Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232302e302f32342d3234203d3e203533313533.roa
File:                     3133382e3230342e3232302e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          4w0j16oYUYa2jht3b3zZkZv3c1Gs8v8V6uSUqkiGufY=
Subject key identifier:   F1:BA:E5:2C:FC:7C:78:EB:C9:38:D8:87:4C:43:C5:50:8B:3D:98:87
Certificate issuer:       /CN=81F96998922EA21FA1013370EAB8480E5EDB9F5C
Certificate serial:       4CD5D42CE23549DA5DEAFAB3CF33C755413F03DD
Authority key identifier: 81:F9:69:98:92:2E:A2:1F:A1:01:33:70:EA:B8:48:0E:5E:DB:9F:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F96998922EA21FA1013370EAB8480E5EDB9F5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232302e302f32342d3234203d3e203533313533.roa
Signing time:             Wed 29 Apr 2026 14:34:56 +0000
ROA not before:           Wed 29 Apr 2026 14:29:56 +0000
ROA not after:            Wed 28 Apr 2027 14:34:56 +0000
asID:                     53153
IP address blocks:        138.204.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/81F96998922EA21FA1013370EAB8480E5EDB9F5C.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/81F96998922EA21FA1013370EAB8480E5EDB9F5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F96998922EA21FA1013370EAB8480E5EDB9F5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 May 2026 14:48:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:d5:d4:2c:e2:35:49:da:5d:ea:fa:b3:cf:33:c7:55:41:3f:03:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81F96998922EA21FA1013370EAB8480E5EDB9F5C
        Validity
            Not Before: Apr 29 14:29:56 2026 GMT
            Not After : Apr 28 14:34:56 2027 GMT
        Subject: CN=F1BAE52CFC7C78EBC938D8874C43C5508B3D9887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8c:d3:c6:55:de:86:69:c6:f2:43:0d:1c:e9:
                    e4:a6:3e:9c:b4:58:1c:81:96:71:68:28:96:63:e7:
                    3f:c0:d6:b1:f3:eb:0b:5f:a9:3d:84:dc:d2:12:a5:
                    1d:72:7f:ab:b8:fe:d4:dc:1b:2b:b4:c7:c3:e6:0e:
                    45:13:76:cf:13:bd:71:ed:1b:2f:e8:95:56:b1:0c:
                    de:80:8b:d6:c1:5d:d0:db:90:3d:94:f1:3f:83:b6:
                    e4:8c:52:60:56:78:c4:d3:f4:db:21:f2:51:7d:f4:
                    4d:a0:9a:58:09:de:a2:fc:31:ca:99:f1:21:c4:a7:
                    13:2b:63:d4:ec:63:c0:c8:90:5c:e0:bd:a3:c8:24:
                    8a:bc:dd:f9:98:34:ed:b4:ee:d7:5f:f4:1e:4a:c5:
                    ae:2b:49:52:07:78:8f:06:17:5a:10:aa:fd:15:9a:
                    3e:12:04:42:a2:8f:34:80:47:87:30:c1:70:6f:13:
                    b5:a1:63:80:bc:11:9f:17:82:ed:4c:26:64:59:bd:
                    4d:99:c9:08:6a:d6:1c:9c:28:58:83:5e:d7:23:d0:
                    a7:a1:e0:f4:8a:26:f5:2c:4b:ac:af:26:08:6c:8f:
                    7a:70:c5:fb:1c:21:6f:d2:25:4b:2a:60:76:f5:4d:
                    46:0b:c8:1d:f4:93:86:5c:c7:2b:dc:1c:be:fb:ba:
                    69:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:BA:E5:2C:FC:7C:78:EB:C9:38:D8:87:4C:43:C5:50:8B:3D:98:87
            X509v3 Authority Key Identifier:
                keyid:81:F9:69:98:92:2E:A2:1F:A1:01:33:70:EA:B8:48:0E:5E:DB:9F:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/81F96998922EA21FA1013370EAB8480E5EDB9F5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F96998922EA21FA1013370EAB8480E5EDB9F5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232302e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:76:fb:c9:3d:e3:82:de:db:a5:62:d4:41:34:05:71:d8:9a:
         18:49:a5:f2:03:e0:22:fe:e6:4c:5a:d6:d9:a1:dd:88:7b:fd:
         c7:a1:30:28:c3:a8:3f:04:07:28:10:e7:da:7b:29:b5:22:8d:
         f9:1d:cf:63:6f:43:d8:e2:e8:a8:be:f1:87:ec:ca:c2:9b:c5:
         8b:80:cb:22:b3:84:b6:2c:00:f0:e1:38:8c:41:0f:1d:e1:2c:
         9f:cb:23:58:f2:68:41:6d:49:75:0e:3f:43:42:8a:44:93:4a:
         93:71:59:a6:2d:cf:83:1d:a7:60:48:b1:47:10:91:be:4d:de:
         e1:e7:2d:18:02:b1:1f:51:6f:1e:f6:29:16:14:2f:98:25:4f:
         c1:32:54:22:9d:46:77:01:55:66:e3:79:9f:10:8c:5f:08:95:
         ea:61:89:52:9a:a8:1b:53:cc:97:bf:01:cd:10:16:d7:dc:18:
         4e:d9:92:34:b9:9d:5d:09:02:c6:27:5c:0d:84:e9:41:ce:ef:
         e2:f8:f4:1e:17:3e:a4:03:a8:df:c7:16:c2:18:94:20:42:a4:
         6c:4a:3d:b4:ba:e5:37:0b:40:e9:33:a5:a7:70:9a:fc:44:0d:
         7a:36:da:9d:c3:22:94:c7:0b:57:a9:74:21:52:ab:6b:3c:b4:
         12:7f:c7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 00:51:17 2026 by rpki-client