Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/0/3133382e3138362e3133322e302f32322d3332203d3e203533313630.roa
File:                     3133382e3138362e3133322e302f32322d3332203d3e203533313630.roa (raw, json)
Hash identifier:          h3SdxN3kcwGhugrFjh6BuNlGY1Iqu/bo9qDwHp+V5fM=
Subject key identifier:   2C:14:5C:BE:8E:D5:7E:EA:6F:D9:BD:68:93:C0:AF:22:C2:0F:8C:CD
Certificate issuer:       /CN=ED3B3BA45546351061AEEB665480B9D38FE9066C
Certificate serial:       09168CAC2A755B86777EBC4CFC8CD352CDA31691
Authority key identifier: ED:3B:3B:A4:55:46:35:10:61:AE:EB:66:54:80:B9:D3:8F:E9:06:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED3B3BA45546351061AEEB665480B9D38FE9066C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/0/3133382e3138362e3133322e302f32322d3332203d3e203533313630.roa
Signing time:             Fri 07 Aug 2026 19:15:56 +0000
ROA not before:           Fri 07 Aug 2026 19:10:56 +0000
ROA not after:            Fri 06 Aug 2027 19:15:56 +0000
asID:                     53160
IP address blocks:        138.186.132.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/0/ED3B3BA45546351061AEEB665480B9D38FE9066C.crl
                          rsync://rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/0/ED3B3BA45546351061AEEB665480B9D38FE9066C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED3B3BA45546351061AEEB665480B9D38FE9066C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 19:34:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:16:8c:ac:2a:75:5b:86:77:7e:bc:4c:fc:8c:d3:52:cd:a3:16:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED3B3BA45546351061AEEB665480B9D38FE9066C
        Validity
            Not Before: Aug  7 19:10:56 2026 GMT
            Not After : Aug  6 19:15:56 2027 GMT
        Subject: CN=2C145CBE8ED57EEA6FD9BD6893C0AF22C20F8CCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3d:6d:e7:ec:e3:ee:93:8f:ae:c5:95:e3:32:
                    d8:b1:7a:70:84:db:24:c6:78:85:e5:23:b3:4c:4c:
                    a8:ab:b7:21:82:c2:ba:6d:a4:a6:4d:60:bb:a2:e8:
                    ae:d3:7f:04:27:ae:e8:e0:9b:43:69:20:84:fd:60:
                    98:e2:f7:16:2b:90:8e:a2:d4:de:ae:8b:55:52:11:
                    59:05:d8:e6:0a:05:6d:25:f4:83:53:32:c3:a4:e5:
                    21:29:39:98:ff:cb:c4:cf:ed:06:cc:a8:d7:37:9e:
                    9a:6b:6d:36:bb:21:eb:e5:99:12:bb:71:f4:09:28:
                    dd:df:6e:51:c6:86:c2:48:9f:14:d4:94:2e:d4:48:
                    e4:5d:9f:7c:3c:20:9c:6d:c6:55:0d:ab:fe:ea:a6:
                    d1:ae:6f:a6:fa:fb:52:32:99:34:4e:66:83:02:40:
                    33:21:db:06:2e:3a:b6:b0:01:44:e6:20:92:ee:5e:
                    0c:ef:2b:8b:b7:dd:ed:2e:58:44:21:8b:4e:4a:c8:
                    39:90:ff:00:5e:2f:60:4b:d0:75:8d:9d:45:67:a0:
                    0a:b8:2d:b4:5c:95:64:cf:59:f1:41:6d:60:33:f7:
                    8f:bd:42:60:ca:7c:c7:46:3b:2a:65:95:2e:7c:a4:
                    d0:f4:f5:e1:71:06:66:ef:e9:81:c7:ec:5f:c9:4d:
                    a4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:14:5C:BE:8E:D5:7E:EA:6F:D9:BD:68:93:C0:AF:22:C2:0F:8C:CD
            X509v3 Authority Key Identifier:
                keyid:ED:3B:3B:A4:55:46:35:10:61:AE:EB:66:54:80:B9:D3:8F:E9:06:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/0/ED3B3BA45546351061AEEB665480B9D38FE9066C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED3B3BA45546351061AEEB665480B9D38FE9066C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/0/3133382e3138362e3133322e302f32322d3332203d3e203533313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:f0:a6:96:c2:6d:38:d0:27:5b:7f:e5:be:c4:0c:51:28:4d:
         41:56:ab:08:00:12:c1:1e:40:07:13:1a:65:db:1b:9e:ba:37:
         85:5d:f7:82:ef:4a:21:86:57:e2:36:7b:dc:15:52:70:e8:82:
         ce:18:9d:e0:b6:79:a1:8d:ab:03:bf:b1:94:6a:41:55:cc:61:
         70:cc:be:3a:a0:b7:bf:67:83:22:c5:5b:2c:6a:6d:34:52:7e:
         0c:bd:0d:91:37:a7:ad:50:8a:6a:2f:28:65:1a:ed:16:28:26:
         dd:de:75:aa:f3:44:8f:74:dc:08:1f:c5:0c:88:8d:a9:7d:e1:
         65:b1:bb:04:96:61:b8:24:09:36:51:db:3a:2c:41:54:68:80:
         fb:d3:77:49:ed:30:3c:a8:2d:02:13:62:85:0e:a2:bf:27:ec:
         0b:92:1d:d0:54:ab:d3:de:c2:51:34:24:dd:73:4e:19:45:1f:
         16:d6:81:1e:29:f8:b0:8b:b9:ae:07:97:51:40:e9:05:f9:46:
         4d:79:87:ce:4b:c5:c0:f6:7e:5c:d5:ea:44:76:2f:5e:c7:ae:
         26:45:cf:87:0c:36:0a:07:88:cb:48:77:65:18:af:86:18:c4:
         6c:29:ee:c8:21:42:1b:8c:d9:02:0c:2b:64:96:d0:ac:0e:ba:
         d5:f8:eb:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 02:19:46 2026 by rpki-client