Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/3133382e3235352e3233302e302f32342d3234203d3e20323633393935.roa
File:                     3133382e3235352e3233302e302f32342d3234203d3e20323633393935.roa (raw, json)
Hash identifier:          XZslPXGl0yaz+fxVjG4hAjEGx1kTsv7YMGP28ueTS0g=
Subject key identifier:   E6:01:AB:39:07:6C:5B:10:4F:45:98:65:C9:DF:08:1D:79:AE:71:5D
Certificate issuer:       /CN=CD30FB6CA9E66CC73CD7C3ACF9F01E4055FC367E
Certificate serial:       20E73DF4D341A571E0BD0CE41498B5AC6F2D68BB
Authority key identifier: CD:30:FB:6C:A9:E6:6C:C7:3C:D7:C3:AC:F9:F0:1E:40:55:FC:36:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD30FB6CA9E66CC73CD7C3ACF9F01E4055FC367E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/3133382e3235352e3233302e302f32342d3234203d3e20323633393935.roa
Signing time:             Sat 26 Sep 2026 14:34:20 +0000
ROA not before:           Sat 26 Sep 2026 14:29:20 +0000
ROA not after:            Sat 25 Sep 2027 14:34:20 +0000
asID:                     263995
IP address blocks:        138.255.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/CD30FB6CA9E66CC73CD7C3ACF9F01E4055FC367E.crl
                          rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/CD30FB6CA9E66CC73CD7C3ACF9F01E4055FC367E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD30FB6CA9E66CC73CD7C3ACF9F01E4055FC367E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 16:04:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:e7:3d:f4:d3:41:a5:71:e0:bd:0c:e4:14:98:b5:ac:6f:2d:68:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD30FB6CA9E66CC73CD7C3ACF9F01E4055FC367E
        Validity
            Not Before: Sep 26 14:29:20 2026 GMT
            Not After : Sep 25 14:34:20 2027 GMT
        Subject: CN=E601AB39076C5B104F459865C9DF081D79AE715D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:80:8f:13:4e:bc:68:db:1f:21:a9:c9:30:ba:
                    5a:5f:98:cb:c0:c2:f2:ee:c5:d6:ba:a2:93:6c:fa:
                    b8:5e:4d:b1:62:e7:f8:cd:f5:44:ef:0e:22:3a:af:
                    59:c4:bb:a0:36:71:8a:7b:5c:dc:4a:ae:75:fb:b9:
                    16:8d:4e:4e:d0:92:81:79:d6:b8:90:47:29:a1:c2:
                    61:31:06:2c:c0:96:2e:19:dd:7c:f1:f6:b7:7f:66:
                    88:ab:f8:8e:10:02:26:63:ec:a9:7c:b4:8f:3f:57:
                    50:5c:6a:60:cd:00:f5:1d:ac:0a:e7:25:5b:ed:32:
                    09:4e:01:08:04:52:38:ce:26:ae:ae:e2:ec:a9:89:
                    c2:e8:c1:2b:29:0b:89:c0:40:7e:61:ff:fe:81:4d:
                    d3:7f:33:fa:8a:0a:d4:eb:3e:d5:68:71:57:e9:f6:
                    6c:ef:44:44:1b:5d:a1:45:03:0a:50:82:77:0c:4c:
                    29:3b:a6:07:65:46:e9:06:3b:dc:66:72:2f:5e:58:
                    eb:59:06:3e:c0:0d:3c:59:ba:78:ae:c2:12:fa:41:
                    e5:83:eb:de:15:ef:6c:20:41:4e:86:a3:b4:2e:5b:
                    34:a9:f9:de:57:9d:8f:83:88:d1:61:3c:9e:c0:d3:
                    72:dd:fe:b7:35:64:7c:a7:89:3c:a8:b4:83:ae:b9:
                    ea:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:01:AB:39:07:6C:5B:10:4F:45:98:65:C9:DF:08:1D:79:AE:71:5D
            X509v3 Authority Key Identifier:
                keyid:CD:30:FB:6C:A9:E6:6C:C7:3C:D7:C3:AC:F9:F0:1E:40:55:FC:36:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/CD30FB6CA9E66CC73CD7C3ACF9F01E4055FC367E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD30FB6CA9E66CC73CD7C3ACF9F01E4055FC367E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/3133382e3235352e3233302e302f32342d3234203d3e20323633393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:16:72:b4:d1:22:82:57:7b:ae:79:90:67:ee:14:59:63:bb:
         21:22:7d:f0:10:cd:3d:c6:c0:ef:b1:74:eb:33:06:cc:43:32:
         c8:1b:59:c5:b6:b5:12:36:40:a1:46:d3:1f:b2:4f:95:f1:ab:
         38:ce:d8:05:de:eb:c1:a4:85:b4:d8:2d:14:3b:ae:31:b2:3f:
         35:d9:62:44:52:3c:72:c7:ca:e9:1f:21:97:f4:cb:b6:01:cf:
         dd:4c:bd:c7:9b:5d:74:89:34:cf:52:c8:93:53:9c:0b:92:b9:
         1d:77:42:2f:35:02:19:14:4a:52:1e:b7:bc:26:96:a9:97:2f:
         50:06:06:9b:50:9f:ca:c1:f2:cc:c9:97:3a:69:79:1e:15:da:
         5f:3e:0d:f3:c8:13:6c:f6:51:90:ac:c4:10:e1:8c:3e:60:1a:
         48:bd:3a:9f:26:6a:b3:d8:c2:71:1f:5a:5c:ee:d6:b5:da:75:
         de:6e:40:99:0e:89:b5:62:d7:15:a2:cf:31:49:08:18:30:e7:
         c8:cb:c9:bf:db:0b:8a:59:76:fc:04:7f:be:39:0c:ba:55:ec:
         11:48:cd:cd:cf:59:5b:ef:bb:9a:9b:ef:b1:6c:79:e0:c4:65:
         ae:b4:2e:c4:c8:42:98:b7:a3:af:a6:a4:77:9e:eb:77:8f:e2:
         22:87:61:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 16:28:17 2026 by rpki-client