Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/3133382e3138352e34302e302f32322d3332203d3e20323633333834.roa
File:                     3133382e3138352e34302e302f32322d3332203d3e20323633333834.roa (raw, json)
Hash identifier:          eqdIDRdOp1murfAf6xYzwCGbh24vVHap+uvN+YbhhVk=
Subject key identifier:   39:A1:4D:1E:01:07:C1:EB:E4:51:97:56:B9:BA:5B:08:E0:99:A8:DD
Certificate issuer:       /CN=6153A52B8DFD2CE81D248A76945B3AE5AC2A8AFA
Certificate serial:       34F8F2FEBC6DCDDB7EEEF3DDC4B334E6F170D1C0
Authority key identifier: 61:53:A5:2B:8D:FD:2C:E8:1D:24:8A:76:94:5B:3A:E5:AC:2A:8A:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6153A52B8DFD2CE81D248A76945B3AE5AC2A8AFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/3133382e3138352e34302e302f32322d3332203d3e20323633333834.roa
Signing time:             Thu 02 Apr 2026 15:56:28 +0000
ROA not before:           Thu 02 Apr 2026 15:51:28 +0000
ROA not after:            Thu 01 Apr 2027 15:56:28 +0000
asID:                     263384
IP address blocks:        138.185.40.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/6153A52B8DFD2CE81D248A76945B3AE5AC2A8AFA.crl
                          rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/6153A52B8DFD2CE81D248A76945B3AE5AC2A8AFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6153A52B8DFD2CE81D248A76945B3AE5AC2A8AFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Apr 2026 23:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:f8:f2:fe:bc:6d:cd:db:7e:ee:f3:dd:c4:b3:34:e6:f1:70:d1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6153A52B8DFD2CE81D248A76945B3AE5AC2A8AFA
        Validity
            Not Before: Apr  2 15:51:28 2026 GMT
            Not After : Apr  1 15:56:28 2027 GMT
        Subject: CN=39A14D1E0107C1EBE4519756B9BA5B08E099A8DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:04:e2:be:db:ae:59:46:b2:8b:d2:f4:5e:17:
                    bf:8e:86:71:1d:a3:b5:30:8f:8e:7c:2b:b5:13:d2:
                    ce:f0:60:c3:e7:60:f2:7b:e6:ba:00:64:d5:7b:aa:
                    19:a8:6b:92:b6:66:89:c3:ba:25:4f:39:d4:8b:46:
                    d0:f4:89:05:5a:cf:4e:c4:6a:00:d8:1e:b5:ec:de:
                    93:b2:66:9b:2f:16:b6:b3:5e:78:eb:4e:04:7f:82:
                    61:45:fc:85:62:ec:2a:e4:46:2a:47:c7:d9:00:31:
                    79:db:6c:9f:a5:3a:d8:5a:8c:54:c1:8a:24:f3:6a:
                    03:27:0b:fe:d1:73:3f:7c:e2:3a:17:3e:a1:5f:9e:
                    21:36:50:3c:7c:5e:bc:bc:79:ff:7f:c0:85:a4:85:
                    3a:cb:2b:e9:8a:9a:44:fc:ef:fb:92:6f:8c:7e:85:
                    3a:37:1a:74:ab:3f:2b:fe:8d:46:25:67:a8:ce:5c:
                    c7:df:a7:a8:45:cc:32:d6:20:07:6f:dc:3a:03:b0:
                    fe:ac:57:ab:af:7b:86:95:0c:72:91:a1:61:6c:07:
                    4e:2e:9c:ee:e0:c7:e7:86:2d:57:d7:17:6f:78:e8:
                    ab:56:00:fa:8a:a0:43:b7:99:00:dc:f3:76:df:87:
                    1d:d3:ab:8f:f2:91:85:2e:bb:43:50:b4:f9:05:44:
                    ef:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:A1:4D:1E:01:07:C1:EB:E4:51:97:56:B9:BA:5B:08:E0:99:A8:DD
            X509v3 Authority Key Identifier:
                keyid:61:53:A5:2B:8D:FD:2C:E8:1D:24:8A:76:94:5B:3A:E5:AC:2A:8A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/6153A52B8DFD2CE81D248A76945B3AE5AC2A8AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6153A52B8DFD2CE81D248A76945B3AE5AC2A8AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/3133382e3138352e34302e302f32322d3332203d3e20323633333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:e8:f4:80:6b:73:f7:64:0e:47:04:b0:5d:ab:a5:38:a1:a4:
         c5:ba:38:9d:ba:47:42:0c:37:87:e7:74:4d:2b:f2:7e:9a:87:
         7d:6b:bd:70:ff:12:49:e8:49:4a:93:c8:44:0f:a6:43:2a:4f:
         82:51:73:87:66:e6:c0:15:07:d8:2b:3c:ca:36:75:7f:dd:0b:
         35:10:ad:58:31:1d:1e:c4:fd:2a:a4:ca:91:97:9f:33:25:f6:
         89:a9:2b:93:19:81:24:70:82:57:b1:69:b5:5e:84:87:2d:e8:
         83:10:7b:0e:ea:3e:1c:11:d4:30:ae:be:7d:57:6e:10:54:17:
         79:b6:30:f5:88:82:e8:2b:4c:5b:f5:bc:2b:dd:62:c4:a4:db:
         cd:5d:a8:34:d0:72:47:a6:e7:69:6c:ec:d0:6b:bc:c6:a1:8d:
         e6:14:3e:41:88:d1:0d:19:24:d7:2c:89:fe:6c:54:da:87:f8:
         45:60:fc:1f:83:ba:77:ec:b3:c6:37:8c:a7:73:ba:92:95:a8:
         19:e1:35:1b:56:59:04:3f:0c:ad:1a:81:82:a5:3c:da:b6:1c:
         20:93:55:42:ca:5a:b5:43:83:99:5f:33:be:35:e9:bb:d8:07:
         d5:2c:3c:21:bb:2d:70:7d:1a:12:3e:35:45:d2:00:19:87:ef:
         0b:f7:38:70
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNPjy/rxtzdt+7vPdxLM05vFw0cAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE1M0E1MkI4REZEMkNFODFEMjQ4QTc2OTQ1QjNBRTVB
QzJBOEFGQTAeFw0yNjA0MDIxNTUxMjhaFw0yNzA0MDExNTU2MjhaMDMxMTAvBgNV
BAMTKDM5QTE0RDFFMDEwN0MxRUJFNDUxOTc1NkI5QkE1QjA4RTA5OUE4REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8BOK+265ZRrKL0vReF7+OhnEd
o7Uwj458K7UT0s7wYMPnYPJ75roAZNV7qhmoa5K2ZonDuiVPOdSLRtD0iQVaz07E
agDYHrXs3pOyZpsvFrazXnjrTgR/gmFF/IVi7CrkRipHx9kAMXnbbJ+lOthajFTB
iiTzagMnC/7Rcz984joXPqFfniE2UDx8Xry8ef9/wIWkhTrLK+mKmkT87/uSb4x+
hTo3GnSrPyv+jUYlZ6jOXMffp6hFzDLWIAdv3DoDsP6sV6uve4aVDHKRoWFsB04u
nO7gx+eGLVfXF2946KtWAPqKoEO3mQDc83bfhx3Tq4/ykYUuu0NQtPkFRO/lAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUOaFNHgEHwevkUZdWubpbCOCZqN0wHwYDVR0j
BBgwFoAUYVOlK439LOgdJIp2lFs65awqivowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlBXVzdjMlE5Q1RDQkU2clBKWHJLUnBwZUJZMVlyTlNTRXloVm1QbTlI
QTEvMC82MTUzQTUyQjhERkQyQ0U4MUQyNDhBNzY5NDVCM0FFNUFDMkE4QUZBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYxNTNBNTJCOERGRDJDRTgx
RDI0OEE3Njk0NUIzQUU1QUMyQThBRkEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZQV1c3YzJROUNUQ0JFNnJQSlhyS1JwcGVCWTFZck5TU0V5aFZtUG05SEExLzAv
MzEzMzM4MmUzMTM4MzUyZTM0MzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzMzMzM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKuSgwDQYJKoZIhvcNAQELBQADggEBADTo9IBr
c/dkDkcEsF2rpTihpMW6OJ26R0IMN4fndE0r8n6ah31rvXD/EknoSUqTyEQPpkMq
T4JRc4dm5sAVB9grPMo2dX/dCzUQrVgxHR7E/SqkypGXnzMl9ompK5MZgSRwglex
abVehIct6IMQew7qPhwR1DCuvn1XbhBUF3m2MPWIgugrTFv1vCvdYsSk281dqDTQ
ckem52ls7NBrvMahjeYUPkGI0Q0ZJNcsif5sVNqH+EVg/B+Dunfss8Y3jKdzupKV
qBnhNRtWWQQ/DK0agYKlPNq2HCCTVULKWrVDg5lfM7416bvYB9UsPCG7LXB9GhI+
NUXSABmH7wv3OHA=
-----END CERTIFICATE-----
Generated at Wed Apr 8 14:55:01 2026 by rpki-client