Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8gv2A6YNS4JML86mRAEiKsXR4XfX9g8HDFD2vfAFs3rH/0/3133382e3138352e33342e302f32332d3234203d3e20323634333338.roa
File:                     3133382e3138352e33342e302f32332d3234203d3e20323634333338.roa (raw, json)
Hash identifier:          6ZSzD2trYXk8B29gzNauzqIJn+mBXlXGh2oO8WYCX1k=
Subject key identifier:   91:AD:A8:DE:B7:71:52:8C:6C:77:3D:52:3F:18:5F:F1:56:E9:AB:61
Certificate issuer:       /CN=E97C28CBEFB81413F2767E20C6866F8DF1CFB2B8
Certificate serial:       6EB4F51F93BFBB77F5FE99F7D9C52DD9AC6A8BA4
Authority key identifier: E9:7C:28:CB:EF:B8:14:13:F2:76:7E:20:C6:86:6F:8D:F1:CF:B2:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E97C28CBEFB81413F2767E20C6866F8DF1CFB2B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8gv2A6YNS4JML86mRAEiKsXR4XfX9g8HDFD2vfAFs3rH/0/3133382e3138352e33342e302f32332d3234203d3e20323634333338.roa
Signing time:             Tue 18 Aug 2026 12:20:47 +0000
ROA not before:           Tue 18 Aug 2026 12:15:47 +0000
ROA not after:            Tue 17 Aug 2027 12:20:47 +0000
asID:                     264338
IP address blocks:        138.185.34.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8gv2A6YNS4JML86mRAEiKsXR4XfX9g8HDFD2vfAFs3rH/0/E97C28CBEFB81413F2767E20C6866F8DF1CFB2B8.crl
                          rsync://rpki-repo.registro.br/repo/8gv2A6YNS4JML86mRAEiKsXR4XfX9g8HDFD2vfAFs3rH/0/E97C28CBEFB81413F2767E20C6866F8DF1CFB2B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E97C28CBEFB81413F2767E20C6866F8DF1CFB2B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 02:03:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:b4:f5:1f:93:bf:bb:77:f5:fe:99:f7:d9:c5:2d:d9:ac:6a:8b:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E97C28CBEFB81413F2767E20C6866F8DF1CFB2B8
        Validity
            Not Before: Aug 18 12:15:47 2026 GMT
            Not After : Aug 17 12:20:47 2027 GMT
        Subject: CN=91ADA8DEB771528C6C773D523F185FF156E9AB61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:45:3c:4e:e9:cd:8e:9d:07:44:e6:21:c3:42:
                    1a:72:32:58:0c:13:44:e6:d7:58:62:fa:0c:9b:45:
                    94:7f:8b:c5:e3:1e:fd:4c:dd:6f:70:0f:c6:06:bc:
                    18:86:ee:63:91:50:7e:bf:f4:a1:20:a1:1a:88:45:
                    fe:40:11:84:04:db:33:37:1d:2d:20:fa:d2:97:f5:
                    05:90:76:a0:5b:b7:b0:ac:05:3a:10:ad:49:10:29:
                    cc:0b:e6:23:09:bf:ff:93:f3:f6:d1:42:e2:16:66:
                    f2:39:ec:d6:58:48:c7:5d:13:76:40:09:52:98:aa:
                    c9:69:bb:6b:00:d8:75:b5:dd:08:5b:b1:93:5d:e3:
                    3f:e0:3d:f0:ab:78:59:ec:0d:b4:26:80:18:55:44:
                    25:79:9d:b9:9d:ff:63:e8:1a:70:a9:a7:f1:a1:78:
                    cc:ae:b8:86:10:79:6a:e3:36:c2:9d:25:1d:f6:49:
                    48:da:9f:7e:72:7b:d9:24:f1:92:9f:7b:63:85:83:
                    71:9c:f0:d9:d5:70:34:a6:1d:fa:05:da:aa:75:e8:
                    b7:46:45:b1:cd:33:2a:33:76:f2:8d:fc:c2:34:63:
                    34:d3:e4:fe:cf:97:b8:76:0d:7e:5f:34:1a:dd:72:
                    66:8e:d9:39:dc:0f:4a:7a:a9:5e:c9:57:cc:14:3f:
                    5e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:AD:A8:DE:B7:71:52:8C:6C:77:3D:52:3F:18:5F:F1:56:E9:AB:61
            X509v3 Authority Key Identifier:
                keyid:E9:7C:28:CB:EF:B8:14:13:F2:76:7E:20:C6:86:6F:8D:F1:CF:B2:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8gv2A6YNS4JML86mRAEiKsXR4XfX9g8HDFD2vfAFs3rH/0/E97C28CBEFB81413F2767E20C6866F8DF1CFB2B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E97C28CBEFB81413F2767E20C6866F8DF1CFB2B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gv2A6YNS4JML86mRAEiKsXR4XfX9g8HDFD2vfAFs3rH/0/3133382e3138352e33342e302f32332d3234203d3e20323634333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:5e:e1:9f:15:ce:e3:06:8b:61:d2:76:55:a7:7d:ba:52:4d:
         04:1e:57:dc:0e:66:db:58:88:32:69:1e:1f:19:81:bc:b4:8d:
         33:8c:74:55:75:22:7c:12:5e:70:43:92:07:d9:b3:e9:3a:f5:
         30:b6:fb:30:93:6c:67:b9:77:96:fe:39:d0:11:db:55:03:c9:
         b3:68:65:49:f4:57:2d:5b:81:07:92:37:79:60:12:29:18:7b:
         1c:60:71:07:1e:f7:06:c7:bf:31:89:a2:49:b4:7e:bc:5b:d0:
         31:c9:29:29:21:84:83:3e:a0:97:30:52:5d:99:3e:5e:5a:19:
         9c:ba:ac:03:05:fa:b6:0b:d2:0b:36:ef:16:11:97:36:3c:5f:
         c5:a5:72:2a:e5:ae:c9:5c:d7:d3:9d:84:83:d3:45:35:15:7b:
         8b:1c:2a:91:99:ce:c7:85:cb:90:41:c4:bb:c3:9d:b0:a6:fe:
         a8:cb:d3:f4:0f:b1:45:f0:77:49:b4:2c:7c:2d:07:2f:a1:45:
         14:91:b7:8e:ed:bf:74:53:80:e8:24:d5:db:13:38:df:29:38:
         f8:95:8a:d5:4e:c7:03:4c:9a:40:60:28:e8:04:c2:d7:23:32:
         b5:0c:7a:18:32:9c:05:35:2d:49:1d:59:b7:02:d7:e6:d1:d2:
         2b:d3:4e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:12:35 2026 by rpki-client