Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/1/3133382e3138352e3130302e302f32322d3234203d3e203631363630.roa
File:                     3133382e3138352e3130302e302f32322d3234203d3e203631363630.roa (raw, json)
Hash identifier:          EugsbBf6ack50ZTLvKW/oPIK0zoOkPXinMrBe074W1I=
Subject key identifier:   14:CE:3D:E9:48:B2:B9:62:C3:A2:01:3D:B6:F9:D2:30:2C:6C:73:7F
Certificate issuer:       /CN=DDD1EC34B31393132B6FA9377712BFCA752E5330
Certificate serial:       283C15BB99D1B2E0BE7A383B04B9231C19A93178
Authority key identifier: DD:D1:EC:34:B3:13:93:13:2B:6F:A9:37:77:12:BF:CA:75:2E:53:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDD1EC34B31393132B6FA9377712BFCA752E5330.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/1/3133382e3138352e3130302e302f32322d3234203d3e203631363630.roa
Signing time:             Wed 13 May 2026 19:33:32 +0000
ROA not before:           Wed 13 May 2026 19:28:32 +0000
ROA not after:            Wed 12 May 2027 19:33:32 +0000
asID:                     61660
IP address blocks:        138.185.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/1/DDD1EC34B31393132B6FA9377712BFCA752E5330.crl
                          rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/1/DDD1EC34B31393132B6FA9377712BFCA752E5330.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDD1EC34B31393132B6FA9377712BFCA752E5330.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 14:37:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:3c:15:bb:99:d1:b2:e0:be:7a:38:3b:04:b9:23:1c:19:a9:31:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDD1EC34B31393132B6FA9377712BFCA752E5330
        Validity
            Not Before: May 13 19:28:32 2026 GMT
            Not After : May 12 19:33:32 2027 GMT
        Subject: CN=14CE3DE948B2B962C3A2013DB6F9D2302C6C737F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:ce:f3:2d:7c:cc:80:fb:8f:b5:56:78:0d:1a:
                    1b:69:fa:41:18:c7:63:cc:ee:25:fb:02:9b:44:33:
                    66:a0:c8:c4:82:80:b7:9f:b7:05:47:a5:da:9c:05:
                    f2:20:c9:52:80:da:98:bb:d2:e6:9a:e4:94:57:2c:
                    84:10:25:18:a3:00:f5:b7:cb:b2:8a:3e:cd:ca:50:
                    33:e8:19:cc:40:b5:d7:2d:33:10:9a:c8:f4:a4:44:
                    42:66:48:73:d2:c6:41:ab:d2:0d:be:b2:10:f5:d2:
                    e4:65:34:89:cb:b8:29:3e:76:f5:91:49:bb:e9:e0:
                    29:2f:a9:bd:19:7f:d5:1f:8b:bc:d4:43:62:8f:68:
                    bf:d7:bf:72:29:bd:8f:6b:bf:0c:35:35:9b:3e:48:
                    4f:86:f8:b7:bf:27:be:95:7e:04:0d:68:49:5c:89:
                    90:7e:e9:92:4f:3c:db:8e:b7:42:79:04:98:0e:50:
                    0c:28:97:f5:fb:39:42:fc:98:7f:67:c5:8b:62:88:
                    fd:ed:9d:3c:2a:93:99:92:9b:e3:58:22:3f:6b:93:
                    4f:63:b0:2c:a5:36:e0:a6:4c:92:dd:8c:59:e3:00:
                    44:08:f5:36:45:d2:3f:1f:6b:83:58:ed:49:b7:c7:
                    91:6b:36:8b:f7:98:49:40:a3:74:7d:3c:15:1b:b9:
                    d3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:CE:3D:E9:48:B2:B9:62:C3:A2:01:3D:B6:F9:D2:30:2C:6C:73:7F
            X509v3 Authority Key Identifier:
                keyid:DD:D1:EC:34:B3:13:93:13:2B:6F:A9:37:77:12:BF:CA:75:2E:53:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/1/DDD1EC34B31393132B6FA9377712BFCA752E5330.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDD1EC34B31393132B6FA9377712BFCA752E5330.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/1/3133382e3138352e3130302e302f32322d3234203d3e203631363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:5c:65:52:e3:3f:7d:67:02:b5:83:a1:2a:9c:15:c7:32:a8:
         d5:13:7d:f1:20:25:0c:ac:2b:fc:1a:fd:f3:e9:02:7f:cd:e7:
         dc:d9:95:b8:fd:de:ba:e7:7a:87:d1:23:ea:74:cb:6d:b2:5d:
         ad:e1:a5:d8:39:1f:54:dd:2c:98:21:24:70:f3:fa:ac:8e:5d:
         4f:31:b8:28:07:ad:68:29:00:ae:2e:9c:b1:88:e5:f1:fe:1a:
         3a:5f:90:43:63:b2:7f:6f:4d:33:41:5d:85:fa:64:9d:5b:d1:
         84:b2:d4:91:52:52:6b:31:be:90:7b:0f:e8:22:02:4e:87:88:
         83:ed:0a:4b:6e:32:00:41:0d:b8:72:b2:b6:65:f4:4f:21:61:
         0c:20:d0:96:cf:9f:10:38:51:ec:e7:76:8b:d5:a6:4b:ed:b9:
         79:62:98:fe:3b:8a:9a:78:fa:5a:8e:15:47:0f:4d:d4:7d:5c:
         a3:0a:81:28:f2:2b:17:af:3f:de:e6:8b:97:50:bf:cc:41:84:
         f2:f4:23:8e:fb:a8:ff:cf:41:d6:87:41:90:a0:64:bb:93:e4:
         c0:ab:e3:4e:b2:1b:1a:cb:24:57:4b:0b:a5:f6:3e:22:fb:93:
         de:7e:f8:27:8f:2d:f1:4a:10:6e:8d:dc:06:84:87:b1:08:87:
         62:43:f4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:45:27 2026 by rpki-client