Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/3133382e302e3133322e302f32342d3234203d3e20323734343936.roa
File:                     3133382e302e3133322e302f32342d3234203d3e20323734343936.roa (raw, json)
Hash identifier:          vXs1doJpaYfvFGpP/58gccJvRPuJjPQH+CQNoKXvRVs=
Subject key identifier:   36:3A:88:BB:64:BC:1D:AC:37:15:23:BD:A0:E7:3C:DB:A6:73:EE:90
Certificate issuer:       /CN=464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC
Certificate serial:       4394D331AADD38E22DF2CFE500E4C8D2CDF55006
Authority key identifier: 46:4F:7E:BA:13:C4:3D:1F:B8:EA:CC:BC:C0:D4:2E:9A:28:BC:5E:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/3133382e302e3133322e302f32342d3234203d3e20323734343936.roa
Signing time:             Wed 28 Oct 2026 14:46:07 +0000
ROA not before:           Wed 28 Oct 2026 14:41:07 +0000
ROA not after:            Wed 27 Oct 2027 14:46:07 +0000
asID:                     274496
IP address blocks:        138.0.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.crl
                          rsync://rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 14:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:94:d3:31:aa:dd:38:e2:2d:f2:cf:e5:00:e4:c8:d2:cd:f5:50:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC
        Validity
            Not Before: Oct 28 14:41:07 2026 GMT
            Not After : Oct 27 14:46:07 2027 GMT
        Subject: CN=363A88BB64BC1DAC371523BDA0E73CDBA673EE90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a3:33:9b:0c:90:77:d7:c7:20:3b:c5:fc:19:
                    ea:d3:8f:63:f3:d8:f0:2f:a7:23:60:e3:cb:10:6e:
                    ab:06:c8:1b:24:79:e0:49:40:06:b2:de:73:40:7e:
                    1b:2c:1d:9d:ad:f7:0b:82:a1:84:ef:fc:00:53:3b:
                    6a:32:c5:98:45:fd:3b:2e:d9:84:12:e9:71:c1:8b:
                    73:b8:bd:d2:a4:c6:9f:19:fd:87:2a:5a:d4:ab:f7:
                    31:3c:c1:01:a6:8e:68:e4:73:e0:61:ff:26:95:08:
                    cf:9b:83:45:3a:21:87:fd:6a:aa:75:d6:8b:cb:ca:
                    59:ce:8f:c0:a0:75:0c:f6:f7:d1:99:2e:66:31:ff:
                    d2:6f:ec:e5:d7:8f:57:7f:c3:64:4c:d4:ca:c3:84:
                    35:6a:1d:86:16:6e:78:df:14:18:af:c3:b7:0b:13:
                    ee:de:3f:5b:33:e9:fb:b6:d9:1d:a9:b6:ec:fb:ae:
                    51:35:5d:86:48:90:cc:65:2b:9e:0d:e9:9c:7f:cd:
                    8d:da:5b:dd:1f:8c:46:ef:49:db:28:e1:33:b2:f2:
                    a0:36:05:6b:53:7d:3d:27:87:d9:32:1a:bd:d0:b0:
                    fc:a3:23:44:fc:d6:e2:be:b0:93:dd:4e:5f:e4:69:
                    bb:7f:d4:b9:37:fd:8a:40:71:d3:ac:6a:a7:9c:3c:
                    3a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:3A:88:BB:64:BC:1D:AC:37:15:23:BD:A0:E7:3C:DB:A6:73:EE:90
            X509v3 Authority Key Identifier:
                keyid:46:4F:7E:BA:13:C4:3D:1F:B8:EA:CC:BC:C0:D4:2E:9A:28:BC:5E:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/3133382e302e3133322e302f32342d3234203d3e20323734343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:0d:17:81:ad:66:53:e9:f2:f4:72:89:4f:45:8f:45:57:91:
         2a:d6:73:72:8e:bd:d3:db:12:48:a3:a8:00:89:98:1a:6c:66:
         79:03:8f:a2:3b:b7:4a:4c:26:7d:0c:cc:1f:ad:87:e9:f1:8a:
         26:9b:76:60:9f:41:93:0a:17:bc:f1:20:61:6b:28:15:c8:f3:
         65:06:78:dc:fa:f2:0b:bd:85:01:38:ba:29:19:0e:56:ba:8a:
         58:54:72:b8:90:67:98:9c:37:19:f9:75:cc:8a:9e:f2:b1:5f:
         bb:5d:ce:86:7d:3b:bc:60:19:18:51:af:d2:38:ae:59:df:61:
         e2:13:9c:71:bb:bd:c6:32:fc:31:b9:8c:0c:03:6a:d2:c9:26:
         a5:a6:62:15:4f:fe:4c:42:89:1b:82:b6:eb:87:83:fc:5e:43:
         e5:7e:d6:d9:cd:b9:30:63:67:25:6c:ec:d9:9d:1c:40:1e:25:
         46:0c:f4:03:99:fc:ee:bc:fb:9f:86:e2:59:40:b0:c0:44:93:
         87:35:19:09:08:b2:80:c3:63:03:aa:b4:07:46:a1:bb:6b:2c:
         b6:79:e7:45:5e:55:b0:15:02:7a:c2:05:a2:a8:2c:24:8e:27:
         18:d8:d5:b0:cf:7c:58:3b:34:0d:54:91:8d:03:38:49:ca:6f:
         b0:86:c6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 19:32:40 2026 by rpki-client