Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2gAQyXmAEGQWS7CwMbBL62x8g6nBcmmPmoPvNWAQCove/0/3133382e3131372e39322e302f32332d3233203d3e20323634323332.roa
File:                     3133382e3131372e39322e302f32332d3233203d3e20323634323332.roa (raw, json)
Hash identifier:          y9y2zqrsWPSxuPHzgPmhkn4CRBOTeoMPMx2lDKy2ETI=
Subject key identifier:   48:98:BC:A2:12:D0:C1:F0:9B:6D:97:EE:52:04:14:71:D1:69:95:D3
Certificate issuer:       /CN=B2771D29A01562AAA95113C615088B87C19EEA71
Certificate serial:       585FA95F41392D8A397085DAF6C9F64C2CFBC3F8
Authority key identifier: B2:77:1D:29:A0:15:62:AA:A9:51:13:C6:15:08:8B:87:C1:9E:EA:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2771D29A01562AAA95113C615088B87C19EEA71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2gAQyXmAEGQWS7CwMbBL62x8g6nBcmmPmoPvNWAQCove/0/3133382e3131372e39322e302f32332d3233203d3e20323634323332.roa
Signing time:             Fri 11 Sep 2026 20:11:42 +0000
ROA not before:           Fri 11 Sep 2026 20:06:42 +0000
ROA not after:            Fri 10 Sep 2027 20:11:42 +0000
asID:                     264232
IP address blocks:        138.117.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2gAQyXmAEGQWS7CwMbBL62x8g6nBcmmPmoPvNWAQCove/0/B2771D29A01562AAA95113C615088B87C19EEA71.crl
                          rsync://rpki-repo.registro.br/repo/2gAQyXmAEGQWS7CwMbBL62x8g6nBcmmPmoPvNWAQCove/0/B2771D29A01562AAA95113C615088B87C19EEA71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2771D29A01562AAA95113C615088B87C19EEA71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 23:56:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:5f:a9:5f:41:39:2d:8a:39:70:85:da:f6:c9:f6:4c:2c:fb:c3:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2771D29A01562AAA95113C615088B87C19EEA71
        Validity
            Not Before: Sep 11 20:06:42 2026 GMT
            Not After : Sep 10 20:11:42 2027 GMT
        Subject: CN=4898BCA212D0C1F09B6D97EE52041471D16995D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:dc:94:6f:ca:08:5d:d2:00:08:25:26:d6:59:
                    57:e1:23:e1:b0:b3:38:c4:32:ab:8f:db:22:6d:f0:
                    bd:62:18:ac:bf:51:c9:67:a4:31:4c:9b:02:50:f3:
                    26:03:40:43:a3:9a:8b:1d:38:d7:15:cf:0d:c7:e7:
                    9d:12:07:17:7c:e8:f5:34:85:75:8e:9c:e3:6f:59:
                    38:bc:bc:ae:65:27:a3:86:b7:1e:a7:3d:b6:9e:b8:
                    75:89:2f:a4:d6:8b:9e:dc:f9:de:07:6b:cf:3b:ae:
                    5a:eb:ed:6f:d0:0e:49:5a:7e:63:75:58:d6:3a:54:
                    0d:81:ad:75:9d:f8:ad:1d:52:42:88:94:d8:46:0d:
                    8e:1d:01:3d:43:a3:c7:6d:5c:1e:7b:11:88:53:9e:
                    0f:ad:9b:4a:8e:4d:a9:46:1f:4e:3d:32:de:1f:dd:
                    21:58:3b:36:18:c4:c3:70:c5:1f:0d:e5:97:39:0d:
                    8b:87:21:b6:e1:ae:74:f1:4c:34:39:7a:6b:48:1a:
                    21:59:4b:8e:ee:06:fc:b5:b6:cc:39:1a:b1:a9:71:
                    71:dc:1c:07:eb:d9:23:4d:01:26:8d:ea:0e:f7:fa:
                    a7:6e:b8:1f:2a:c0:1a:5a:73:86:da:a7:b9:fc:22:
                    d5:95:5b:91:30:e4:5b:4e:09:d5:f1:29:c6:b1:65:
                    98:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:98:BC:A2:12:D0:C1:F0:9B:6D:97:EE:52:04:14:71:D1:69:95:D3
            X509v3 Authority Key Identifier:
                keyid:B2:77:1D:29:A0:15:62:AA:A9:51:13:C6:15:08:8B:87:C1:9E:EA:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2gAQyXmAEGQWS7CwMbBL62x8g6nBcmmPmoPvNWAQCove/0/B2771D29A01562AAA95113C615088B87C19EEA71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2771D29A01562AAA95113C615088B87C19EEA71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2gAQyXmAEGQWS7CwMbBL62x8g6nBcmmPmoPvNWAQCove/0/3133382e3131372e39322e302f32332d3233203d3e20323634323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:2c:9e:fb:4c:2c:06:bc:4f:96:41:36:69:61:4c:6e:a4:1a:
         a7:36:f7:ea:ce:0c:e2:2c:21:05:99:e4:42:d5:7c:63:b6:ef:
         94:29:e6:4f:ba:5e:97:3e:61:93:b0:2b:08:06:87:80:21:d2:
         59:7f:18:bc:c5:12:b7:ab:17:5c:fb:4e:10:0e:b8:b7:5f:b1:
         47:65:21:01:d0:5e:3f:28:9f:14:71:7b:55:ab:5a:19:fe:d8:
         08:3d:d6:4d:39:7d:0a:a2:53:6a:8a:83:93:17:d4:fc:f4:e5:
         9e:09:57:e8:57:d0:a0:71:b9:e2:d7:5e:3d:91:30:df:57:71:
         5a:a1:e6:e2:66:bf:3f:49:d0:cb:54:59:85:87:c3:c9:4b:0b:
         dc:28:77:3d:b1:52:5f:7d:7c:c1:56:5a:b3:55:0e:4a:d7:0c:
         cc:47:39:e6:97:a0:91:50:d5:33:02:a6:ca:6e:fc:9c:fd:dd:
         a1:2e:cd:d4:e2:99:99:1c:34:ac:ae:4e:05:ab:2b:a6:8f:71:
         fc:f7:3d:25:00:4b:76:9e:f0:d8:89:0f:fe:56:75:0f:40:67:
         6f:a9:e2:c0:3e:07:02:18:c1:b7:f6:85:83:cd:35:8e:5d:4c:
         2e:91:e1:e5:f5:2f:9a:fc:fd:31:30:46:00:22:5d:63:25:a8:
         ad:f0:ab:98
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWF+pX0E5LYo5cIXa9sn2TCz7w/gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjI3NzFEMjlBMDE1NjJBQUE5NTExM0M2MTUwODhCODdD
MTlFRUE3MTAeFw0yNjA5MTEyMDA2NDJaFw0yNzA5MTAyMDExNDJaMDMxMTAvBgNV
BAMTKDQ4OThCQ0EyMTJEMEMxRjA5QjZEOTdFRTUyMDQxNDcxRDE2OTk1RDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC13JRvyghd0gAIJSbWWVfhI+Gw
szjEMquP2yJt8L1iGKy/UclnpDFMmwJQ8yYDQEOjmosdONcVzw3H550SBxd86PU0
hXWOnONvWTi8vK5lJ6OGtx6nPbaeuHWJL6TWi57c+d4Ha887rlrr7W/QDklafmN1
WNY6VA2BrXWd+K0dUkKIlNhGDY4dAT1Do8dtXB57EYhTng+tm0qOTalGH049Mt4f
3SFYOzYYxMNwxR8N5Zc5DYuHIbbhrnTxTDQ5emtIGiFZS47uBvy1tsw5GrGpcXHc
HAfr2SNNASaN6g73+qduuB8qwBpac4bap7n8ItWVW5Ew5FtOCdXxKcaxZZiRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUSJi8ohLQwfCbbZfuUgQUcdFpldMwHwYDVR0j
BBgwFoAUsncdKaAVYqqpURPGFQiLh8Ge6nEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmdBUXlYbUFFR1FXUzdDd01iQkw2Mng4ZzZuQmNtbVBtb1B2TldBUUNv
dmUvMC9CMjc3MUQyOUEwMTU2MkFBQTk1MTEzQzYxNTA4OEI4N0MxOUVFQTcxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IyNzcxRDI5QTAxNTYyQUFB
OTUxMTNDNjE1MDg4Qjg3QzE5RUVBNzEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJnQVF5WG1BRUdRV1M3Q3dNYkJMNjJ4OGc2bkJjbW1QbW9Qdk5XQVFDb3ZlLzAv
MzEzMzM4MmUzMTMxMzcyZTM5MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzQzMjMzMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGKdVwwDQYJKoZIhvcNAQELBQADggEBAJMsnvtM
LAa8T5ZBNmlhTG6kGqc29+rODOIsIQWZ5ELVfGO275Qp5k+6Xpc+YZOwKwgGh4Ah
0ll/GLzFErerF1z7ThAOuLdfsUdlIQHQXj8onxRxe1WrWhn+2Ag91k05fQqiU2qK
g5MX1Pz05Z4JV+hX0KBxueLXXj2RMN9XcVqh5uJmvz9J0MtUWYWHw8lLC9wodz2x
Ul99fMFWWrNVDkrXDMxHOeaXoJFQ1TMCpspu/Jz93aEuzdTimZkcNKyuTgWrK6aP
cfz3PSUAS3ae8NiJD/5WdQ9AZ2+p4sA+BwIYwbf2hYPNNY5dTC6R4eX1L5r8/TEw
RgAiXWMlqK3wq5g=
-----END CERTIFICATE-----
Generated at Tue Oct 13 05:00:17 2026 by rpki-client