Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/3133382e302e3133332e302f32342d3234203d3e20323634353437.roa
File:                     3133382e302e3133332e302f32342d3234203d3e20323634353437.roa (raw, json)
Hash identifier:          xu75pVFs+/AGnWdtBpMZJihWcXkR3dltYaX0eO9P8H4=
Subject key identifier:   28:41:A6:9C:CA:C2:0A:00:C9:DA:17:28:87:84:B8:07:60:87:93:32
Certificate issuer:       /CN=464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC
Certificate serial:       74F5E8555BFFBC9F84A73D45A33CEFA8144F8562
Authority key identifier: 46:4F:7E:BA:13:C4:3D:1F:B8:EA:CC:BC:C0:D4:2E:9A:28:BC:5E:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/3133382e302e3133332e302f32342d3234203d3e20323634353437.roa
Signing time:             Wed 08 Apr 2026 14:01:26 +0000
ROA not before:           Wed 08 Apr 2026 13:56:26 +0000
ROA not after:            Wed 07 Apr 2027 14:01:26 +0000
asID:                     264547
IP address blocks:        138.0.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.crl
                          rsync://rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 09:10:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:f5:e8:55:5b:ff:bc:9f:84:a7:3d:45:a3:3c:ef:a8:14:4f:85:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC
        Validity
            Not Before: Apr  8 13:56:26 2026 GMT
            Not After : Apr  7 14:01:26 2027 GMT
        Subject: CN=2841A69CCAC20A00C9DA17288784B80760879332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c7:70:b0:11:ec:4d:5a:64:2f:bd:2b:71:1e:
                    78:33:84:45:dd:a4:cd:07:d2:e4:ec:f0:6f:69:4c:
                    0d:f3:db:a9:50:b9:1d:30:d5:07:27:94:e6:4c:ba:
                    73:20:66:02:aa:dc:aa:66:ae:d6:4a:71:1b:d0:30:
                    6a:ff:b2:be:4f:0a:0d:be:2f:1a:ce:e1:c6:60:42:
                    de:b5:52:19:c1:4c:6c:84:b5:85:99:9a:4a:63:1f:
                    80:b7:20:be:73:84:d7:f9:d9:38:4e:b7:60:50:ed:
                    ab:c7:65:f9:be:03:fd:8d:e3:b1:2c:56:37:34:98:
                    ae:74:50:20:34:54:d0:f6:98:c3:62:02:60:5a:56:
                    13:aa:66:15:33:85:b1:2d:4e:cd:87:b5:92:b7:cd:
                    8d:17:53:0b:21:c5:9a:a5:9b:29:e9:e1:36:cb:72:
                    00:f8:85:78:55:6a:40:49:70:c2:00:03:a4:95:4e:
                    47:75:88:ec:ec:54:f3:1f:0c:df:1d:5e:78:47:7a:
                    b3:5e:f5:7c:3f:20:31:67:e3:9f:33:20:8c:03:13:
                    99:03:79:da:58:32:29:ce:01:08:b6:65:08:7f:ef:
                    d7:5c:b3:91:2c:f5:a0:a4:ee:56:80:f2:e8:86:33:
                    77:e5:6d:0c:d0:4b:33:95:31:57:96:b6:7d:39:e5:
                    f2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:41:A6:9C:CA:C2:0A:00:C9:DA:17:28:87:84:B8:07:60:87:93:32
            X509v3 Authority Key Identifier:
                keyid:46:4F:7E:BA:13:C4:3D:1F:B8:EA:CC:BC:C0:D4:2E:9A:28:BC:5E:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/464F7EBA13C43D1FB8EACCBCC0D42E9A28BC5EAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kKdHmcxnFLNJBLL4mNJbS31UV6wfHmiQf2Q6bEpCKo2/0/3133382e302e3133332e302f32342d3234203d3e20323634353437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:96:6b:8e:53:8e:67:ac:09:5b:7e:a3:50:0b:0b:b6:3e:90:
         44:4c:65:a1:84:51:41:49:38:23:b4:44:4e:5f:d9:d4:7f:a7:
         f1:94:1c:38:d7:01:e6:39:f4:5e:38:db:21:27:f7:ad:87:77:
         d0:45:0e:44:ac:9f:d2:2f:4c:96:ca:19:de:5f:a0:b1:84:d8:
         c4:12:62:8c:96:fb:c1:5a:98:75:ff:4b:c9:2f:ed:fe:c4:c0:
         fb:0c:94:48:88:7d:a2:82:d7:3f:93:1b:48:78:02:5a:2c:78:
         d9:b6:70:99:54:55:9d:c2:cc:92:39:3b:d5:17:93:87:e0:f0:
         42:ec:e1:b8:9a:a2:9e:70:4e:b8:6e:df:54:3a:7d:cd:e3:29:
         3b:2e:59:d0:bb:be:04:49:9d:7a:4a:e4:1b:a1:09:60:44:3b:
         d9:4b:99:98:61:b5:3a:4c:9e:f7:67:b4:fd:ef:69:a8:1b:c9:
         a4:92:36:f2:28:16:cf:b0:9c:1e:f5:43:7d:d4:1d:ec:4c:05:
         3d:d2:a9:36:5a:70:84:fe:b7:aa:27:75:bc:24:58:3f:a4:aa:
         9d:d8:d0:18:44:76:f6:3d:f4:5f:58:73:30:13:ff:34:e3:ce:
         0c:17:e3:c5:2e:1f:ca:e7:32:5d:6d:ab:ab:dd:02:2d:5d:94:
         70:00:62:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 19:18:07 2026 by rpki-client