cd:d3:fa:f0:e4:7e:94:13:4c:ee:97:3a:0a:f4:50:bb:86:
         6d:fb:9c:eb:09:33:44:f5:d3:af:a7:51:3f:11:47:38:a3:15:
         78:ed:81:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:07:51 2026 by rpki-client