Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3133382e3132312e3234382e302f32322d3234203d3e20323632333933.roa
File:                     3133382e3132312e3234382e302f32322d3234203d3e20323632333933.roa (raw, json)
Hash identifier:          KIHh2wneLUi2Tz5BIgwyPVvzxNQ7W/aqrqH7EZZQH78=
Subject key identifier:   2B:4C:39:A9:29:14:FE:34:50:59:52:92:EC:C0:25:62:F0:F7:9A:87
Certificate issuer:       /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Certificate serial:       4D02F6DC59972BBF713A5C7050C1C9DAEAAEF7AC
Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3133382e3132312e3234382e302f32322d3234203d3e20323632333933.roa
Signing time:             Fri 04 Sep 2026 14:48:26 +0000
ROA not before:           Fri 04 Sep 2026 14:43:26 +0000
ROA not after:            Fri 03 Sep 2027 14:48:26 +0000
asID:                     262393
IP address blocks:        138.121.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl
                          rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 16:10:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:02:f6:dc:59:97:2b:bf:71:3a:5c:70:50:c1:c9:da:ea:ae:f7:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
        Validity
            Not Before: Sep  4 14:43:26 2026 GMT
            Not After : Sep  3 14:48:26 2027 GMT
        Subject: CN=2B4C39A92914FE3450595292ECC02562F0F79A87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:82:62:24:be:79:1e:34:9d:6a:b0:4d:c2:d6:
                    35:b8:d4:74:57:81:d8:59:d0:32:c2:ce:78:d1:bf:
                    03:6f:7a:a1:e5:5b:c9:4e:ea:ef:0b:24:d6:71:ca:
                    c9:4b:2f:bd:ef:78:d5:a0:c5:fd:a3:cf:e8:d3:8a:
                    68:dc:f8:8f:b2:85:13:5c:97:39:81:2b:92:54:ed:
                    8f:6a:29:60:a2:92:65:37:3c:8a:2d:01:38:bd:04:
                    1a:71:8f:97:cf:49:68:39:09:e0:4b:86:a0:e7:ac:
                    64:fc:8e:de:69:c6:22:d3:b2:0f:2f:dd:e9:7b:d2:
                    95:d3:2b:87:65:08:e0:b6:ee:d6:14:a9:40:b5:98:
                    13:96:93:19:b2:7e:70:e9:fe:7b:63:00:3c:59:14:
                    2e:3b:f7:bf:85:e1:c2:f1:45:eb:ae:98:f6:80:9c:
                    22:20:7e:37:f6:07:ca:09:27:30:77:2e:b2:6f:4d:
                    2b:f1:3d:0e:15:90:d6:a5:76:d5:0c:29:a0:21:e6:
                    8f:73:b9:76:08:a3:5b:36:18:10:a7:ba:90:7f:94:
                    e3:2c:58:43:cb:3c:87:33:49:81:4d:fd:2d:6a:64:
                    b0:3c:a9:36:b0:7b:72:16:7a:02:b1:9e:85:86:20:
                    96:32:20:ef:09:f3:31:e3:4d:52:85:8a:77:f1:77:
                    8a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:4C:39:A9:29:14:FE:34:50:59:52:92:EC:C0:25:62:F0:F7:9A:87
            X509v3 Authority Key Identifier:
                keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3133382e3132312e3234382e302f32322d3234203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:62:6a:0c:a5:26:e7:7a:87:f1:c2:bb:ff:10:de:82:e2:50:
         e5:c8:4b:25:f9:11:61:ef:15:d2:22:90:1f:22:66:7f:52:19:
         72:03:e6:fd:5f:1c:a5:d1:d7:55:2f:4d:f4:be:e8:0d:ea:df:
         58:ca:22:5e:84:f5:70:79:84:a7:63:a1:78:6a:4c:bb:f6:fe:
         6c:90:f0:57:38:83:01:e3:21:0f:bd:c1:ce:b2:f2:30:c0:c8:
         3a:a4:d3:a3:eb:60:11:66:72:4e:a4:20:82:39:ac:7c:b2:67:
         12:06:14:5a:3a:75:2b:49:4e:4f:d2:40:b6:0e:90:b3:fd:9e:
         84:6c:78:dd:90:28:62:47:6c:7d:c7:da:d8:1c:01:d0:00:d3:
         85:7a:e3:ae:a7:df:bd:1f:81:af:66:6f:95:6d:86:36:2e:b4:
         ee:6a:ad:a1:ec:f4:8d:ab:0f:4f:86:68:16:6a:2e:1b:ee:01:
         de:22:f9:45:91:60:86:2c:8d:80:29:72:ba:0d:36:f4:24:83:
         d4:f8:00:c7:8e:73:2c:5f:d6:b4:df:bc:07:46:99:a6:d3:1f:
         28:17:c9:62:0b:a1:6c:15:ec:f1:ed:14:6d:71:59:be:a1:ac:
         06:80:c9:33:b3:bc:be:b3:72:e1:ef:30:80:ff:eb:a0:66:3f:
         52:db:2d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 05:15:03 2026 by rpki-client