Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/3133382e3132312e3234352e302f32342d3234203d3e20323634333233.roa
File:                     3133382e3132312e3234352e302f32342d3234203d3e20323634333233.roa (raw, json)
Hash identifier:          WLPie1Yo2FCrxdTQwhkDlBkcPMzBg44rGOjTsh4S+zw=
Subject key identifier:   99:39:47:0C:CA:5A:E1:43:A4:6E:D5:9C:12:0C:FD:4D:0B:3B:ED:62
Certificate issuer:       /CN=C4F9F72E86B46C3FC54C9939A9FF0C2C220FD811
Certificate serial:       2E54F4CBDDD3585E90AD2B466859C1EC1EAFCE6B
Authority key identifier: C4:F9:F7:2E:86:B4:6C:3F:C5:4C:99:39:A9:FF:0C:2C:22:0F:D8:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4F9F72E86B46C3FC54C9939A9FF0C2C220FD811.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/3133382e3132312e3234352e302f32342d3234203d3e20323634333233.roa
Signing time:             Tue 11 Aug 2026 14:25:11 +0000
ROA not before:           Tue 11 Aug 2026 14:20:11 +0000
ROA not after:            Tue 10 Aug 2027 14:25:11 +0000
asID:                     264323
IP address blocks:        138.121.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/C4F9F72E86B46C3FC54C9939A9FF0C2C220FD811.crl
                          rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/C4F9F72E86B46C3FC54C9939A9FF0C2C220FD811.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4F9F72E86B46C3FC54C9939A9FF0C2C220FD811.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 02:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:54:f4:cb:dd:d3:58:5e:90:ad:2b:46:68:59:c1:ec:1e:af:ce:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4F9F72E86B46C3FC54C9939A9FF0C2C220FD811
        Validity
            Not Before: Aug 11 14:20:11 2026 GMT
            Not After : Aug 10 14:25:11 2027 GMT
        Subject: CN=9939470CCA5AE143A46ED59C120CFD4D0B3BED62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:00:76:43:c7:c9:08:90:f2:32:2a:0e:f3:16:
                    68:26:22:a3:51:91:3f:60:49:80:98:25:60:9f:66:
                    31:03:d4:26:7e:eb:9f:3a:76:1e:e2:aa:74:fa:ad:
                    69:47:91:00:3c:52:ec:26:58:d1:8e:ed:22:02:76:
                    e6:58:77:95:f9:50:49:e5:61:48:f3:db:f7:50:b7:
                    ac:5e:b0:ab:d1:6f:b6:16:64:35:f7:82:d7:5a:40:
                    90:55:b2:f3:13:ff:c3:e1:6a:0f:37:d5:ef:54:56:
                    99:a2:e2:7e:af:9f:ce:44:a6:ab:ce:0f:19:b3:6a:
                    0f:a9:58:61:48:a8:bc:29:d5:0d:e3:15:53:a5:4a:
                    0f:93:26:75:cc:8c:19:91:cb:59:5b:16:27:4a:09:
                    ad:74:07:e7:6e:d1:66:0e:05:34:fd:34:28:7e:5d:
                    f5:dd:3e:8f:b2:77:35:8f:5c:ec:de:ef:5b:23:d6:
                    93:52:44:99:ba:54:97:4e:96:cc:b0:aa:59:fa:eb:
                    24:86:8a:8b:b6:26:2c:2c:d1:c7:f0:ed:05:b4:74:
                    8b:85:7b:95:3a:d7:02:cf:6a:19:c8:3c:c9:2c:db:
                    4e:b9:b7:ee:24:48:86:e2:f8:48:5f:1f:ec:79:db:
                    6d:0d:c8:66:f1:da:7d:54:45:ce:15:72:bc:9c:84:
                    d1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:39:47:0C:CA:5A:E1:43:A4:6E:D5:9C:12:0C:FD:4D:0B:3B:ED:62
            X509v3 Authority Key Identifier:
                keyid:C4:F9:F7:2E:86:B4:6C:3F:C5:4C:99:39:A9:FF:0C:2C:22:0F:D8:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/C4F9F72E86B46C3FC54C9939A9FF0C2C220FD811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4F9F72E86B46C3FC54C9939A9FF0C2C220FD811.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/3133382e3132312e3234352e302f32342d3234203d3e20323634333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:1a:51:e0:a1:bb:6c:4e:a3:8d:ae:a4:97:5f:4a:39:51:32:
         96:5d:8e:3e:e1:e9:80:a2:47:9a:fe:b3:f7:e0:61:53:10:1f:
         11:bb:0d:c6:e2:03:94:a7:ae:a2:34:8a:4c:30:3d:f2:75:16:
         8f:de:62:1b:33:91:c8:a2:b1:70:86:e2:85:3e:25:ef:a7:9e:
         72:56:8f:c5:03:e1:04:7a:61:19:e8:b9:f1:11:28:7f:c7:af:
         1c:82:c3:9d:60:4f:59:68:a4:17:de:5e:32:d5:6e:3b:e4:6f:
         a0:39:2b:ef:7e:d9:2e:b6:c4:9e:f0:43:d3:2e:4a:e8:cb:d6:
         88:b5:9f:48:47:cb:ad:a9:8c:5f:7f:89:d2:bd:bc:88:1a:24:
         4a:b8:62:67:f4:34:a5:2e:8a:f4:00:fb:07:0a:4f:39:e2:57:
         fd:a8:0f:ed:87:d3:fd:4a:b6:05:e1:76:78:42:08:c7:3b:9c:
         87:1f:ce:ae:91:f9:a7:7e:65:1e:0b:84:ab:4b:80:b7:82:67:
         69:dc:96:db:a4:7d:d4:b4:da:2a:b8:2e:c3:bf:83:3e:04:c5:
         61:7e:da:25:ad:de:20:70:19:25:0e:17:43:39:65:e6:5f:b7:
         34:df:30:72:a2:36:1a:07:a1:05:cf:0f:5e:3f:1e:5f:92:d0:
         40:1c:b8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 13:21:42 2026 by rpki-client