Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/3133382e3132312e3234342e302f32322d3232203d3e20323634333233.roa
File:                     3133382e3132312e3234342e302f32322d3232203d3e20323634333233.roa (raw, json)
Hash identifier:          TOhH4J5bIHzWLmgDvlBbW6TBn5b8wuPjvwm/ZEm4jqs=
Subject key identifier:   D7:80:EA:58:34:ED:F2:B8:C4:AC:3B:68:61:B4:A2:D8:3A:3B:C5:F9
Certificate issuer:       /CN=C4F9F72E86B46C3FC54C9939A9FF0C2C220FD811
Certificate serial:       6D75E22565418918DF82471DD2F883B3589BB689
Authority key identifier: C4:F9:F7:2E:86:B4:6C:3F:C5:4C:99:39:A9:FF:0C:2C:22:0F:D8:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4F9F72E86B46C3FC54C9939A9FF0C2C220FD811.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/3133382e3132312e3234342e302f32322d3232203d3e20323634333233.roa
Signing time:             Tue 11 Aug 2026 16:19:04 +0000
ROA not before:           Tue 11 Aug 2026 16:14:04 +0000
ROA not after:            Tue 10 Aug 2027 16:19:04 +0000
asID:                     264323
IP address blocks:        138.121.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/C4F9F72E86B46C3FC54C9939A9FF0C2C220FD811.crl
                          rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/C4F9F72E86B46C3FC54C9939A9FF0C2C220FD811.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4F9F72E86B46C3FC54C9939A9FF0C2C220FD811.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 19:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:75:e2:25:65:41:89:18:df:82:47:1d:d2:f8:83:b3:58:9b:b6:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4F9F72E86B46C3FC54C9939A9FF0C2C220FD811
        Validity
            Not Before: Aug 11 16:14:04 2026 GMT
            Not After : Aug 10 16:19:04 2027 GMT
        Subject: CN=D780EA5834EDF2B8C4AC3B6861B4A2D83A3BC5F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a3:ac:82:32:48:c3:b8:88:be:21:65:3e:fc:
                    de:1d:3f:44:a1:53:a0:1b:7b:0f:1a:c0:e9:62:db:
                    91:94:3b:15:76:52:10:4d:b4:54:e5:9b:5b:69:c0:
                    0a:14:36:50:1b:0b:59:f0:76:9c:17:eb:ef:dd:e4:
                    09:e5:a6:bb:db:5e:e7:cf:09:44:32:2c:30:f1:28:
                    93:0c:4d:63:d9:dd:d2:3f:8d:0b:5b:c0:53:02:40:
                    19:b7:2b:ed:99:84:e9:09:80:cc:86:f1:31:ff:24:
                    d9:c8:b1:e3:bb:24:17:66:e0:a0:e3:90:ef:a6:a4:
                    4e:c1:ac:a3:90:b7:b3:d2:a0:e4:8e:60:73:13:6d:
                    04:24:99:26:ea:d7:1f:91:f9:d5:9e:ea:a8:c1:b0:
                    48:c1:ff:63:9a:34:3f:1c:6b:93:ce:d1:7e:b8:a7:
                    38:4f:66:6e:c5:e9:52:18:64:0a:29:c8:06:9f:36:
                    f0:8d:3c:97:ad:9b:05:d2:1e:0a:40:c9:9f:b3:a5:
                    85:73:97:d6:8f:9a:eb:9f:63:5a:8d:f6:b0:28:5a:
                    f6:7b:62:24:e7:24:c4:f4:e0:36:23:dd:38:b4:7c:
                    0f:ba:54:7d:dc:54:23:49:2f:48:02:89:4e:a0:8c:
                    3a:b6:91:5f:95:1e:c9:3d:51:0f:41:cf:3d:51:93:
                    a4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:80:EA:58:34:ED:F2:B8:C4:AC:3B:68:61:B4:A2:D8:3A:3B:C5:F9
            X509v3 Authority Key Identifier:
                keyid:C4:F9:F7:2E:86:B4:6C:3F:C5:4C:99:39:A9:FF:0C:2C:22:0F:D8:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/C4F9F72E86B46C3FC54C9939A9FF0C2C220FD811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4F9F72E86B46C3FC54C9939A9FF0C2C220FD811.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/3133382e3132312e3234342e302f32322d3232203d3e20323634333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:97:20:c4:35:56:d6:30:81:95:99:77:72:5c:0d:12:14:ab:
         b5:9a:04:4f:f3:8b:e1:18:47:a9:3a:4a:35:5f:f4:3c:0a:93:
         b1:4b:67:a5:7e:2e:1d:08:0c:71:ee:ff:20:ad:98:8c:6f:97:
         e0:50:4f:d7:51:b2:ed:37:6f:dc:56:31:f1:a0:d9:ea:07:de:
         4c:9b:6e:60:15:dc:24:a4:f5:d7:8b:9c:28:1c:68:1b:9d:a7:
         03:80:fa:36:64:ec:08:1e:84:b4:3a:c8:22:51:94:09:ec:c7:
         40:54:44:ee:1b:f9:c7:c9:01:71:d9:33:e5:20:fd:1a:22:5c:
         85:d5:36:08:ab:23:33:28:41:a1:64:8d:c7:99:4d:e2:d1:20:
         86:18:d1:dd:48:b3:da:83:e7:05:6c:a0:4e:38:4b:08:15:05:
         84:22:ad:9b:a0:bf:37:0e:4e:fc:c8:13:ef:d8:49:55:74:79:
         a3:e5:51:87:10:6d:9d:16:08:46:ae:fe:1b:6b:f2:a8:66:3b:
         9c:a0:f3:5d:14:68:7f:9d:46:4c:bc:fc:22:62:10:e8:4c:4a:
         60:07:90:5e:45:20:e0:49:88:fc:59:82:e2:86:17:68:ea:5d:
         a0:fc:81:03:2a:d3:91:eb:34:b3:2a:66:90:fa:55:89:67:0c:
         60:9e:b8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 01:31:47 2026 by rpki-client