Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7RZ4BdTx4jUXkop1ve9b3GRcH4cmiYB6LJCF3REDJQJm/0/3133382e302e3130382e302f32342d3234203d3e20323730393434.roa
File:                     3133382e302e3130382e302f32342d3234203d3e20323730393434.roa (raw, json)
Hash identifier:          CmxPYcV/AN6PP1r0OPx56NQ08Mn7JN1toCT77izrUB8=
Subject key identifier:   EE:E6:6F:F7:56:A0:4D:04:C5:C3:14:C4:38:7D:FE:FF:A7:A7:49:32
Certificate issuer:       /CN=8553806E67C661EB076F5FBA2506FA518AFD57B8
Certificate serial:       59FBFD02D62D85B3F89F09C47C52C83871AAA7C4
Authority key identifier: 85:53:80:6E:67:C6:61:EB:07:6F:5F:BA:25:06:FA:51:8A:FD:57:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8553806E67C661EB076F5FBA2506FA518AFD57B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7RZ4BdTx4jUXkop1ve9b3GRcH4cmiYB6LJCF3REDJQJm/0/3133382e302e3130382e302f32342d3234203d3e20323730393434.roa
Signing time:             Wed 12 Aug 2026 13:11:09 +0000
ROA not before:           Wed 12 Aug 2026 13:06:09 +0000
ROA not after:            Wed 11 Aug 2027 13:11:09 +0000
asID:                     270944
IP address blocks:        138.0.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7RZ4BdTx4jUXkop1ve9b3GRcH4cmiYB6LJCF3REDJQJm/0/8553806E67C661EB076F5FBA2506FA518AFD57B8.crl
                          rsync://rpki-repo.registro.br/repo/7RZ4BdTx4jUXkop1ve9b3GRcH4cmiYB6LJCF3REDJQJm/0/8553806E67C661EB076F5FBA2506FA518AFD57B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8553806E67C661EB076F5FBA2506FA518AFD57B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 17:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:fb:fd:02:d6:2d:85:b3:f8:9f:09:c4:7c:52:c8:38:71:aa:a7:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8553806E67C661EB076F5FBA2506FA518AFD57B8
        Validity
            Not Before: Aug 12 13:06:09 2026 GMT
            Not After : Aug 11 13:11:09 2027 GMT
        Subject: CN=EEE66FF756A04D04C5C314C4387DFEFFA7A74932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ad:97:6a:eb:39:1f:03:3f:99:b1:8d:f0:37:
                    72:45:5e:52:c8:74:9a:1c:57:fc:a2:87:fc:85:39:
                    0b:a7:fc:a4:b4:70:e9:c3:96:1e:00:41:65:ed:4a:
                    93:69:31:9b:6f:a8:e0:14:9a:95:69:53:38:41:48:
                    cd:46:ae:41:7a:7b:54:ef:d6:ce:79:bb:7f:e9:58:
                    21:20:92:fb:0e:0a:e4:cc:a5:41:60:64:75:1a:1a:
                    42:11:96:42:e9:3b:8b:51:33:4b:6c:72:a0:67:00:
                    e6:4f:f1:24:04:b4:02:7a:70:9b:52:fa:60:ca:9e:
                    9a:60:bb:64:bd:d4:0b:5d:a5:c6:45:84:55:59:c4:
                    91:2a:ff:38:95:8c:90:bc:90:d9:f7:5f:f7:40:85:
                    ef:eb:6b:a6:23:1d:c1:00:bf:c4:5c:1a:e7:52:7d:
                    85:1b:6e:5c:7c:03:18:75:98:67:81:45:fa:bd:18:
                    36:e7:24:7f:35:53:b3:33:a8:c3:a1:cd:e4:6b:2c:
                    66:53:7f:b9:26:fc:85:fe:d9:e6:b8:72:dd:3c:28:
                    7a:9d:ef:2d:8b:5c:2c:93:67:97:27:87:6a:bc:0b:
                    36:9b:eb:cf:f8:a0:c1:38:f1:db:d3:27:bd:83:d4:
                    6b:85:20:81:4b:29:91:5d:ab:e6:bb:d2:93:89:e9:
                    94:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E6:6F:F7:56:A0:4D:04:C5:C3:14:C4:38:7D:FE:FF:A7:A7:49:32
            X509v3 Authority Key Identifier:
                keyid:85:53:80:6E:67:C6:61:EB:07:6F:5F:BA:25:06:FA:51:8A:FD:57:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7RZ4BdTx4jUXkop1ve9b3GRcH4cmiYB6LJCF3REDJQJm/0/8553806E67C661EB076F5FBA2506FA518AFD57B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8553806E67C661EB076F5FBA2506FA518AFD57B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7RZ4BdTx4jUXkop1ve9b3GRcH4cmiYB6LJCF3REDJQJm/0/3133382e302e3130382e302f32342d3234203d3e20323730393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:5c:44:b8:b7:62:19:d9:ab:6b:92:6e:6e:37:36:2d:08:5b:
         67:72:39:ae:19:36:b1:c8:3d:50:4a:69:03:e7:9d:5d:ee:b7:
         36:f8:a2:c2:43:f9:33:ef:d0:2b:3c:31:4c:a7:4f:5f:6a:2e:
         11:3b:1c:15:e0:23:66:f3:01:53:22:19:ab:fe:84:b4:50:4a:
         9e:1d:0f:84:02:dd:dd:11:4f:21:fb:51:b0:1a:83:cc:f4:5a:
         c9:95:82:28:a5:2a:f3:2f:aa:2b:d4:98:d1:0d:1f:f5:c4:f7:
         43:51:1e:7b:1c:8b:8d:cb:78:b8:dc:f1:bc:0a:01:b6:39:78:
         29:b6:6f:37:e1:7d:50:ac:e4:d4:5c:12:11:76:1c:60:0a:92:
         ea:27:9e:81:79:a4:0b:08:85:ae:30:94:06:f5:21:a1:7c:e0:
         ea:46:89:35:c4:40:c6:47:f4:d6:7f:07:86:32:39:48:53:bb:
         c9:4d:92:53:15:da:1b:94:3c:3d:93:7d:cf:78:fe:a7:35:d8:
         b7:c0:3a:22:d4:18:b5:70:f1:1b:82:95:4d:f6:40:4f:54:cd:
         e3:9a:91:ab:f2:f2:df:ab:0d:7b:5f:ad:4f:f0:83:e1:c1:45:
         87:7c:91:6f:af:e7:32:86:1b:10:6c:f6:9b:f8:8e:5a:dd:9b:
         9b:d8:36:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 00:07:26 2026 by rpki-client