Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/3133382e3235352e36342e302f32342d3234203d3e20323633393730.roa
File:                     3133382e3235352e36342e302f32342d3234203d3e20323633393730.roa (raw, json)
Hash identifier:          K/75x44JDizCx0eN7rNhqK8nKosMENRloQPRid0Nwwk=
Subject key identifier:   54:BA:D6:8F:D9:48:9B:E4:FB:45:5F:C2:09:4F:10:09:22:BC:35:86
Certificate issuer:       /CN=4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D
Certificate serial:       764284F669F714512DFE277B5B57D9C20C2A2ABF
Authority key identifier: 4B:A0:BB:3B:0B:41:C1:99:EC:E0:C0:52:5E:C5:45:C2:9A:7E:72:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/3133382e3235352e36342e302f32342d3234203d3e20323633393730.roa
Signing time:             Tue 06 Oct 2026 12:33:02 +0000
ROA not before:           Tue 06 Oct 2026 12:28:02 +0000
ROA not after:            Tue 05 Oct 2027 12:33:02 +0000
asID:                     263970
IP address blocks:        138.255.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D.crl
                          rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 11:15:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:42:84:f6:69:f7:14:51:2d:fe:27:7b:5b:57:d9:c2:0c:2a:2a:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D
        Validity
            Not Before: Oct  6 12:28:02 2026 GMT
            Not After : Oct  5 12:33:02 2027 GMT
        Subject: CN=54BAD68FD9489BE4FB455FC2094F100922BC3586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f3:d3:b1:4e:91:6f:92:af:96:c9:b2:79:c0:
                    dc:69:d0:8e:df:de:96:9a:2f:96:fb:78:50:29:09:
                    6f:4a:48:ce:0e:a9:2b:86:55:c3:78:56:0b:6c:c6:
                    9a:dc:f9:91:d4:56:a0:fe:b1:1c:be:4a:9b:47:f1:
                    f0:47:69:2e:ff:d3:46:de:e0:c4:2f:df:01:44:d3:
                    41:c5:8d:8a:bf:0e:60:f8:28:26:a9:73:7a:57:55:
                    4d:0b:35:10:8b:d2:35:5f:2b:35:b7:b6:18:a9:0c:
                    27:e0:4c:b9:9b:45:09:7b:38:d4:97:19:88:fc:2b:
                    bb:3d:dd:c8:e1:07:5d:21:ea:70:da:ab:3e:d0:87:
                    4b:f0:f5:48:6a:b2:cd:4d:d7:1b:31:77:03:4e:0d:
                    0e:80:91:9f:93:f1:eb:f4:62:b5:70:64:d3:f7:68:
                    60:e2:c7:c8:dc:ec:2d:34:5e:2f:7c:b8:49:6a:09:
                    a1:81:fa:05:0d:46:36:08:93:bf:5a:0a:f1:60:b1:
                    cb:ce:6f:56:41:ed:8f:1e:10:9d:2d:fd:27:33:7a:
                    c2:ba:d2:e7:b0:b0:ec:60:14:15:3f:dd:f7:c0:1f:
                    69:6d:1e:9c:4d:04:0b:14:e4:e5:36:76:f4:de:89:
                    0f:d9:18:44:93:1d:31:54:54:2b:28:e5:d7:7a:a4:
                    e9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:BA:D6:8F:D9:48:9B:E4:FB:45:5F:C2:09:4F:10:09:22:BC:35:86
            X509v3 Authority Key Identifier:
                keyid:4B:A0:BB:3B:0B:41:C1:99:EC:E0:C0:52:5E:C5:45:C2:9A:7E:72:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/3133382e3235352e36342e302f32342d3234203d3e20323633393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:dc:cd:3e:e4:3d:f9:12:9b:5f:b6:ca:1c:ed:8a:8a:00:16:
         37:be:05:0e:0c:5c:3d:ca:f2:50:7a:9d:ea:b0:dd:b7:a7:c7:
         4a:3c:af:a2:c3:2f:63:31:bc:41:4d:7e:62:c6:12:7d:03:d5:
         1c:ff:20:74:ba:a3:eb:f2:29:89:fe:5e:72:15:cb:b0:a3:6f:
         b0:79:c3:49:66:d3:38:67:4f:40:9c:e7:5f:48:c8:eb:f4:a3:
         b1:b1:1f:13:44:99:bf:e9:02:91:83:ea:2e:41:3f:f5:da:87:
         70:23:f1:af:c7:11:ec:20:16:96:2a:35:5e:d3:77:49:5a:92:
         1f:c6:a3:ae:ec:fb:cf:ac:25:5d:de:3c:db:50:df:98:12:fe:
         83:bd:b0:ad:80:80:50:75:d7:b6:88:ae:ca:07:45:10:d1:03:
         13:78:92:2d:b4:a3:59:6f:48:db:c5:30:61:c8:55:68:d7:51:
         81:db:89:13:43:cd:1c:65:e8:fb:37:08:d1:e1:87:ab:ff:83:
         35:6d:e1:8c:10:23:bc:9a:f1:ae:86:85:6d:48:86:d2:75:73:
         af:37:53:20:ca:9b:b4:71:25:59:6d:f5:9b:5b:4f:61:36:ac:
         c1:6d:78:33:6d:d2:4c:0e:36:17:86:d3:a9:e7:b1:19:3c:40:
         14:1b:06:29
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdkKE9mn3FFEt/id7W1fZwgwqKr8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEJBMEJCM0IwQjQxQzE5OUVDRTBDMDUyNUVDNTQ1QzI5
QTdFNzI1RDAeFw0yNjEwMDYxMjI4MDJaFw0yNzEwMDUxMjMzMDJaMDMxMTAvBgNV
BAMTKDU0QkFENjhGRDk0ODlCRTRGQjQ1NUZDMjA5NEYxMDA5MjJCQzM1ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC589OxTpFvkq+WybJ5wNxp0I7f
3paaL5b7eFApCW9KSM4OqSuGVcN4Vgtsxprc+ZHUVqD+sRy+SptH8fBHaS7/00be
4MQv3wFE00HFjYq/DmD4KCapc3pXVU0LNRCL0jVfKzW3thipDCfgTLmbRQl7ONSX
GYj8K7s93cjhB10h6nDaqz7Qh0vw9Uhqss1N1xsxdwNODQ6AkZ+T8ev0YrVwZNP3
aGDix8jc7C00Xi98uElqCaGB+gUNRjYIk79aCvFgscvOb1ZB7Y8eEJ0t/SczesK6
0uewsOxgFBU/3ffAH2ltHpxNBAsU5OU2dvTeiQ/ZGESTHTFUVCso5dd6pOnFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUVLrWj9lIm+T7RV/CCU8QCSK8NYYwHwYDVR0j
BBgwFoAUS6C7OwtBwZns4MBSXsVFwpp+cl0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWZMcVYyWURyMnJTazEyOHVOaEJLejh2MlJiMUFYbnZKY0VLM2pyVTNn
bWUvMC80QkEwQkIzQjBCNDFDMTk5RUNFMEMwNTI1RUM1NDVDMjlBN0U3MjVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCQTBCQjNCMEI0MUMxOTlF
Q0UwQzA1MjVFQzU0NUMyOUE3RTcyNUQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlmTHFWMllEcjJyU2sxMjh1TmhCS3o4djJSYjFBWG52SmNFSzNqclUzZ21lLzAv
MzEzMzM4MmUzMjM1MzUyZTM2MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzOTM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACK/0AwDQYJKoZIhvcNAQELBQADggEBACDczT7k
PfkSm1+2yhztiooAFje+BQ4MXD3K8lB6neqw3benx0o8r6LDL2MxvEFNfmLGEn0D
1Rz/IHS6o+vyKYn+XnIVy7Cjb7B5w0lm0zhnT0Cc519IyOv0o7GxHxNEmb/pApGD
6i5BP/Xah3Aj8a/HEewgFpYqNV7Td0lakh/Go67s+8+sJV3ePNtQ35gS/oO9sK2A
gFB117aIrsoHRRDRAxN4ki20o1lvSNvFMGHIVWjXUYHbiRNDzRxl6Ps3CNHhh6v/
gzVt4YwQI7ya8a6GhW1IhtJ1c683UyDKm7RxJVlt9ZtbT2E2rMFteDNt0kwONheG
06nnsRk8QBQbBik=
-----END CERTIFICATE-----
Generated at Wed Nov 4 16:39:43 2026 by rpki-client