Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/3133382e3230342e3130342e302f32322d3234203d3e20323632353233.roa
File:                     3133382e3230342e3130342e302f32322d3234203d3e20323632353233.roa (raw, json)
Hash identifier:          47hFXIFni8i0PZ/km7QAjni2zYX+/LmwQoIa5PYPqew=
Subject key identifier:   4F:AA:E9:55:1D:6C:51:62:7A:BC:62:3D:25:D3:3A:71:51:8A:FF:70
Certificate issuer:       /CN=7E29AEC3299ADBB9DF46C4665623FD44CDD5C219
Certificate serial:       4DAC93DC31578F810AA6519D3DF8E48E25A474F9
Authority key identifier: 7E:29:AE:C3:29:9A:DB:B9:DF:46:C4:66:56:23:FD:44:CD:D5:C2:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/3133382e3230342e3130342e302f32322d3234203d3e20323632353233.roa
Signing time:             Mon 22 Jun 2026 07:30:12 +0000
ROA not before:           Mon 22 Jun 2026 07:25:12 +0000
ROA not after:            Mon 21 Jun 2027 07:30:12 +0000
asID:                     262523
IP address blocks:        138.204.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.crl
                          rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 12:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:ac:93:dc:31:57:8f:81:0a:a6:51:9d:3d:f8:e4:8e:25:a4:74:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E29AEC3299ADBB9DF46C4665623FD44CDD5C219
        Validity
            Not Before: Jun 22 07:25:12 2026 GMT
            Not After : Jun 21 07:30:12 2027 GMT
        Subject: CN=4FAAE9551D6C51627ABC623D25D33A71518AFF70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:36:eb:b4:bd:c7:65:81:c8:09:7a:59:e6:15:
                    04:77:13:47:eb:16:1b:4b:4d:0c:e6:c8:7b:44:d2:
                    86:c9:8e:d4:cb:e8:4f:19:1e:79:6a:53:80:53:e4:
                    76:98:89:dc:66:7f:57:3a:49:e8:48:3d:55:02:4d:
                    74:60:c2:5b:30:e9:c9:6c:2a:6a:fb:2c:2d:b8:84:
                    aa:00:7e:71:f4:df:13:3f:81:88:c8:66:b6:d5:a2:
                    98:77:fe:8e:7d:ae:ec:d9:36:3e:00:b4:11:47:ec:
                    f4:07:e3:38:7a:e5:66:93:d2:07:f4:15:68:36:ef:
                    8d:87:ea:19:24:19:d8:ea:4a:96:ea:78:08:ea:54:
                    20:49:93:23:46:dc:da:98:b8:b1:92:f3:bf:38:51:
                    31:c7:b7:d5:c0:43:c4:ea:ae:cf:c2:98:d1:95:37:
                    43:d1:a4:16:cd:53:f3:20:c1:06:4a:38:da:61:04:
                    06:9d:37:24:22:c4:cb:4b:fc:60:b6:28:4b:86:87:
                    9f:7c:7f:cc:6a:86:73:55:ed:b4:d3:7c:ae:cd:e8:
                    74:f4:c7:72:4f:e4:dc:f7:2e:71:fa:61:14:0f:30:
                    8a:22:f6:b9:ff:91:5e:24:23:6f:4a:26:71:70:06:
                    53:46:2f:a4:2b:ab:90:42:69:c9:cf:f0:66:36:5e:
                    dc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:AA:E9:55:1D:6C:51:62:7A:BC:62:3D:25:D3:3A:71:51:8A:FF:70
            X509v3 Authority Key Identifier:
                keyid:7E:29:AE:C3:29:9A:DB:B9:DF:46:C4:66:56:23:FD:44:CD:D5:C2:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/3133382e3230342e3130342e302f32322d3234203d3e20323632353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c9:b6:cf:f4:b1:32:62:18:18:19:dc:9d:e7:4a:8e:6b:96:d3:
         14:0e:15:12:03:b2:95:35:3a:3b:08:20:5c:40:d5:1d:65:ff:
         de:df:b1:90:8d:83:c5:ae:73:af:14:d8:2c:a0:c1:8e:5e:64:
         7c:d4:66:bc:4e:a1:95:81:c6:15:06:74:4c:fe:65:b9:aa:94:
         94:40:24:54:6f:c4:c8:b5:fb:f0:a3:6c:87:c7:7e:72:fe:c7:
         0c:f7:82:12:ec:02:ac:ad:5b:da:c2:59:ed:05:28:3a:74:d4:
         91:5f:e6:97:55:bc:9f:69:af:14:8f:75:2d:0e:ea:9e:45:30:
         15:f7:67:a6:bd:25:1f:17:24:aa:75:ae:da:45:3d:21:f5:e1:
         ea:00:d5:85:78:9e:12:bb:54:d8:9e:73:6f:53:65:51:c7:94:
         71:42:03:3d:77:91:57:d0:82:8e:0b:b0:e5:1f:50:7e:15:fa:
         ee:5b:35:c5:14:65:f9:67:c3:bb:0c:68:6a:4a:12:bc:78:bc:
         b6:72:16:c9:82:f6:41:01:13:b2:51:a3:e6:0b:21:98:ff:3f:
         bc:4a:02:f5:dd:f7:a9:3d:8b:3f:d8:17:cd:10:1f:7e:58:8f:
         00:a8:79:7a:ca:e1:44:0e:2d:b8:50:fc:4c:ab:52:6d:71:c1:
         8a:d6:5f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 15:37:12 2026 by rpki-client