Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/3133382e39342e3138302e302f32322d3234203d3e203631363636.roa
File:                     3133382e39342e3138302e302f32322d3234203d3e203631363636.roa (raw, json)
Hash identifier:          pxzMTVlL8ZazWbxL1tu/U3/svge+WBlFf4ZWg5T/FCc=
Subject key identifier:   81:42:28:F0:55:90:F3:40:15:72:7A:84:AD:69:0B:21:85:3F:00:94
Certificate issuer:       /CN=2EB6CDE4EC2350B1F6AFD74AE7BEDE600B7C684E
Certificate serial:       4F5634E02D279AE65E642B54CEE1C9036AD81BC4
Authority key identifier: 2E:B6:CD:E4:EC:23:50:B1:F6:AF:D7:4A:E7:BE:DE:60:0B:7C:68:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EB6CDE4EC2350B1F6AFD74AE7BEDE600B7C684E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/3133382e39342e3138302e302f32322d3234203d3e203631363636.roa
Signing time:             Mon 31 Aug 2026 15:33:46 +0000
ROA not before:           Mon 31 Aug 2026 15:28:46 +0000
ROA not after:            Mon 30 Aug 2027 15:33:46 +0000
asID:                     61666
IP address blocks:        138.94.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/2EB6CDE4EC2350B1F6AFD74AE7BEDE600B7C684E.crl
                          rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/2EB6CDE4EC2350B1F6AFD74AE7BEDE600B7C684E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EB6CDE4EC2350B1F6AFD74AE7BEDE600B7C684E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 00:22:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:56:34:e0:2d:27:9a:e6:5e:64:2b:54:ce:e1:c9:03:6a:d8:1b:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EB6CDE4EC2350B1F6AFD74AE7BEDE600B7C684E
        Validity
            Not Before: Aug 31 15:28:46 2026 GMT
            Not After : Aug 30 15:33:46 2027 GMT
        Subject: CN=814228F05590F34015727A84AD690B21853F0094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c0:45:2d:15:e4:2d:51:f3:5e:f5:6a:f7:c1:
                    1c:0d:56:51:72:c9:c6:81:97:c0:88:fd:a2:73:c4:
                    e6:5c:21:20:bd:3a:da:07:8f:bd:78:13:4c:64:f6:
                    02:85:c1:99:6f:81:1a:04:ae:50:12:b3:88:70:e0:
                    84:52:15:55:23:0f:4b:7a:94:66:b4:b4:0d:ec:70:
                    e1:17:7f:96:ef:2d:34:c2:c6:b3:51:4b:ec:d2:e3:
                    0c:42:b7:69:23:fc:64:a4:e5:bc:bf:1d:45:72:75:
                    de:bd:78:1e:4c:bf:25:42:d8:85:50:ab:f5:38:85:
                    ee:26:c5:0f:32:4e:2f:88:9a:f5:69:0a:ad:ab:5d:
                    12:f3:97:b8:d8:84:78:32:76:c2:cd:1e:50:2b:2e:
                    b8:c3:49:c0:5d:a3:e6:f2:1d:2d:78:7a:d9:19:ef:
                    21:44:c6:52:b9:cb:d5:e2:50:0d:d0:2c:39:82:76:
                    15:e4:3c:a9:43:54:d0:9f:43:81:f4:63:bb:ca:d6:
                    6c:36:6e:15:51:3f:df:cf:0b:a6:75:48:8a:aa:8c:
                    33:ea:74:97:72:84:34:cc:69:b1:d8:ab:7b:55:88:
                    67:d8:59:df:3c:4b:82:b4:e5:fb:d4:57:9a:31:68:
                    7c:f3:65:60:59:62:14:58:87:80:ee:8a:79:98:ac:
                    66:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:42:28:F0:55:90:F3:40:15:72:7A:84:AD:69:0B:21:85:3F:00:94
            X509v3 Authority Key Identifier:
                keyid:2E:B6:CD:E4:EC:23:50:B1:F6:AF:D7:4A:E7:BE:DE:60:0B:7C:68:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/2EB6CDE4EC2350B1F6AFD74AE7BEDE600B7C684E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EB6CDE4EC2350B1F6AFD74AE7BEDE600B7C684E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/3133382e39342e3138302e302f32322d3234203d3e203631363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:87:65:10:cd:9b:bd:a7:6a:5c:34:cb:05:3a:f6:19:f7:fd:
         06:3e:84:bd:14:a1:b9:fe:f9:0c:ce:2e:7b:0d:64:9c:23:97:
         61:96:04:82:c7:cc:fa:1c:07:39:05:04:f4:d8:e0:fe:2e:23:
         17:c4:0b:03:aa:28:fb:2f:35:1f:f4:f4:39:08:e8:79:73:d6:
         da:dd:23:84:a0:59:82:65:c6:3a:99:4b:19:de:62:98:d8:6a:
         2d:dc:6f:e4:45:aa:d5:b8:81:30:f8:39:31:e7:a0:4b:ed:16:
         a7:56:a4:6c:d7:40:2e:0a:0f:94:89:7c:d5:4b:ad:d8:b4:f0:
         fd:16:88:71:b1:35:d8:cc:37:5b:bc:1e:64:06:35:d1:84:6d:
         69:cd:cf:39:8f:b0:ea:08:d6:e0:0b:be:48:6b:df:13:72:ed:
         61:a4:65:eb:6a:d0:e1:a4:ac:92:d7:45:2c:28:8c:f8:85:bc:
         54:c3:ce:b4:3b:04:4f:05:8c:5c:a9:c1:63:02:6f:ca:80:42:
         c4:a1:5b:7e:ba:5f:f5:23:ad:43:fa:88:8e:95:4e:50:bf:16:
         5f:ef:47:7f:5e:d7:15:5e:91:5b:15:d2:4a:f8:eb:d0:e0:d3:
         19:8f:55:47:3d:d5:13:d2:78:9f:8d:1c:8d:73:7b:24:0c:40:
         18:f5:71:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 02:09:31 2026 by rpki-client