Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8gv2A6YNS4JML86mRAEiKsXR4XfX9g8HDFD2vfAFs3rH/0/3133382e3138352e33322e302f32322d3234203d3e20323634333338.roa
File:                     3133382e3138352e33322e302f32322d3234203d3e20323634333338.roa (raw, json)
Hash identifier:          ppdg7bfB1FekerDYB14cw2PG78KorJ9x7InjD39xA4I=
Subject key identifier:   5F:69:67:DD:01:04:72:62:79:CC:FE:41:71:68:3D:C0:C2:21:FA:54
Certificate issuer:       /CN=E97C28CBEFB81413F2767E20C6866F8DF1CFB2B8
Certificate serial:       02C775EC3995104ED9D6A31F8A93AB97E9BF76DE
Authority key identifier: E9:7C:28:CB:EF:B8:14:13:F2:76:7E:20:C6:86:6F:8D:F1:CF:B2:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E97C28CBEFB81413F2767E20C6866F8DF1CFB2B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8gv2A6YNS4JML86mRAEiKsXR4XfX9g8HDFD2vfAFs3rH/0/3133382e3138352e33322e302f32322d3234203d3e20323634333338.roa
Signing time:             Tue 18 Aug 2026 12:20:48 +0000
ROA not before:           Tue 18 Aug 2026 12:15:48 +0000
ROA not after:            Tue 17 Aug 2027 12:20:48 +0000
asID:                     264338
IP address blocks:        138.185.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8gv2A6YNS4JML86mRAEiKsXR4XfX9g8HDFD2vfAFs3rH/0/E97C28CBEFB81413F2767E20C6866F8DF1CFB2B8.crl
                          rsync://rpki-repo.registro.br/repo/8gv2A6YNS4JML86mRAEiKsXR4XfX9g8HDFD2vfAFs3rH/0/E97C28CBEFB81413F2767E20C6866F8DF1CFB2B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E97C28CBEFB81413F2767E20C6866F8DF1CFB2B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 02:03:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:c7:75:ec:39:95:10:4e:d9:d6:a3:1f:8a:93:ab:97:e9:bf:76:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E97C28CBEFB81413F2767E20C6866F8DF1CFB2B8
        Validity
            Not Before: Aug 18 12:15:48 2026 GMT
            Not After : Aug 17 12:20:48 2027 GMT
        Subject: CN=5F6967DD0104726279CCFE4171683DC0C221FA54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9e:89:fd:d8:a1:0e:b4:c2:76:d5:6d:ac:bb:
                    b8:ce:9a:df:d7:a2:c4:62:f6:07:29:60:0d:a3:91:
                    60:c1:09:f1:50:23:76:f2:c8:f1:ed:6b:18:b8:bb:
                    4e:02:25:40:00:25:70:ff:38:31:1d:33:d9:58:bb:
                    4a:fb:19:e1:71:0e:e0:a6:6d:b8:38:05:19:d2:c3:
                    a7:14:21:75:c8:14:02:78:fe:e4:b1:72:be:a5:88:
                    cd:b4:6a:82:6d:03:3b:3d:f4:1a:52:03:1e:0b:e9:
                    5b:ed:a0:78:d1:c2:a3:4a:10:58:d7:94:92:d6:f0:
                    9e:ac:d3:ad:4d:38:d4:02:9e:9a:4c:65:4c:4b:96:
                    67:ec:a6:28:93:63:48:21:f6:b2:6a:b7:3c:53:cc:
                    73:6b:f2:2d:cc:da:5e:20:c0:59:90:26:bf:25:3f:
                    a3:00:c7:a0:60:b6:48:3d:5b:e8:07:cf:d0:bf:f4:
                    72:00:3c:bb:c4:98:8e:4d:ce:ce:0d:b0:ce:66:b8:
                    6a:bf:24:db:b7:2b:a8:c3:50:78:2b:36:9c:6a:02:
                    cc:fc:b7:b1:9b:db:59:0f:cc:bb:d1:3c:43:5f:bc:
                    35:a1:ff:82:aa:8a:8f:95:8a:b8:da:d0:39:df:d7:
                    62:5f:2d:9c:cd:3d:71:d0:8f:62:a6:8f:d3:3e:cd:
                    f2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:69:67:DD:01:04:72:62:79:CC:FE:41:71:68:3D:C0:C2:21:FA:54
            X509v3 Authority Key Identifier:
                keyid:E9:7C:28:CB:EF:B8:14:13:F2:76:7E:20:C6:86:6F:8D:F1:CF:B2:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8gv2A6YNS4JML86mRAEiKsXR4XfX9g8HDFD2vfAFs3rH/0/E97C28CBEFB81413F2767E20C6866F8DF1CFB2B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E97C28CBEFB81413F2767E20C6866F8DF1CFB2B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gv2A6YNS4JML86mRAEiKsXR4XfX9g8HDFD2vfAFs3rH/0/3133382e3138352e33322e302f32322d3234203d3e20323634333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:73:34:34:7e:3d:a8:5e:2e:a3:dd:5c:89:34:d2:06:fa:9c:
         cf:0e:77:26:94:5e:97:c9:25:0a:9a:09:59:af:7d:4d:99:f6:
         d0:dd:3a:bf:1a:10:20:a8:92:b5:0b:27:d1:b5:db:59:3f:51:
         51:a1:60:bc:d0:17:ae:3a:4f:23:99:fe:e6:86:a3:47:46:44:
         0a:cd:47:dd:53:af:13:15:83:59:58:7e:2c:21:39:48:eb:83:
         04:1c:2a:dd:79:6a:67:1e:59:9e:8a:47:09:a8:5f:a5:0a:05:
         8c:f1:cd:91:0c:3c:2f:59:83:d6:d8:9c:13:16:2e:00:3e:fe:
         cf:04:cb:80:bf:f1:58:aa:67:36:1e:19:13:fa:cc:46:25:60:
         bc:f6:08:38:88:3c:04:ba:e2:0f:26:2a:03:76:fa:9b:6e:d6:
         71:af:65:a7:8b:0f:02:bc:d4:14:cd:ff:60:35:56:c8:22:cb:
         76:e3:58:c6:a6:a5:c3:4f:0e:a2:23:ab:67:cc:31:58:fd:48:
         91:c4:99:72:cf:10:1c:fa:bd:52:18:74:58:ae:5b:13:a0:31:
         4e:37:ed:47:a7:90:67:f9:e9:26:d6:30:ed:0d:ec:d6:4a:44:
         ca:6e:a6:e2:30:e8:21:08:ff:7e:c4:5e:44:71:8b:66:6b:74:
         16:1f:99:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:13:04 2026 by rpki-client