Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/0/3133382e3138352e36382e302f32332d3233203d3e20323730393139.roa
File:                     3133382e3138352e36382e302f32332d3233203d3e20323730393139.roa (raw, json)
Hash identifier:          irwFU98LHSjGCHxU4y68iUPW3RtqNZp4H3YUOZvF5T0=
Subject key identifier:   AC:40:3D:8B:E2:FF:1E:38:BB:89:86:A8:C1:43:E9:26:7A:26:51:98
Certificate issuer:       /CN=DB8EBD30EEDE9C1709CEDBDF415CB9F6D370E5AE
Certificate serial:       3C80E37CF9C848B6F3E378F2BF904D920DBFEF74
Authority key identifier: DB:8E:BD:30:EE:DE:9C:17:09:CE:DB:DF:41:5C:B9:F6:D3:70:E5:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB8EBD30EEDE9C1709CEDBDF415CB9F6D370E5AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/0/3133382e3138352e36382e302f32332d3233203d3e20323730393139.roa
Signing time:             Mon 31 Aug 2026 19:42:18 +0000
ROA not before:           Mon 31 Aug 2026 19:37:18 +0000
ROA not after:            Mon 30 Aug 2027 19:42:18 +0000
asID:                     270919
IP address blocks:        138.185.68.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/0/DB8EBD30EEDE9C1709CEDBDF415CB9F6D370E5AE.crl
                          rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/0/DB8EBD30EEDE9C1709CEDBDF415CB9F6D370E5AE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB8EBD30EEDE9C1709CEDBDF415CB9F6D370E5AE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 00:17:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:80:e3:7c:f9:c8:48:b6:f3:e3:78:f2:bf:90:4d:92:0d:bf:ef:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB8EBD30EEDE9C1709CEDBDF415CB9F6D370E5AE
        Validity
            Not Before: Aug 31 19:37:18 2026 GMT
            Not After : Aug 30 19:42:18 2027 GMT
        Subject: CN=AC403D8BE2FF1E38BB8986A8C143E9267A265198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5c:16:1a:7b:f3:85:d3:50:67:2a:70:21:dc:
                    9b:b5:54:0c:44:5a:18:39:31:ee:2c:f2:bd:c8:1b:
                    96:78:86:d1:75:0c:28:e7:67:7a:0f:5a:ad:03:8c:
                    13:e3:ae:a9:ef:6f:9e:8a:52:4c:c0:d4:47:84:ec:
                    69:23:f3:71:f3:d3:af:46:48:ea:24:51:5e:00:c2:
                    bc:3a:11:d2:56:33:24:07:22:ad:3f:d0:cd:77:58:
                    bd:b0:d8:4f:4e:4e:41:c1:be:b2:fe:a4:08:2e:6b:
                    7c:e6:77:a3:13:35:08:5c:bf:3f:40:a0:a1:1f:95:
                    83:80:d7:56:87:d9:1d:8b:7f:d1:ac:fc:c0:d6:9e:
                    43:22:55:8f:62:92:ff:f6:db:bd:a2:ee:a3:f6:3d:
                    ee:be:94:77:c8:cc:44:ce:15:e6:b8:d5:37:5b:0f:
                    94:db:d2:b2:2d:3a:9b:79:23:13:1b:5d:2f:f8:0c:
                    73:29:76:b0:d1:15:96:53:d0:65:66:56:3f:50:ef:
                    e5:7e:c4:d4:aa:97:11:54:88:c6:99:bc:98:3f:fa:
                    85:60:4f:ba:9d:d0:64:e5:58:19:8d:8c:f2:e9:1a:
                    80:0e:5d:fc:f5:80:62:33:5c:92:48:37:4a:20:ea:
                    79:bc:b7:77:9c:00:40:dd:d1:17:79:45:64:90:0a:
                    36:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:40:3D:8B:E2:FF:1E:38:BB:89:86:A8:C1:43:E9:26:7A:26:51:98
            X509v3 Authority Key Identifier:
                keyid:DB:8E:BD:30:EE:DE:9C:17:09:CE:DB:DF:41:5C:B9:F6:D3:70:E5:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/0/DB8EBD30EEDE9C1709CEDBDF415CB9F6D370E5AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB8EBD30EEDE9C1709CEDBDF415CB9F6D370E5AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/0/3133382e3138352e36382e302f32332d3233203d3e20323730393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:6b:97:8f:e4:ff:ef:1d:72:50:e6:38:97:74:c3:b0:7a:df:
         00:ae:ee:55:87:26:01:0a:1e:2e:0a:fd:95:54:18:e7:82:56:
         5d:26:77:01:b2:86:af:92:ca:d9:53:37:3f:0b:76:a4:98:03:
         7e:83:9e:2f:09:d7:11:72:0c:c0:5b:81:cf:48:02:dc:2a:e3:
         4f:e0:68:8c:58:91:91:20:aa:32:b6:17:01:e4:7d:96:f9:9f:
         e3:66:6d:02:06:fd:00:29:a1:cd:79:3d:cf:ae:9d:8d:44:42:
         c8:7c:38:8b:7a:cd:8b:e5:45:0c:3b:4f:ab:1e:eb:08:46:7c:
         87:75:7f:32:b9:a1:4c:eb:94:b8:34:ae:27:3b:59:63:39:06:
         e3:74:a5:6a:df:0e:b4:f1:1b:47:a1:34:42:bf:c2:af:bd:02:
         e4:0b:bb:ba:5e:2c:a6:8a:6f:b7:f5:26:db:d0:66:61:13:a2:
         a0:cc:20:d0:92:11:c7:a2:bb:3a:9d:b0:0e:b1:a2:bb:a5:24:
         bc:b6:a7:25:08:68:a2:ce:bf:80:a8:fa:95:8e:5c:3c:4c:7e:
         ae:72:f9:c0:17:df:9b:af:b9:af:6b:a1:cf:61:c3:bf:9f:ce:
         98:e6:a8:73:44:d4:48:d1:f9:3c:d0:23:c8:2f:99:54:c9:6e:
         18:2d:1e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 01:40:00 2026 by rpki-client