Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0/3133382e3138362e3130342e302f32322d3234203d3e20323634333533.roa
File:                     3133382e3138362e3130342e302f32322d3234203d3e20323634333533.roa (raw, json)
Hash identifier:          Sr0eJvEKM2tPPEp3CVuKuiN3CpdIqx/CTriW/Oh0XTk=
Subject key identifier:   0B:74:0E:70:C2:5A:28:1F:36:7A:48:75:25:00:3C:01:BC:05:7D:75
Certificate issuer:       /CN=6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D
Certificate serial:       767000CEB8DA833B1A2CCAFF276E8A9A97B518C4
Authority key identifier: 6D:39:85:2A:3C:6A:B4:CF:15:9D:D7:D1:50:BB:AD:5D:44:E3:D8:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0/3133382e3138362e3130342e302f32322d3234203d3e20323634333533.roa
Signing time:             Mon 22 Jun 2026 22:20:38 +0000
ROA not before:           Mon 22 Jun 2026 22:15:38 +0000
ROA not after:            Mon 21 Jun 2027 22:20:38 +0000
asID:                     264353
IP address blocks:        138.186.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0/6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D.crl
                          rsync://rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0/6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 11:24:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:70:00:ce:b8:da:83:3b:1a:2c:ca:ff:27:6e:8a:9a:97:b5:18:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D
        Validity
            Not Before: Jun 22 22:15:38 2026 GMT
            Not After : Jun 21 22:20:38 2027 GMT
        Subject: CN=0B740E70C25A281F367A487525003C01BC057D75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a4:cf:29:63:44:32:8d:02:ce:9a:55:a7:b3:
                    bf:62:a6:a9:c0:4a:9c:4b:11:8a:90:31:eb:09:55:
                    1b:c3:fc:f8:b9:13:59:80:c9:5c:42:c8:b9:db:ab:
                    f4:a8:0d:ce:fd:7f:a0:8e:40:79:4f:44:e6:bc:75:
                    7f:0b:e2:21:3e:45:90:d7:b2:fc:1f:7a:82:49:0d:
                    4a:70:aa:05:33:c1:62:ba:81:ed:f6:7b:8b:02:74:
                    e3:c4:96:d2:14:f0:91:87:cf:20:42:0b:66:6b:96:
                    ba:1a:12:13:6f:e4:fd:16:03:7e:34:90:3b:a1:93:
                    a7:15:6f:da:95:0f:66:8b:ef:ee:28:9b:73:89:a8:
                    5a:69:d7:91:81:4f:7a:cc:a4:60:73:f3:9c:30:36:
                    8d:7b:e0:29:aa:a5:6c:83:c6:07:e6:35:c1:28:52:
                    97:43:88:c9:b3:bb:bc:48:44:a9:bb:0a:d9:80:55:
                    0f:2e:77:cb:51:ca:b4:a7:59:4d:5a:9f:84:25:71:
                    9b:f1:e8:0d:3d:2d:c4:e2:89:0b:4a:c9:ca:2e:8a:
                    4c:48:f4:55:78:90:e7:a6:a4:bd:de:48:38:ba:63:
                    ec:aa:cf:85:89:44:62:d1:b9:f5:32:24:2c:0b:e3:
                    8d:0a:89:d6:db:82:3b:d5:b1:eb:92:7d:57:66:d3:
                    ec:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:74:0E:70:C2:5A:28:1F:36:7A:48:75:25:00:3C:01:BC:05:7D:75
            X509v3 Authority Key Identifier:
                keyid:6D:39:85:2A:3C:6A:B4:CF:15:9D:D7:D1:50:BB:AD:5D:44:E3:D8:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0/6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0/3133382e3138362e3130342e302f32322d3234203d3e20323634333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:95:12:3b:f1:35:ec:aa:60:c8:dd:88:54:7e:90:73:25:27:
         97:a7:5c:89:5c:bc:87:a6:c1:13:7a:09:92:cb:9a:9c:d5:02:
         cf:83:12:96:e5:73:cb:1a:dc:1f:d9:cf:d9:23:db:bc:38:90:
         b1:14:ed:b5:29:9c:28:cd:ef:b5:a3:42:cc:89:99:af:b7:a4:
         c3:bf:69:ce:f7:3f:7e:51:b5:4b:06:4e:ed:3f:c1:94:be:ee:
         08:39:64:e9:1e:b0:a6:93:66:37:1f:ea:9c:01:bd:ef:eb:53:
         0b:6d:2d:dd:db:fa:ad:3f:a9:37:7d:ce:83:e7:49:ee:8d:27:
         36:98:48:44:86:d3:27:00:11:c4:cf:e0:1f:a6:08:31:35:06:
         34:a1:74:d1:32:75:25:71:9a:83:29:15:63:c1:4e:22:46:52:
         af:66:55:80:3f:2a:e1:1a:64:96:91:cb:73:65:d9:b1:55:07:
         0e:77:32:b3:fc:5d:f7:8a:9d:aa:84:1c:d1:65:f5:7c:e7:e2:
         b4:1b:4c:e9:26:5f:2d:2b:bb:e3:3f:c0:da:17:90:d3:04:b1:
         06:04:1e:49:a8:1b:6e:83:67:73:a8:fa:bb:c9:cf:48:fd:96:
         3a:86:2b:f3:92:85:dd:94:29:cc:cd:16:b2:a5:f8:8b:51:df:
         77:61:8e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 13:13:05 2026 by rpki-client