Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/3133382e3138352e3135342e302f32332d3233203d3e20323638323537.roa
File:                     3133382e3138352e3135342e302f32332d3233203d3e20323638323537.roa (raw, json)
Hash identifier:          Kysx0CEJQm2y/msQMegb/XwPb6dJjWdwytD5LXpJG3k=
Subject key identifier:   54:65:47:B4:4D:6F:07:82:D4:66:12:DD:8F:12:CE:E0:FE:F2:A4:C9
Certificate issuer:       /CN=EB4D38BE240D3EA13D9DE02E2618D2553EFA773E
Certificate serial:       4CF9F354B6BA253EBD10ED042E3F1B1232049C98
Authority key identifier: EB:4D:38:BE:24:0D:3E:A1:3D:9D:E0:2E:26:18:D2:55:3E:FA:77:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB4D38BE240D3EA13D9DE02E2618D2553EFA773E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/3133382e3138352e3135342e302f32332d3233203d3e20323638323537.roa
Signing time:             Wed 05 Aug 2026 23:43:59 +0000
ROA not before:           Wed 05 Aug 2026 23:38:59 +0000
ROA not after:            Wed 04 Aug 2027 23:43:59 +0000
asID:                     268257
IP address blocks:        138.185.154.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/EB4D38BE240D3EA13D9DE02E2618D2553EFA773E.crl
                          rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/EB4D38BE240D3EA13D9DE02E2618D2553EFA773E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB4D38BE240D3EA13D9DE02E2618D2553EFA773E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 07:11:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:f9:f3:54:b6:ba:25:3e:bd:10:ed:04:2e:3f:1b:12:32:04:9c:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB4D38BE240D3EA13D9DE02E2618D2553EFA773E
        Validity
            Not Before: Aug  5 23:38:59 2026 GMT
            Not After : Aug  4 23:43:59 2027 GMT
        Subject: CN=546547B44D6F0782D46612DD8F12CEE0FEF2A4C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8f:fe:b2:b2:19:b3:e6:43:7c:fc:95:c0:fa:
                    3e:72:22:48:04:73:90:41:20:c6:29:38:5f:c2:54:
                    a0:78:d4:e7:0f:1d:b3:0c:1f:e1:20:92:ea:c6:b6:
                    cd:bd:b1:17:d4:20:5c:9a:62:2c:75:30:a6:b6:f3:
                    c5:3f:dd:97:86:b1:6d:9d:fc:e2:a7:66:13:f3:f2:
                    c4:15:22:8f:cd:c9:e5:5f:de:c9:92:32:85:60:93:
                    ea:01:85:d0:5b:b7:09:22:4b:79:db:7b:51:07:b5:
                    ad:82:3c:47:6c:4d:f6:c8:09:97:96:d9:61:3f:71:
                    b3:e9:4c:9d:f0:0a:96:c1:49:3c:95:83:f9:78:b0:
                    07:dc:1b:a1:b6:4c:e4:a4:42:07:89:54:30:83:65:
                    fb:66:a7:fa:39:81:71:13:62:30:9b:33:c4:4f:ec:
                    4e:b7:6a:b7:7a:ca:ee:61:d3:c1:37:59:ba:e0:bd:
                    84:db:07:19:a9:e5:7a:4e:0b:bb:f6:74:9a:a6:cf:
                    0d:d2:41:51:60:f0:b4:61:f5:9f:98:31:46:21:51:
                    3b:c3:08:5f:db:28:d0:a9:e6:41:e5:16:36:4c:1a:
                    52:fe:e1:14:e9:24:22:0e:20:0a:8d:34:b7:dc:25:
                    cb:d1:4f:71:2f:97:33:14:51:2f:0f:85:18:29:02:
                    52:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:65:47:B4:4D:6F:07:82:D4:66:12:DD:8F:12:CE:E0:FE:F2:A4:C9
            X509v3 Authority Key Identifier:
                keyid:EB:4D:38:BE:24:0D:3E:A1:3D:9D:E0:2E:26:18:D2:55:3E:FA:77:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/EB4D38BE240D3EA13D9DE02E2618D2553EFA773E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB4D38BE240D3EA13D9DE02E2618D2553EFA773E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/3133382e3138352e3135342e302f32332d3233203d3e20323638323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:81:34:30:5b:e0:de:1e:29:1a:c8:e6:bf:33:65:b8:c4:71:
         15:3f:d2:92:ed:75:30:7e:1b:57:aa:01:17:30:39:0c:95:9d:
         6e:5b:bb:ae:93:b4:01:46:60:bc:a5:32:7e:32:59:48:87:d3:
         11:40:19:94:45:2c:09:bc:2f:db:68:a0:be:38:80:3d:d9:30:
         16:9a:9b:77:5c:db:d9:45:90:34:d4:ca:78:f4:e2:11:9d:73:
         e1:28:cb:ff:6d:29:d9:64:72:ab:16:30:8e:b5:77:3c:29:f1:
         26:a1:c2:c0:73:12:23:df:0a:49:42:ee:a9:4d:3b:55:87:67:
         34:31:56:13:7f:35:ba:21:78:26:f1:10:97:9f:8f:98:43:78:
         36:82:14:03:40:24:72:54:e0:f5:dc:8f:88:c5:a2:6f:0f:58:
         25:96:1e:4b:3f:90:96:f4:2b:15:88:45:f4:0b:cd:c2:12:51:
         85:99:94:d4:9d:e9:2c:4f:f1:a6:83:a3:95:29:4e:f5:9d:b8:
         dd:36:40:b5:86:62:97:1a:0e:26:56:86:96:33:b7:8d:19:df:
         ee:1d:8a:d6:e8:a1:35:6e:93:dc:95:e4:89:5f:32:8b:a0:36:
         5b:dd:08:d5:20:3a:23:67:79:ce:38:0d:fc:de:85:31:6f:c6:
         0c:95:d5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 14:42:49 2026 by rpki-client