Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133392e302f32342d3234203d3e20323634353530.roa
File:                     3133382e302e3133392e302f32342d3234203d3e20323634353530.roa (raw, json)
Hash identifier:          bPuW/qWx9Zmcswp40kJBCb4L21DaIALkAlFicECTXtg=
Subject key identifier:   DF:06:BF:B9:C5:03:BD:54:27:F4:55:AC:9B:C7:43:75:A4:B2:E5:FE
Certificate issuer:       /CN=FB435E794D86CB9BAE800A6D289A88F771B5B583
Certificate serial:       75A24B4392F38FE2C565763F827D5C27E5032836
Authority key identifier: FB:43:5E:79:4D:86:CB:9B:AE:80:0A:6D:28:9A:88:F7:71:B5:B5:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB435E794D86CB9BAE800A6D289A88F771B5B583.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133392e302f32342d3234203d3e20323634353530.roa
Signing time:             Tue 25 Aug 2026 01:01:47 +0000
ROA not before:           Tue 25 Aug 2026 00:56:47 +0000
ROA not after:            Tue 24 Aug 2027 01:01:47 +0000
asID:                     264550
IP address blocks:        138.0.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/FB435E794D86CB9BAE800A6D289A88F771B5B583.crl
                          rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/FB435E794D86CB9BAE800A6D289A88F771B5B583.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB435E794D86CB9BAE800A6D289A88F771B5B583.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 23:16:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:a2:4b:43:92:f3:8f:e2:c5:65:76:3f:82:7d:5c:27:e5:03:28:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB435E794D86CB9BAE800A6D289A88F771B5B583
        Validity
            Not Before: Aug 25 00:56:47 2026 GMT
            Not After : Aug 24 01:01:47 2027 GMT
        Subject: CN=DF06BFB9C503BD5427F455AC9BC74375A4B2E5FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:01:0b:b5:23:f7:2f:6b:7f:dd:e5:dd:e4:06:
                    12:94:3c:3a:45:0f:4c:32:ca:87:62:47:b1:25:9f:
                    a4:de:18:c4:dc:64:ab:de:1d:ed:ad:a4:65:5e:1c:
                    c8:ef:44:e5:58:6b:97:e1:d5:38:a3:ec:ad:3c:46:
                    be:66:73:60:d4:4a:d1:cd:26:d1:97:b5:62:26:81:
                    54:50:94:ce:0c:f4:ed:eb:3f:13:8d:03:04:43:f1:
                    bc:2f:20:47:b3:2d:fa:ba:95:42:62:1f:dc:97:c1:
                    8a:ba:3e:e7:8b:db:5d:1a:ce:e8:1e:c7:f6:fb:b9:
                    aa:74:62:8c:80:8c:01:8c:b9:e6:d7:8b:df:e3:94:
                    31:1f:95:a0:bd:05:00:2e:3b:c4:1d:2d:af:1b:ae:
                    45:3c:38:1f:ec:f1:41:85:b9:0c:43:3f:d7:a0:fd:
                    9c:95:0c:a3:19:ae:e2:46:1c:65:c5:9b:bb:51:38:
                    70:de:52:45:23:a7:36:5f:5f:69:23:ea:e3:e5:ae:
                    b6:26:b6:b9:79:71:d6:8f:fb:99:d4:0a:ab:55:03:
                    bd:4a:66:b4:d6:50:af:62:9c:e0:57:50:8c:42:63:
                    be:7a:21:1a:e5:35:37:e3:5f:48:1e:40:6c:31:43:
                    e3:d4:03:d0:20:a7:89:f5:b9:ef:e7:6c:c4:00:cf:
                    9e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:06:BF:B9:C5:03:BD:54:27:F4:55:AC:9B:C7:43:75:A4:B2:E5:FE
            X509v3 Authority Key Identifier:
                keyid:FB:43:5E:79:4D:86:CB:9B:AE:80:0A:6D:28:9A:88:F7:71:B5:B5:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/FB435E794D86CB9BAE800A6D289A88F771B5B583.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB435E794D86CB9BAE800A6D289A88F771B5B583.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133392e302f32342d3234203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:a6:38:e8:dd:0e:db:f5:d7:b9:ac:54:ea:7b:0a:92:e5:d5:
         5a:4d:a1:96:24:99:96:58:dd:7f:f3:1f:e8:ed:7e:36:33:37:
         3e:9d:47:2a:1e:35:62:05:c2:3b:dc:fc:ac:ce:19:cd:ed:99:
         83:b2:e5:72:3a:9a:0f:c0:16:72:9d:3b:e3:43:b8:f1:fd:da:
         ad:94:0a:4f:81:5d:60:d8:59:4f:6d:87:e1:d7:cc:e7:4e:c2:
         4b:c5:17:23:85:39:f7:fa:01:be:5f:45:a4:1d:c3:e5:b6:53:
         6e:b3:93:70:98:d5:47:16:dc:77:54:a7:48:d7:2c:ff:09:37:
         57:44:57:cf:8d:91:26:35:38:5a:9f:63:49:ef:9a:fb:11:e2:
         3b:a5:6a:62:2b:16:9c:05:46:a3:b3:a6:7f:5a:93:fc:e3:96:
         01:41:db:f9:22:04:0e:99:74:ab:d9:37:60:9b:be:9f:33:9c:
         67:c2:3e:48:97:a7:0c:a3:ec:44:8e:b1:6e:ac:17:14:f8:41:
         5a:c5:06:a3:9b:b6:48:67:7b:be:b5:fb:96:af:72:16:88:20:
         c3:6e:7f:aa:1d:83:c9:7f:a8:cf:38:96:85:46:2b:f3:40:75:
         bc:36:27:e8:a0:74:7d:dc:db:df:fe:2f:3d:e6:f0:b1:98:fb:
         35:05:3f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 16:25:51 2026 by rpki-client