Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8Yn6xJtFJJYr2xDfzgZsq6h7LdRTxHn1gDbNCDYnG9c4/0/3133382e3131372e3234382e302f32322d3234203d3e20323730363632.roa
File:                     3133382e3131372e3234382e302f32322d3234203d3e20323730363632.roa (raw, json)
Hash identifier:          c0fAcBnwi38RIhd3zAooVX9K6OQh73hgAXQ4wQiUUlM=
Subject key identifier:   C4:D0:85:05:F6:76:F9:0B:CA:0A:B6:7B:28:8D:EF:AC:86:3F:E5:91
Certificate issuer:       /CN=31EF82CAA99C867CF091CB1B1D53264EFB6EB14C
Certificate serial:       46DBF1FE0D1D73B0A9EB3326781EC805DBBD7707
Authority key identifier: 31:EF:82:CA:A9:9C:86:7C:F0:91:CB:1B:1D:53:26:4E:FB:6E:B1:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31EF82CAA99C867CF091CB1B1D53264EFB6EB14C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Yn6xJtFJJYr2xDfzgZsq6h7LdRTxHn1gDbNCDYnG9c4/0/3133382e3131372e3234382e302f32322d3234203d3e20323730363632.roa
Signing time:             Mon 10 Aug 2026 19:35:46 +0000
ROA not before:           Mon 10 Aug 2026 19:30:46 +0000
ROA not after:            Mon 09 Aug 2027 19:35:46 +0000
asID:                     270662
IP address blocks:        138.117.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Yn6xJtFJJYr2xDfzgZsq6h7LdRTxHn1gDbNCDYnG9c4/0/31EF82CAA99C867CF091CB1B1D53264EFB6EB14C.crl
                          rsync://rpki-repo.registro.br/repo/8Yn6xJtFJJYr2xDfzgZsq6h7LdRTxHn1gDbNCDYnG9c4/0/31EF82CAA99C867CF091CB1B1D53264EFB6EB14C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31EF82CAA99C867CF091CB1B1D53264EFB6EB14C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 23:11:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:db:f1:fe:0d:1d:73:b0:a9:eb:33:26:78:1e:c8:05:db:bd:77:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31EF82CAA99C867CF091CB1B1D53264EFB6EB14C
        Validity
            Not Before: Aug 10 19:30:46 2026 GMT
            Not After : Aug  9 19:35:46 2027 GMT
        Subject: CN=C4D08505F676F90BCA0AB67B288DEFAC863FE591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bd:97:35:72:88:70:56:04:01:fc:64:28:0c:
                    2a:e4:91:c1:51:47:a5:7e:66:4e:1d:95:72:d6:46:
                    19:13:ad:78:ff:fb:35:0b:54:9e:02:61:28:b0:54:
                    09:2f:c6:f7:ea:ec:7b:6b:59:f0:10:2c:07:7b:bf:
                    7c:0e:f2:51:da:8c:49:02:c8:98:2d:75:3f:9b:22:
                    9b:ff:a9:82:d3:bb:e5:3c:71:36:57:0e:66:6c:6c:
                    49:14:fa:f7:3d:f9:5d:2f:91:34:46:7b:25:cf:61:
                    a3:7f:59:8b:41:02:9d:12:bc:0e:23:bf:2d:34:b7:
                    73:fa:ac:4e:f3:74:6c:9b:d5:49:bf:70:2d:58:68:
                    ea:7a:51:82:13:d2:c9:39:b5:a0:b2:99:f0:74:20:
                    86:e0:e8:d0:8c:77:1a:01:ea:22:0e:31:b4:e7:6b:
                    9d:f5:6c:7f:10:88:f4:3f:96:d2:e5:6b:f0:30:b8:
                    ea:87:58:09:49:2a:33:91:15:47:42:c0:7a:3e:47:
                    8c:db:38:e2:7b:59:9c:21:9d:3c:c6:2d:e9:36:5e:
                    9d:67:b4:24:7a:fe:14:3a:84:72:64:34:44:a9:68:
                    17:15:1a:2e:25:2e:6f:15:0a:37:fd:25:c6:50:8f:
                    57:a0:06:90:5c:4c:c1:bd:ce:12:a2:b3:c1:a4:f7:
                    29:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:D0:85:05:F6:76:F9:0B:CA:0A:B6:7B:28:8D:EF:AC:86:3F:E5:91
            X509v3 Authority Key Identifier:
                keyid:31:EF:82:CA:A9:9C:86:7C:F0:91:CB:1B:1D:53:26:4E:FB:6E:B1:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Yn6xJtFJJYr2xDfzgZsq6h7LdRTxHn1gDbNCDYnG9c4/0/31EF82CAA99C867CF091CB1B1D53264EFB6EB14C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31EF82CAA99C867CF091CB1B1D53264EFB6EB14C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Yn6xJtFJJYr2xDfzgZsq6h7LdRTxHn1gDbNCDYnG9c4/0/3133382e3131372e3234382e302f32322d3234203d3e20323730363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:d3:6a:b1:8c:15:85:4d:36:fe:02:92:93:b7:d8:0d:65:30:
         08:67:e8:cd:bb:e2:4b:bb:8b:d2:b5:da:b1:52:93:84:0c:e4:
         74:8c:e4:da:7d:6c:6d:94:b6:6d:c4:6f:8b:ee:85:1f:ec:b5:
         2e:da:97:ad:8c:b4:02:45:f6:f5:47:ec:cd:e8:f7:79:44:49:
         25:11:33:ef:db:23:0c:c0:71:56:cf:c0:d0:a2:67:c2:95:1e:
         d6:88:04:17:b6:12:8c:ca:61:30:b1:6e:dd:6b:5b:56:cb:ff:
         73:5a:59:62:aa:38:8b:21:27:b7:04:eb:a3:4f:40:58:e8:2b:
         d6:b9:1e:50:7d:ec:a0:a3:77:bf:48:bb:32:03:fc:8f:77:53:
         27:83:c2:15:2d:de:18:46:e3:19:e1:c8:15:6b:05:46:72:c2:
         8c:ee:e3:4f:bc:a8:35:61:92:19:bd:19:c8:5f:d7:de:a7:88:
         f8:33:47:a7:e5:76:3b:5d:87:d3:fc:f7:af:f8:cb:10:9f:d9:
         b6:9e:a7:1c:17:4a:16:7c:51:15:0b:52:90:0a:c2:c0:3a:30:
         b3:89:71:31:53:0e:b4:3a:c1:0d:c6:8c:a0:9f:84:36:3f:88:
         da:db:9e:b7:71:ff:7e:43:25:39:c4:49:05:b3:bc:8a:fe:8e:
         06:d8:3d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:26:34 2026 by rpki-client