Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/0/3133382e3138352e37302e302f32342d3234203d3e20323730393139.roa
File:                     3133382e3138352e37302e302f32342d3234203d3e20323730393139.roa (raw, json)
Hash identifier:          OlXAcPZ2Fh8pBzdL+nzc/djX5zV0rGimodtoXfQnnEU=
Subject key identifier:   1E:4C:4A:F4:C8:D3:DB:E8:51:31:8F:39:43:B5:66:1B:D4:CD:56:2E
Certificate issuer:       /CN=DB8EBD30EEDE9C1709CEDBDF415CB9F6D370E5AE
Certificate serial:       459EC7EC0A794FE31CDDC8DEC79BCCD14C74E46D
Authority key identifier: DB:8E:BD:30:EE:DE:9C:17:09:CE:DB:DF:41:5C:B9:F6:D3:70:E5:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB8EBD30EEDE9C1709CEDBDF415CB9F6D370E5AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/0/3133382e3138352e37302e302f32342d3234203d3e20323730393139.roa
Signing time:             Mon 31 Aug 2026 19:42:19 +0000
ROA not before:           Mon 31 Aug 2026 19:37:19 +0000
ROA not after:            Mon 30 Aug 2027 19:42:19 +0000
asID:                     270919
IP address blocks:        138.185.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/0/DB8EBD30EEDE9C1709CEDBDF415CB9F6D370E5AE.crl
                          rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/0/DB8EBD30EEDE9C1709CEDBDF415CB9F6D370E5AE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB8EBD30EEDE9C1709CEDBDF415CB9F6D370E5AE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 06:18:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:9e:c7:ec:0a:79:4f:e3:1c:dd:c8:de:c7:9b:cc:d1:4c:74:e4:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB8EBD30EEDE9C1709CEDBDF415CB9F6D370E5AE
        Validity
            Not Before: Aug 31 19:37:19 2026 GMT
            Not After : Aug 30 19:42:19 2027 GMT
        Subject: CN=1E4C4AF4C8D3DBE851318F3943B5661BD4CD562E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fc:02:f6:93:c6:95:5a:3a:e3:84:1e:8f:84:
                    d5:70:3e:1a:68:bc:0c:28:94:0b:9b:59:0a:a7:5f:
                    f5:2a:60:88:d2:42:55:29:d4:01:ce:9b:fd:7f:06:
                    27:47:f8:85:4a:d8:b6:09:95:f3:de:e8:f9:2f:5c:
                    19:7c:77:a0:8f:ae:41:c1:02:eb:c3:f9:2f:8e:86:
                    93:86:2c:2d:0a:e8:72:b7:7e:90:42:fb:20:01:af:
                    73:a5:40:46:e9:47:01:6d:e8:e8:8b:cf:08:54:bc:
                    39:0a:4b:ad:34:14:ee:06:b9:35:cc:9a:83:6b:81:
                    41:ca:91:cc:f4:55:7f:a5:37:77:06:2d:53:fc:cd:
                    cf:3f:9b:b7:a9:61:fc:c5:71:ea:3d:44:b9:9d:c4:
                    ef:a6:d4:d9:4f:63:95:c4:80:e0:74:79:1d:3f:0c:
                    57:cc:79:4a:f6:b8:41:e8:04:16:83:a5:91:49:56:
                    58:b0:9c:ed:6a:72:c2:8f:54:f7:22:61:e7:af:fb:
                    6b:3a:e4:77:db:ab:af:dd:25:12:dc:e6:61:c8:74:
                    dd:fe:58:02:a6:2c:43:5e:d7:a7:fc:3b:40:5e:45:
                    11:ed:d0:09:03:df:9f:0b:b9:c3:1b:e9:52:0a:ad:
                    fd:da:f7:47:3a:3a:7a:02:5d:d8:b8:7a:41:73:bf:
                    ef:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:4C:4A:F4:C8:D3:DB:E8:51:31:8F:39:43:B5:66:1B:D4:CD:56:2E
            X509v3 Authority Key Identifier:
                keyid:DB:8E:BD:30:EE:DE:9C:17:09:CE:DB:DF:41:5C:B9:F6:D3:70:E5:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/0/DB8EBD30EEDE9C1709CEDBDF415CB9F6D370E5AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB8EBD30EEDE9C1709CEDBDF415CB9F6D370E5AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/0/3133382e3138352e37302e302f32342d3234203d3e20323730393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:aa:32:b6:19:dc:b8:0a:a5:68:53:64:c3:9f:83:5c:81:e3:
         a3:64:7a:d2:9f:c1:11:6f:7c:8f:7e:0b:02:7b:cb:e2:8d:95:
         90:fb:41:1e:29:5b:48:7d:d2:55:7e:ee:73:9e:bf:40:2f:e5:
         e0:6d:47:84:c3:87:8a:4b:62:24:db:9a:00:23:f9:45:2a:99:
         0c:ba:82:39:9e:dc:a1:3a:58:8a:02:db:c1:67:13:f9:7e:4d:
         6a:20:c5:cb:d7:92:9b:e6:bd:9a:64:d9:3b:f0:64:46:f1:05:
         d5:5c:f3:43:d2:27:c3:59:83:21:d3:24:7d:86:f6:f3:89:36:
         79:34:75:6d:8a:9c:7e:0f:26:3c:9d:71:e7:09:58:fc:e9:8a:
         c1:0e:77:b6:cc:53:80:83:67:33:2e:c5:1c:72:7e:41:22:54:
         bd:5d:89:31:1d:a6:6b:b6:a0:9e:64:c8:4e:1b:db:0b:9d:1e:
         80:7f:b4:fb:41:c6:c3:16:58:d6:14:9f:67:41:e6:e0:66:ca:
         55:10:45:21:a8:1c:18:0c:83:b6:b1:c0:1f:ad:e2:62:d9:4b:
         08:ba:cb:8d:ad:d5:d6:4f:d3:a7:ee:aa:80:0b:91:c9:d0:44:
         83:bc:f3:2b:34:06:9a:b4:bb:17:14:e7:a6:28:c5:70:af:eb:
         bb:f4:b4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:44:57 2026 by rpki-client