Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e3138352e3130382e302f32322d3232203d3e203532373231.roa
File:                     3133382e3138352e3130382e302f32322d3232203d3e203532373231.roa (raw, json)
Hash identifier:          Xu3SUA799ohRH2Ow5hFzzjlr5CMdLFUbeciIfTtfOa4=
Subject key identifier:   52:C6:2D:B9:6E:39:55:DC:AD:D5:A1:82:24:14:70:0D:0D:5D:D8:FE
Certificate issuer:       /CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
Certificate serial:       0CBB55EDB2590741EF3FC75AE9605543CB714DC6
Authority key identifier: CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e3138352e3130382e302f32322d3232203d3e203532373231.roa
Signing time:             Tue 22 Sep 2026 17:12:02 +0000
ROA not before:           Tue 22 Sep 2026 17:07:02 +0000
ROA not after:            Tue 21 Sep 2027 17:12:02 +0000
asID:                     52721
IP address blocks:        138.185.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl
                          rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 18:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:bb:55:ed:b2:59:07:41:ef:3f:c7:5a:e9:60:55:43:cb:71:4d:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
        Validity
            Not Before: Sep 22 17:07:02 2026 GMT
            Not After : Sep 21 17:12:02 2027 GMT
        Subject: CN=52C62DB96E3955DCADD5A1822414700D0D5DD8FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:be:7e:f6:fb:18:f1:cd:a4:ea:80:0a:32:37:
                    a7:c9:40:de:01:f4:40:37:a1:6d:32:d9:54:80:22:
                    63:c3:66:bb:93:7d:23:bf:2d:ae:29:36:75:f6:7b:
                    5b:30:3b:5a:7f:87:8d:87:03:f4:c2:79:63:a8:78:
                    49:f4:fc:b3:a3:f6:65:ce:c9:29:c7:07:ec:49:26:
                    cd:9c:23:31:de:0a:5b:3c:4c:57:5b:1f:34:ad:1c:
                    b3:e9:37:b8:83:f0:69:9b:ce:5f:e3:d1:e8:ec:51:
                    2c:12:7c:1d:4c:42:4e:1c:01:d4:63:f9:b3:97:fc:
                    b6:99:20:27:0b:4d:b7:0c:11:ca:48:01:74:5a:c3:
                    56:02:a9:f8:eb:f0:62:fc:c5:d3:47:b6:17:b7:95:
                    fd:b9:04:72:52:95:6a:2f:20:2f:6e:95:f0:86:ee:
                    0a:e5:6f:36:cc:96:ac:62:c6:a6:0c:33:57:a1:15:
                    64:96:6a:e8:3c:06:7a:a6:8f:c6:b9:38:b0:97:df:
                    f7:8b:6f:a8:38:ed:55:f5:b1:55:5d:de:d3:71:8d:
                    83:51:2d:eb:78:62:be:aa:c9:a8:5c:39:1f:48:f1:
                    a6:e6:b1:1d:da:13:e1:dc:d1:ec:e1:c3:a8:52:47:
                    ab:e3:f0:c0:8c:5f:16:41:dc:c3:1a:5e:19:8e:85:
                    01:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:C6:2D:B9:6E:39:55:DC:AD:D5:A1:82:24:14:70:0D:0D:5D:D8:FE
            X509v3 Authority Key Identifier:
                keyid:CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e3138352e3130382e302f32322d3232203d3e203532373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:f8:e9:4a:f4:ea:35:f6:09:64:23:fd:cc:b9:3f:71:da:d1:
         a4:94:f7:e7:f5:f0:3a:58:6f:39:98:30:28:51:00:1d:a9:af:
         0b:c2:02:e2:79:e7:bf:e8:52:fe:c5:52:12:26:bb:6c:b0:62:
         10:04:3a:95:5c:b9:e5:db:4f:4c:1c:14:08:3a:0f:72:15:15:
         14:cd:f3:2f:c6:20:10:1a:88:cd:22:84:6b:af:84:58:53:33:
         cf:4a:4f:28:4a:1f:79:11:eb:05:1c:43:28:18:d0:35:fd:15:
         71:84:58:b7:72:ce:67:1c:f8:de:71:9b:89:a1:3d:f2:e7:3e:
         19:00:7f:42:dc:4f:4d:47:2d:1b:71:b0:7c:5d:f5:13:22:0c:
         00:fb:3d:41:15:3a:98:c1:86:69:fa:31:18:0e:ff:ee:7d:e4:
         fe:33:54:05:db:2c:17:16:85:5c:07:48:e1:de:0d:80:46:34:
         b4:c7:f5:25:85:ec:f2:3c:58:d1:e0:de:57:c0:15:0c:f1:32:
         60:1c:49:b7:b7:d6:eb:d8:c9:2a:e1:c5:cc:53:d5:a1:f5:cc:
         52:46:cb:27:19:37:3a:c7:90:04:71:a5:f2:e1:74:96:98:3f:
         fc:12:5e:75:1c:51:c4:29:a1:e4:b6:20:f9:21:c1:d8:cd:e5:
         bc:5f:2f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 10:44:35 2026 by rpki-client