Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/0/3133382e3131382e3232302e302f32322d3234203d3e20323634323733.roa
File:                     3133382e3131382e3232302e302f32322d3234203d3e20323634323733.roa (raw, json)
Hash identifier:          WSrj6ykCpGELQhL9zqxZnD5m2pnswgvuvPvf2jRjYqw=
Subject key identifier:   CD:A8:BA:09:E0:65:34:B7:4F:D9:64:DA:84:BC:0E:5C:01:29:9A:AA
Certificate issuer:       /CN=1B576CE4804E29582AC6BEC13A34E2A245B01074
Certificate serial:       08F2C637562B6670F311C53E0A86B5AF56928875
Authority key identifier: 1B:57:6C:E4:80:4E:29:58:2A:C6:BE:C1:3A:34:E2:A2:45:B0:10:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B576CE4804E29582AC6BEC13A34E2A245B01074.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/0/3133382e3131382e3232302e302f32322d3234203d3e20323634323733.roa
Signing time:             Tue 01 Sep 2026 12:45:29 +0000
ROA not before:           Tue 01 Sep 2026 12:40:29 +0000
ROA not after:            Tue 31 Aug 2027 12:45:29 +0000
asID:                     264273
IP address blocks:        138.118.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/0/1B576CE4804E29582AC6BEC13A34E2A245B01074.crl
                          rsync://rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/0/1B576CE4804E29582AC6BEC13A34E2A245B01074.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B576CE4804E29582AC6BEC13A34E2A245B01074.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 22:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:f2:c6:37:56:2b:66:70:f3:11:c5:3e:0a:86:b5:af:56:92:88:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B576CE4804E29582AC6BEC13A34E2A245B01074
        Validity
            Not Before: Sep  1 12:40:29 2026 GMT
            Not After : Aug 31 12:45:29 2027 GMT
        Subject: CN=CDA8BA09E06534B74FD964DA84BC0E5C01299AAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6c:0c:f9:e6:f2:4d:9d:33:01:85:e9:04:fd:
                    1f:55:4f:51:12:be:a3:c8:fa:a0:e2:f6:2b:42:b7:
                    21:56:4c:6a:1d:39:db:9b:e7:bf:96:84:ab:d9:b5:
                    62:80:2c:53:7c:2d:ec:d6:f6:89:2e:6c:e3:f4:96:
                    16:a2:de:24:d1:4c:3f:25:5a:1f:d6:71:d0:18:7a:
                    be:7e:85:a5:32:53:cc:6a:d5:08:27:6b:64:ce:52:
                    4f:7e:21:fa:68:77:32:52:c1:55:f8:86:6a:a1:8a:
                    53:55:94:ef:9c:0e:d9:ad:1d:a8:68:34:70:a1:a6:
                    b2:39:d8:90:43:8c:b9:27:00:5b:74:d9:be:e9:19:
                    ce:b9:e2:f2:75:16:ac:19:16:c2:af:38:7d:74:38:
                    76:a3:63:0a:4d:ef:ab:64:4b:13:f0:f4:2f:1f:19:
                    9c:0d:23:b3:f9:de:19:61:d8:54:83:47:b9:02:a2:
                    66:60:52:c8:37:5f:1e:7c:7c:e1:f8:35:fc:6c:5e:
                    d8:99:9f:11:4c:0a:c0:f3:a7:6f:37:45:4c:4d:73:
                    b1:6f:62:66:02:78:40:e9:85:26:40:fe:b3:6d:8a:
                    38:cb:e0:59:8e:cc:91:5d:ce:d3:57:93:60:78:93:
                    a4:73:34:fe:10:7b:41:a1:03:5c:dc:19:ab:78:ef:
                    6f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A8:BA:09:E0:65:34:B7:4F:D9:64:DA:84:BC:0E:5C:01:29:9A:AA
            X509v3 Authority Key Identifier:
                keyid:1B:57:6C:E4:80:4E:29:58:2A:C6:BE:C1:3A:34:E2:A2:45:B0:10:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/0/1B576CE4804E29582AC6BEC13A34E2A245B01074.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B576CE4804E29582AC6BEC13A34E2A245B01074.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/0/3133382e3131382e3232302e302f32322d3234203d3e20323634323733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:e4:32:d0:71:72:d8:86:b2:bb:fa:be:05:56:2a:10:b7:b3:
         f4:0c:f8:66:b4:cb:4d:df:b1:04:75:5d:39:3f:de:26:ad:ca:
         fc:a2:f5:24:ee:67:dc:92:fa:64:81:18:0a:d6:f2:ae:9f:cd:
         fe:63:89:a5:9e:cc:a7:e9:d3:38:67:5b:3c:df:6b:1c:63:36:
         32:d8:c6:87:a9:5c:30:91:3e:e4:d2:37:79:ff:66:3f:67:bd:
         7c:57:2c:d5:9f:ff:5a:0c:f4:dc:ec:8f:83:81:bd:9a:ff:61:
         8c:25:05:72:f9:4d:f1:ad:aa:6a:d1:6e:49:9e:78:2b:3a:b0:
         31:56:e9:5d:a4:f0:19:7c:1f:75:bc:e7:0a:ef:a4:3d:7f:67:
         de:23:0d:44:16:70:30:50:90:7b:19:cf:1c:6d:ca:ed:c3:2e:
         d2:bc:bd:59:32:2f:44:52:d2:fe:8a:0f:65:75:db:6e:74:f1:
         4d:f4:e9:21:4c:2e:72:6e:d0:c5:e7:77:6d:89:91:05:a6:02:
         ce:ad:11:9e:70:3e:db:c4:ca:24:17:5d:f1:99:77:2f:5e:12:
         3b:c7:d6:0f:72:5a:d7:d6:13:63:84:1c:9d:72:d2:cc:10:91:
         53:57:0b:13:b7:82:8e:89:56:92:6b:4d:75:be:c7:a9:9b:2f:
         26:9b:f9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 01:27:15 2026 by rpki-client