Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/0/3133382e3138352e3130302e302f32322d3332203d3e203631363630.roa
File:                     3133382e3138352e3130302e302f32322d3332203d3e203631363630.roa (raw, json)
Hash identifier:          QClGU+QqZeznHKCkZiglUExCEkv/Cyru2ivOeCexG8E=
Subject key identifier:   8E:78:33:FE:B5:35:42:97:72:5D:27:C8:F4:56:54:D6:5D:39:8F:FA
Certificate issuer:       /CN=678594F7C7A066D107A628D2371BAE8B60382CE0
Certificate serial:       0A604A4C5357D3E3602D0329722F0E0DCE220ECF
Authority key identifier: 67:85:94:F7:C7:A0:66:D1:07:A6:28:D2:37:1B:AE:8B:60:38:2C:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/678594F7C7A066D107A628D2371BAE8B60382CE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/0/3133382e3138352e3130302e302f32322d3332203d3e203631363630.roa
Signing time:             Thu 24 Sep 2026 19:09:18 +0000
ROA not before:           Thu 24 Sep 2026 19:04:18 +0000
ROA not after:            Thu 23 Sep 2027 19:09:18 +0000
asID:                     61660
IP address blocks:        138.185.100.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/0/678594F7C7A066D107A628D2371BAE8B60382CE0.crl
                          rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/0/678594F7C7A066D107A628D2371BAE8B60382CE0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/678594F7C7A066D107A628D2371BAE8B60382CE0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 21:39:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:60:4a:4c:53:57:d3:e3:60:2d:03:29:72:2f:0e:0d:ce:22:0e:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=678594F7C7A066D107A628D2371BAE8B60382CE0
        Validity
            Not Before: Sep 24 19:04:18 2026 GMT
            Not After : Sep 23 19:09:18 2027 GMT
        Subject: CN=8E7833FEB5354297725D27C8F45654D65D398FFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a8:72:1d:10:ad:51:9a:71:bd:bf:6a:da:4d:
                    1d:2b:b3:fd:ef:5a:4b:e0:fd:1f:eb:75:1c:cf:dd:
                    7d:92:73:ca:2d:61:d9:24:6b:04:2d:e3:64:dd:9a:
                    d6:9c:00:fa:18:b6:46:08:bc:8e:6e:e9:c9:46:a6:
                    af:f1:c6:96:3c:f1:76:32:3a:86:ac:87:53:aa:a0:
                    d7:9e:58:a7:cf:bb:1a:d8:75:dd:43:63:de:9d:71:
                    96:7d:16:66:9a:31:b5:9a:8e:68:e7:bf:8e:5b:af:
                    53:ef:72:55:00:d1:93:8d:52:af:dc:87:af:ac:23:
                    4b:d8:9f:eb:46:92:98:b6:c7:f8:28:10:44:37:ca:
                    e8:71:e8:0f:c2:09:96:bf:b0:77:88:7f:d4:59:52:
                    ba:b5:ff:0b:a0:29:73:e9:13:2e:4b:0a:39:34:da:
                    01:07:0d:b0:e9:86:b6:16:33:17:af:1d:56:8f:55:
                    9d:ae:0e:3a:81:ce:d4:56:30:be:9f:2f:f1:86:60:
                    19:ae:a6:68:63:1f:50:e7:17:59:d5:97:ac:63:0b:
                    b6:35:20:39:13:97:12:1d:77:b0:08:82:1a:d6:62:
                    71:d4:13:12:b1:76:31:e4:70:11:da:17:a9:47:c3:
                    da:f1:2b:f5:86:7b:d1:34:e9:49:73:f9:c0:a6:dd:
                    57:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:78:33:FE:B5:35:42:97:72:5D:27:C8:F4:56:54:D6:5D:39:8F:FA
            X509v3 Authority Key Identifier:
                keyid:67:85:94:F7:C7:A0:66:D1:07:A6:28:D2:37:1B:AE:8B:60:38:2C:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/0/678594F7C7A066D107A628D2371BAE8B60382CE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/678594F7C7A066D107A628D2371BAE8B60382CE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/0/3133382e3138352e3130302e302f32322d3332203d3e203631363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:f0:0d:0c:d9:98:0f:20:c8:4c:20:75:fb:ee:7e:dc:07:73:
         34:78:6d:7c:23:8e:9f:88:c2:4e:a6:92:f7:14:eb:e7:36:71:
         70:83:4d:05:8f:4b:e2:95:5b:e9:26:63:02:79:bd:5a:f9:f5:
         dd:8f:f5:da:0e:c0:cd:ed:d4:c3:47:04:be:22:4f:aa:84:6c:
         04:4a:6e:8b:7a:cd:fa:9d:02:ee:56:d3:aa:d8:10:e0:a7:d7:
         99:f7:e0:8e:75:c4:8d:11:bb:13:ec:9d:9f:12:48:66:31:6c:
         ce:c4:5e:e6:34:b1:6c:8e:a2:c6:58:cc:78:05:2a:12:94:5c:
         f1:76:47:37:a2:d7:e6:2e:b9:a6:57:43:a9:00:9c:6e:56:27:
         2c:b3:de:16:67:5f:13:37:ab:12:5d:aa:9b:f9:16:5c:00:93:
         2c:10:95:9f:cc:8b:e1:70:05:0e:f5:6b:b1:b0:2f:a8:90:b3:
         41:a9:66:f8:87:0e:fe:82:81:c4:d0:b0:c6:ef:b2:2d:fb:44:
         a9:d2:d3:85:c0:8c:c8:00:51:ee:31:0e:ea:40:5d:dd:53:80:
         d9:97:c0:ca:3e:bc:52:d1:1f:ff:9b:56:f6:87:1f:b1:5f:76:
         83:67:98:0e:f7:26:98:32:2d:39:1a:a2:f3:ff:e7:e5:ae:45:
         99:5e:77:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:54:48 2026 by rpki-client