Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4RpH1TCJErLi2F5agNLtBKFihJKgKrjdcBsHvqTKk5Do/0/3133382e3138362e32342e302f32322d3234203d3e20323633383631.roa
File:                     3133382e3138362e32342e302f32322d3234203d3e20323633383631.roa (raw, json)
Hash identifier:          +XR3eD45KUNxwHF4yzju2JZu4Akjtykj2kTEMo18kTI=
Subject key identifier:   14:2A:77:7D:9B:B4:AA:B0:A7:C1:3A:D4:0F:70:5A:86:DE:50:B8:07
Certificate issuer:       /CN=CBB8A038671DF77F8F9579424916B82CCF45F66A
Certificate serial:       10E44E05F44932CF470937A524657482021E55A6
Authority key identifier: CB:B8:A0:38:67:1D:F7:7F:8F:95:79:42:49:16:B8:2C:CF:45:F6:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBB8A038671DF77F8F9579424916B82CCF45F66A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4RpH1TCJErLi2F5agNLtBKFihJKgKrjdcBsHvqTKk5Do/0/3133382e3138362e32342e302f32322d3234203d3e20323633383631.roa
Signing time:             Fri 27 Mar 2026 18:59:07 +0000
ROA not before:           Fri 27 Mar 2026 18:54:07 +0000
ROA not after:            Fri 26 Mar 2027 18:59:07 +0000
asID:                     263861
IP address blocks:        138.186.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4RpH1TCJErLi2F5agNLtBKFihJKgKrjdcBsHvqTKk5Do/0/CBB8A038671DF77F8F9579424916B82CCF45F66A.crl
                          rsync://rpki-repo.registro.br/repo/4RpH1TCJErLi2F5agNLtBKFihJKgKrjdcBsHvqTKk5Do/0/CBB8A038671DF77F8F9579424916B82CCF45F66A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBB8A038671DF77F8F9579424916B82CCF45F66A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 14:43:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:e4:4e:05:f4:49:32:cf:47:09:37:a5:24:65:74:82:02:1e:55:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBB8A038671DF77F8F9579424916B82CCF45F66A
        Validity
            Not Before: Mar 27 18:54:07 2026 GMT
            Not After : Mar 26 18:59:07 2027 GMT
        Subject: CN=142A777D9BB4AAB0A7C13AD40F705A86DE50B807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9d:a0:8e:78:3b:e8:64:9d:09:3e:1d:10:0f:
                    c2:8e:5a:b8:37:b1:e1:9a:7b:ce:1d:7e:8a:82:26:
                    8c:f1:50:08:f9:0d:af:d0:95:a6:4d:05:c0:61:1c:
                    5d:ce:ec:c3:a5:bf:d0:6a:d1:86:0a:75:55:be:83:
                    12:f2:51:b8:68:2b:0c:1b:5d:a2:48:23:c1:dd:78:
                    86:58:93:84:4e:c3:79:99:c6:7a:8f:2d:67:e0:7a:
                    57:62:0f:4b:e8:74:4c:75:ee:42:3c:bb:e2:73:b3:
                    49:64:2a:95:0b:16:6a:7e:8e:6e:31:d0:1e:2d:ad:
                    1f:7c:e0:4f:2d:3f:cf:a9:d8:7b:cb:0a:08:f4:d3:
                    ff:2d:e9:1b:89:4a:b8:d6:6c:c3:71:e7:42:a0:ba:
                    a9:b7:df:6d:71:9d:26:e0:61:f1:8c:5a:8d:1f:eb:
                    55:40:d6:56:2d:91:73:25:7d:d1:c0:9d:83:35:fd:
                    c3:95:58:48:0b:4f:19:04:5e:92:c5:a8:35:14:e1:
                    c2:6f:70:f1:b9:29:ec:4c:41:cd:92:a3:e5:d8:5b:
                    0c:01:4d:65:87:7c:95:94:87:7e:36:c8:37:63:1b:
                    d9:36:3a:0e:e5:58:2f:05:2b:eb:4a:b7:a6:9d:15:
                    82:20:12:a7:42:d4:cc:03:57:94:fe:34:09:2e:b4:
                    fa:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:2A:77:7D:9B:B4:AA:B0:A7:C1:3A:D4:0F:70:5A:86:DE:50:B8:07
            X509v3 Authority Key Identifier:
                keyid:CB:B8:A0:38:67:1D:F7:7F:8F:95:79:42:49:16:B8:2C:CF:45:F6:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4RpH1TCJErLi2F5agNLtBKFihJKgKrjdcBsHvqTKk5Do/0/CBB8A038671DF77F8F9579424916B82CCF45F66A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBB8A038671DF77F8F9579424916B82CCF45F66A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4RpH1TCJErLi2F5agNLtBKFihJKgKrjdcBsHvqTKk5Do/0/3133382e3138362e32342e302f32322d3234203d3e20323633383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:3e:cd:59:37:c4:40:21:cb:73:47:9c:1f:7a:38:5c:79:1b:
         5e:a7:bc:82:68:93:49:ca:3e:db:62:d1:b0:e8:bf:6f:74:33:
         fc:38:e4:ca:b2:94:f4:7c:7c:2c:16:8e:fe:bc:be:ed:18:91:
         43:c9:2b:41:9d:32:02:b7:7c:a1:15:15:0e:c7:4f:24:21:cc:
         e0:15:5c:40:3d:8b:f4:3f:91:72:22:65:bb:96:f7:ed:f0:a1:
         b9:4a:2f:90:76:33:d8:64:68:b2:6c:2c:b1:c1:e7:f2:39:6e:
         ac:92:8f:fb:87:de:f9:a6:29:32:27:94:21:d2:48:d5:c5:3f:
         4a:9a:9d:ea:86:c8:b4:02:57:31:6c:8d:a0:01:03:18:96:81:
         f1:cb:a3:2c:a6:b6:c7:a7:f1:1d:5e:52:f5:48:51:c1:6b:ac:
         1e:e9:76:b7:65:cb:a6:5c:a0:7d:26:93:6c:45:1f:2e:d9:87:
         59:6e:5e:64:47:51:ba:f7:85:30:cb:9f:3e:f8:46:2a:87:fe:
         67:23:14:61:02:c5:ac:35:97:14:9b:2d:e8:f1:e6:13:62:a8:
         1c:8e:df:14:14:19:70:34:79:20:e2:e5:a2:cc:cc:9e:ac:fd:
         06:65:c0:ed:0c:98:1d:55:3c:60:2c:2c:e4:a8:6f:a7:e8:e1:
         46:5b:ca:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 15:57:08 2026 by rpki-client