Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/0/3133382e3138352e36392e302f32342d3234203d3e20323730393139.roa
File:                     3133382e3138352e36392e302f32342d3234203d3e20323730393139.roa (raw, json)
Hash identifier:          yVuxwPyYfhZ4n3w7sU7sDzVTDsPhuH4wD4+sW0nFbyk=
Subject key identifier:   F2:1F:DF:04:19:BD:A7:FF:E1:56:22:E0:6D:8E:88:6C:0D:3B:7D:12
Certificate issuer:       /CN=DB8EBD30EEDE9C1709CEDBDF415CB9F6D370E5AE
Certificate serial:       2747A2ED4EB7EF6CCCD3755DF330731143D7D77A
Authority key identifier: DB:8E:BD:30:EE:DE:9C:17:09:CE:DB:DF:41:5C:B9:F6:D3:70:E5:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB8EBD30EEDE9C1709CEDBDF415CB9F6D370E5AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/0/3133382e3138352e36392e302f32342d3234203d3e20323730393139.roa
Signing time:             Mon 31 Aug 2026 19:42:19 +0000
ROA not before:           Mon 31 Aug 2026 19:37:19 +0000
ROA not after:            Mon 30 Aug 2027 19:42:19 +0000
asID:                     270919
IP address blocks:        138.185.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/0/DB8EBD30EEDE9C1709CEDBDF415CB9F6D370E5AE.crl
                          rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/0/DB8EBD30EEDE9C1709CEDBDF415CB9F6D370E5AE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB8EBD30EEDE9C1709CEDBDF415CB9F6D370E5AE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 06:18:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:47:a2:ed:4e:b7:ef:6c:cc:d3:75:5d:f3:30:73:11:43:d7:d7:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB8EBD30EEDE9C1709CEDBDF415CB9F6D370E5AE
        Validity
            Not Before: Aug 31 19:37:19 2026 GMT
            Not After : Aug 30 19:42:19 2027 GMT
        Subject: CN=F21FDF0419BDA7FFE15622E06D8E886C0D3B7D12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9c:28:3f:6a:96:3d:13:11:97:65:88:c7:a1:
                    11:22:8a:4c:d4:cf:a7:42:08:1a:ad:eb:4d:65:d6:
                    49:1a:16:86:a9:c6:bf:d4:af:1e:8e:f8:33:50:a9:
                    82:4a:96:e0:aa:bb:85:d1:dd:0e:25:37:96:eb:0c:
                    5a:e3:a0:29:6f:08:00:8d:a1:0d:93:52:a7:2c:d2:
                    6f:d4:d5:ac:5f:09:3b:40:e6:4f:5f:3c:ba:3a:3a:
                    5e:6d:c6:af:25:c5:b6:8d:04:ed:92:ff:a9:fd:92:
                    31:da:17:fc:f2:10:df:78:5a:fb:38:62:90:e2:f3:
                    8a:a9:1a:76:07:6c:2a:61:29:a2:04:80:86:6c:32:
                    cc:d7:8e:ad:65:74:97:e0:c8:d2:ba:0a:b2:e3:12:
                    22:2e:2b:88:4c:10:5a:4e:ff:54:e4:0f:e8:d1:f9:
                    e1:24:bb:91:ee:a6:a8:67:8d:8a:24:11:dd:c0:82:
                    a2:a6:47:5a:ac:7b:8a:52:2e:bf:69:11:32:47:c4:
                    96:d7:7f:49:72:be:50:de:c2:f3:3b:1a:34:ea:4c:
                    2c:47:f1:52:a9:74:c1:84:7f:06:ca:99:0e:17:45:
                    09:20:5a:51:59:37:22:8f:c9:c6:d6:bd:93:d6:ab:
                    db:dc:f6:3c:88:cc:fe:48:be:5e:70:bb:84:5d:3b:
                    50:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:1F:DF:04:19:BD:A7:FF:E1:56:22:E0:6D:8E:88:6C:0D:3B:7D:12
            X509v3 Authority Key Identifier:
                keyid:DB:8E:BD:30:EE:DE:9C:17:09:CE:DB:DF:41:5C:B9:F6:D3:70:E5:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/0/DB8EBD30EEDE9C1709CEDBDF415CB9F6D370E5AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB8EBD30EEDE9C1709CEDBDF415CB9F6D370E5AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/0/3133382e3138352e36392e302f32342d3234203d3e20323730393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:40:a9:3b:35:96:1a:78:d2:cc:aa:8a:d7:75:eb:56:3f:8d:
         cb:a8:4b:d6:41:72:89:0a:f6:5b:41:15:4c:5f:aa:3f:ae:96:
         e8:dd:42:a0:04:28:b7:3c:37:b0:65:70:64:34:23:35:6c:ad:
         ca:84:d0:14:e9:29:5e:9e:eb:5b:08:d7:5c:a8:da:28:78:f5:
         38:26:e2:da:2f:14:2e:1d:2d:bd:3b:9b:d0:08:d2:af:1e:b5:
         5c:93:fc:78:cf:b7:0e:4f:85:80:2b:87:20:8f:9d:cb:5b:56:
         10:42:99:ba:95:16:d6:d9:02:75:86:40:ff:1a:07:a2:4d:86:
         79:11:7e:4d:87:aa:a6:c2:09:52:22:e2:1f:70:4e:2c:cc:dc:
         d1:83:bd:b0:bb:27:09:d1:35:da:1a:ee:81:58:70:f2:09:35:
         b2:46:57:9c:1e:2e:3c:3c:19:68:1c:30:de:1a:4d:4b:11:b3:
         59:c5:7d:ac:76:5a:f4:66:40:0d:31:26:fc:9a:59:2d:55:07:
         2f:d6:d4:90:ff:10:62:bb:3b:9c:fc:03:fe:8a:67:f3:5b:c7:
         a2:0b:13:7d:b9:65:9f:ab:36:8b:c0:61:02:4e:04:a9:3d:80:
         d4:1d:f5:dc:c1:1e:3e:5f:62:49:27:93:73:b0:b3:fb:89:2f:
         c8:31:40:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:45:12 2026 by rpki-client