Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3133382e3230342e3234302e302f32322d3332203d3e20323633393133.roa
File:                     3133382e3230342e3234302e302f32322d3332203d3e20323633393133.roa (raw, json)
Hash identifier:          YEgoW2Nx7DRvYyuGU5rP1huCFJSEyOFgiTMvCoBeEiA=
Subject key identifier:   FE:7E:47:22:DF:6E:FC:98:54:95:D6:B6:4E:BD:FE:6B:02:F0:AC:5C
Certificate issuer:       /CN=EC28538427BF2A4CA218209DB9A2008B4E587ABA
Certificate serial:       178A61F5EB7DC1E0826BC40D7E4C60C6ED1C875C
Authority key identifier: EC:28:53:84:27:BF:2A:4C:A2:18:20:9D:B9:A2:00:8B:4E:58:7A:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC28538427BF2A4CA218209DB9A2008B4E587ABA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3133382e3230342e3234302e302f32322d3332203d3e20323633393133.roa
Signing time:             Wed 23 Sep 2026 18:28:47 +0000
ROA not before:           Wed 23 Sep 2026 18:23:47 +0000
ROA not after:            Wed 22 Sep 2027 18:28:47 +0000
asID:                     263913
IP address blocks:        138.204.240.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/EC28538427BF2A4CA218209DB9A2008B4E587ABA.crl
                          rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/EC28538427BF2A4CA218209DB9A2008B4E587ABA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC28538427BF2A4CA218209DB9A2008B4E587ABA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 20:34:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:8a:61:f5:eb:7d:c1:e0:82:6b:c4:0d:7e:4c:60:c6:ed:1c:87:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC28538427BF2A4CA218209DB9A2008B4E587ABA
        Validity
            Not Before: Sep 23 18:23:47 2026 GMT
            Not After : Sep 22 18:28:47 2027 GMT
        Subject: CN=FE7E4722DF6EFC985495D6B64EBDFE6B02F0AC5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0c:fb:93:b5:14:33:e3:fb:84:d7:b8:96:95:
                    8b:ea:64:d7:05:16:b7:78:67:e3:16:2c:bd:fe:83:
                    16:52:22:1c:dc:41:1c:31:ad:8f:1b:0e:57:2d:e5:
                    0c:54:51:19:eb:9e:49:b7:22:b0:3d:1b:43:fe:5e:
                    f3:28:da:38:9e:c8:18:d7:87:d6:9a:86:fa:95:ff:
                    4b:76:f1:af:79:17:6f:72:b8:83:a7:67:d1:c0:b9:
                    e3:30:13:fe:52:bb:d0:12:37:16:5f:7f:b0:43:27:
                    1f:ea:fb:17:30:7c:03:b4:88:be:ef:b5:a2:82:31:
                    a6:8f:11:33:d8:de:03:3f:41:1e:91:e2:99:21:6f:
                    86:39:01:98:e7:38:fb:95:dc:22:ff:b0:91:c5:3d:
                    47:48:05:a7:e1:54:ca:07:dc:aa:e2:97:46:53:c7:
                    dd:6f:7c:18:6c:b5:52:81:56:87:89:23:b0:4a:54:
                    79:97:2a:84:67:65:c6:e2:94:98:2a:7a:83:34:19:
                    13:d2:f7:cf:3a:ca:73:01:7f:94:56:6c:98:33:08:
                    b6:0d:7f:64:26:ef:f2:3a:c9:f6:05:5f:76:52:c7:
                    4a:7a:f1:d8:29:4a:f0:c4:b3:f4:e8:26:cc:dd:56:
                    02:3a:4e:2a:e7:13:16:ce:ee:bd:f3:bd:07:f8:d2:
                    5e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:7E:47:22:DF:6E:FC:98:54:95:D6:B6:4E:BD:FE:6B:02:F0:AC:5C
            X509v3 Authority Key Identifier:
                keyid:EC:28:53:84:27:BF:2A:4C:A2:18:20:9D:B9:A2:00:8B:4E:58:7A:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/EC28538427BF2A4CA218209DB9A2008B4E587ABA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC28538427BF2A4CA218209DB9A2008B4E587ABA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3133382e3230342e3234302e302f32322d3332203d3e20323633393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:e8:80:ad:15:7d:e2:0f:9a:77:42:55:51:26:e0:75:0f:5d:
         a0:b2:be:43:05:19:f4:8f:6c:21:ea:68:03:dc:ea:79:d3:ca:
         a5:bb:5d:d5:40:d8:6f:e4:54:36:6d:36:54:c1:3d:b1:86:f2:
         f5:d1:69:b8:0a:ce:96:76:32:c7:5e:a4:24:47:a5:9c:fa:55:
         ba:c0:19:d1:12:04:0f:da:dd:33:ba:5c:e9:00:5d:18:76:46:
         54:92:c4:bb:33:1e:24:9a:fb:19:d8:1a:0c:51:d8:dc:01:34:
         9c:86:59:72:85:d6:6d:91:42:53:34:d1:d6:03:b2:37:b6:78:
         06:53:9d:02:0b:f4:ab:04:35:0d:c0:68:0c:bf:06:3b:cf:d9:
         23:0b:ad:a5:f6:5b:e5:90:a9:13:f5:d2:28:6c:29:fe:3b:98:
         1f:36:6e:47:63:0a:86:92:5f:f0:e5:03:a3:c4:e3:f8:59:98:
         17:3e:c2:46:0a:7c:d5:a2:dc:90:58:c2:28:01:99:b1:57:19:
         ee:3a:a4:a1:20:fe:7f:6a:50:59:c6:04:15:bc:87:16:7e:75:
         c9:25:df:9c:16:70:98:3c:a9:91:61:8c:65:0c:1a:4a:63:36:
         27:74:ff:40:0b:8b:45:49:02:6f:95:f6:40:78:32:25:14:0b:
         64:53:b3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 02:42:06 2026 by rpki-client