Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/3133382e3131372e3136342e302f32322d3234203d3e20323634353137.roa
File:                     3133382e3131372e3136342e302f32322d3234203d3e20323634353137.roa (raw, json)
Hash identifier:          O82PiKdF1gUPCyrGtYkmyjcXYRuPKQYjkqJN0ZWDbDw=
Subject key identifier:   FF:E3:77:04:C9:8B:36:D3:E4:61:A7:18:1F:41:7B:8C:EA:C2:39:27
Certificate issuer:       /CN=06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8
Certificate serial:       4396B08779DC94B94868D3821BB82964E6EBFDED
Authority key identifier: 06:DB:D3:2E:86:5D:9D:08:FA:5C:98:2A:B7:CB:DA:4F:CB:22:62:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/3133382e3131372e3136342e302f32322d3234203d3e20323634353137.roa
Signing time:             Thu 20 Aug 2026 21:06:22 +0000
ROA not before:           Thu 20 Aug 2026 21:01:22 +0000
ROA not after:            Thu 19 Aug 2027 21:06:22 +0000
asID:                     264517
IP address blocks:        138.117.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.crl
                          rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 20:21:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:96:b0:87:79:dc:94:b9:48:68:d3:82:1b:b8:29:64:e6:eb:fd:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8
        Validity
            Not Before: Aug 20 21:01:22 2026 GMT
            Not After : Aug 19 21:06:22 2027 GMT
        Subject: CN=FFE37704C98B36D3E461A7181F417B8CEAC23927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b1:cc:bb:06:a4:e0:1d:cd:6d:c3:59:7b:6c:
                    21:8c:c0:f9:10:c0:02:1e:4d:16:5d:f2:79:1a:6f:
                    11:1b:5f:ac:46:86:fe:13:08:09:10:c7:2e:06:52:
                    b0:94:0b:47:15:6e:2b:a9:24:c6:f9:73:66:e2:fb:
                    25:1f:16:19:1c:60:8f:46:89:34:ee:62:0c:bb:68:
                    7a:57:47:1d:95:df:5e:11:50:e4:f6:c5:3d:19:41:
                    49:c8:e8:52:6b:35:38:8a:a2:4a:fc:98:a3:21:a3:
                    27:cb:33:48:f3:2d:cc:26:ee:a1:be:49:4e:ae:c9:
                    8f:cc:69:04:03:1d:34:48:79:1d:ec:55:0e:74:69:
                    c2:58:cf:95:c3:7f:aa:90:91:c2:ac:e3:a4:0e:e8:
                    d0:13:5f:82:33:68:c6:c1:2e:71:fb:71:cf:2b:b7:
                    87:68:e3:04:bb:14:3f:55:36:fa:fb:dd:e3:af:97:
                    b5:df:7a:6c:2c:fd:13:ad:05:d3:18:56:74:1f:d3:
                    99:86:85:0d:a2:77:f3:1f:8e:82:91:f7:e5:67:69:
                    56:3c:f1:b7:8e:95:57:50:55:8c:66:dd:3a:fc:c0:
                    71:ae:54:34:11:f0:85:ce:73:ca:69:10:07:2e:81:
                    00:ec:f8:52:53:29:16:e9:c4:0e:70:00:54:ca:c8:
                    b0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E3:77:04:C9:8B:36:D3:E4:61:A7:18:1F:41:7B:8C:EA:C2:39:27
            X509v3 Authority Key Identifier:
                keyid:06:DB:D3:2E:86:5D:9D:08:FA:5C:98:2A:B7:CB:DA:4F:CB:22:62:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/3133382e3131372e3136342e302f32322d3234203d3e20323634353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:23:3a:ad:c7:e8:b1:52:2b:10:39:33:c8:57:f0:63:5c:af:
         4f:71:0b:a6:47:3d:28:9d:30:6c:bc:60:02:68:9f:1a:7c:dc:
         d2:84:21:e8:4b:62:5b:79:61:f1:0c:2f:04:77:f5:8f:f4:7e:
         05:5f:3a:1c:a4:62:6a:87:9b:f0:47:3a:6d:20:2b:3a:77:2b:
         7d:97:d8:fd:f7:4d:a2:af:21:c2:79:89:e2:9e:41:f3:21:ff:
         01:86:b0:f9:71:f6:4a:11:e8:90:7e:f3:fc:1e:24:27:dc:01:
         3c:af:a0:5b:1a:5a:e1:58:f9:c0:b8:1a:6c:e7:f6:ba:71:c0:
         4c:64:b8:2b:45:b1:3f:af:c5:b4:3a:10:a7:17:e5:f0:33:a5:
         7b:83:1c:f8:ab:eb:57:9a:9c:42:56:cf:8d:93:81:83:f8:03:
         12:3b:c4:55:34:54:2c:b0:f0:1c:58:cc:e3:61:e7:f4:e1:66:
         0e:20:e0:22:67:4b:c4:1e:76:46:b4:60:74:23:db:93:b7:16:
         b4:19:33:4d:4e:d7:28:56:e4:ef:fc:34:ea:d6:5e:81:da:70:
         4e:4b:5e:53:ea:59:dc:84:8d:dc:33:57:ab:19:c4:cf:7d:a4:
         b7:2d:70:2b:32:f0:ae:fc:05:22:f9:e0:0f:b9:52:8b:24:e1:
         9b:22:19:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 05:40:07 2026 by rpki-client