Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2gAQyXmAEGQWS7CwMbBL62x8g6nBcmmPmoPvNWAQCove/0/3133382e3131372e39342e302f32342d3234203d3e20323634323332.roa
File:                     3133382e3131372e39342e302f32342d3234203d3e20323634323332.roa (raw, json)
Hash identifier:          SKpfwDpV8zbtYrymfwES3xKGy2U5WLtpCQqMjswfAwk=
Subject key identifier:   D5:69:AE:98:F3:DE:BC:57:ED:83:05:D2:B1:E9:02:34:FC:9E:C7:D5
Certificate issuer:       /CN=B2771D29A01562AAA95113C615088B87C19EEA71
Certificate serial:       335DC52CCC76BECB92AD6E40DACE08EB302AD226
Authority key identifier: B2:77:1D:29:A0:15:62:AA:A9:51:13:C6:15:08:8B:87:C1:9E:EA:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2771D29A01562AAA95113C615088B87C19EEA71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2gAQyXmAEGQWS7CwMbBL62x8g6nBcmmPmoPvNWAQCove/0/3133382e3131372e39342e302f32342d3234203d3e20323634323332.roa
Signing time:             Fri 11 Sep 2026 20:11:39 +0000
ROA not before:           Fri 11 Sep 2026 20:06:39 +0000
ROA not after:            Fri 10 Sep 2027 20:11:39 +0000
asID:                     264232
IP address blocks:        138.117.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2gAQyXmAEGQWS7CwMbBL62x8g6nBcmmPmoPvNWAQCove/0/B2771D29A01562AAA95113C615088B87C19EEA71.crl
                          rsync://rpki-repo.registro.br/repo/2gAQyXmAEGQWS7CwMbBL62x8g6nBcmmPmoPvNWAQCove/0/B2771D29A01562AAA95113C615088B87C19EEA71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2771D29A01562AAA95113C615088B87C19EEA71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 13:17:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:5d:c5:2c:cc:76:be:cb:92:ad:6e:40:da:ce:08:eb:30:2a:d2:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2771D29A01562AAA95113C615088B87C19EEA71
        Validity
            Not Before: Sep 11 20:06:39 2026 GMT
            Not After : Sep 10 20:11:39 2027 GMT
        Subject: CN=D569AE98F3DEBC57ED8305D2B1E90234FC9EC7D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fd:26:bc:87:01:e8:c8:f3:02:7e:4c:71:fe:
                    0d:0b:64:a7:b4:58:9e:79:c0:47:00:b8:d7:7d:14:
                    3c:7f:00:70:cd:b4:ba:51:2e:81:d1:91:d9:cb:19:
                    f6:67:8c:7d:f3:5d:e0:f6:44:6e:51:2e:6f:3e:7f:
                    e9:28:81:bf:56:c1:f5:14:28:9c:21:6a:70:e4:5f:
                    6a:de:b2:90:aa:fc:a9:48:02:ac:26:02:e9:a6:af:
                    d3:8c:80:e6:3c:70:27:95:50:4e:6d:06:0e:47:3a:
                    a6:5a:70:2d:9a:fa:3f:69:22:38:dd:3c:df:0c:b0:
                    22:f1:7d:5e:84:bd:d0:a3:ab:3b:06:6f:80:2c:73:
                    42:c2:76:3f:5f:32:67:58:83:eb:dd:02:6a:32:a4:
                    4a:c3:f6:14:df:53:68:ab:a7:c9:d0:b6:ac:72:d1:
                    b3:03:41:3f:72:83:9e:53:5b:4a:d0:02:40:c7:79:
                    7f:6d:e6:f6:3a:89:ae:c2:71:fe:fe:8a:8a:ba:05:
                    28:a3:ef:1f:ba:84:ff:62:cb:54:98:4c:52:e5:25:
                    1b:74:55:11:5e:41:3f:7d:a4:58:e2:c7:58:3c:69:
                    42:75:17:92:b5:17:51:db:11:42:71:03:37:eb:c2:
                    d4:78:47:35:91:df:45:1c:3c:2b:81:d5:1d:46:14:
                    c9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:69:AE:98:F3:DE:BC:57:ED:83:05:D2:B1:E9:02:34:FC:9E:C7:D5
            X509v3 Authority Key Identifier:
                keyid:B2:77:1D:29:A0:15:62:AA:A9:51:13:C6:15:08:8B:87:C1:9E:EA:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2gAQyXmAEGQWS7CwMbBL62x8g6nBcmmPmoPvNWAQCove/0/B2771D29A01562AAA95113C615088B87C19EEA71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2771D29A01562AAA95113C615088B87C19EEA71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2gAQyXmAEGQWS7CwMbBL62x8g6nBcmmPmoPvNWAQCove/0/3133382e3131372e39342e302f32342d3234203d3e20323634323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:a8:67:e5:dc:4f:05:30:34:21:10:b2:dc:6e:36:53:b0:35:
         e9:af:a8:5f:8b:a8:41:25:59:bb:d0:eb:e6:4f:d4:0c:6d:16:
         2b:0e:c3:cb:c9:7d:5b:0d:f9:1a:6c:3e:e1:35:68:20:d2:b1:
         f0:4f:03:c6:10:b7:37:42:5d:95:fd:0b:a6:6d:71:b8:df:3c:
         93:3b:3b:e4:e7:7d:22:f3:95:3f:66:a7:39:f5:87:a5:f9:e0:
         45:1c:39:fb:51:b9:51:0b:56:ac:ef:91:69:47:eb:90:3e:42:
         65:14:4e:78:1c:82:a3:4e:16:58:d1:67:37:c3:48:d1:e7:6b:
         ae:ba:9d:57:32:64:db:7d:4b:3e:2f:55:9e:74:59:2a:a9:e4:
         7b:43:8c:30:4e:f3:0d:75:ff:ad:50:a5:6a:35:68:d1:24:74:
         a2:30:42:35:fd:b9:9a:f6:24:88:fa:63:cb:84:36:fc:a0:6a:
         3e:0d:f2:2c:34:92:cb:51:d5:29:d9:04:62:ea:19:17:29:9d:
         76:ab:93:26:da:5b:cd:fc:0c:f2:91:53:c0:f0:04:d9:27:48:
         8f:5d:17:a9:76:45:f5:48:20:46:b3:d1:a4:b2:b3:f2:f4:d9:
         00:c3:60:f8:71:08:94:0b:41:ec:84:03:81:ac:a8:0e:2a:4c:
         3d:14:f0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 00:53:07 2026 by rpki-client