Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/3/3133382e3231392e3230342e302f32322d3232203d3e20323632363439.roa
File:                     3133382e3231392e3230342e302f32322d3232203d3e20323632363439.roa (raw, json)
Hash identifier:          NHk/STBoHJTLl196RSLGoak1bBUUNazSXKENOx3qt80=
Subject key identifier:   DA:B7:8C:58:06:68:D1:CC:AB:35:47:2D:8E:69:B4:EE:84:49:08:AF
Certificate issuer:       /CN=B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8
Certificate serial:       4F903FA931271C4895A9B625FAA5FF2F1C888F58
Authority key identifier: B9:2F:5B:16:D8:2D:9F:6A:2A:1E:EA:0D:BB:8A:B0:1E:90:47:2A:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/3/3133382e3231392e3230342e302f32322d3232203d3e20323632363439.roa
Signing time:             Tue 28 Jul 2026 13:38:15 +0000
ROA not before:           Tue 28 Jul 2026 13:33:15 +0000
ROA not after:            Tue 27 Jul 2027 13:38:15 +0000
asID:                     262649
IP address blocks:        138.219.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/3/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.crl
                          rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/3/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:90:3f:a9:31:27:1c:48:95:a9:b6:25:fa:a5:ff:2f:1c:88:8f:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8
        Validity
            Not Before: Jul 28 13:33:15 2026 GMT
            Not After : Jul 27 13:38:15 2027 GMT
        Subject: CN=DAB78C580668D1CCAB35472D8E69B4EE844908AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f6:40:e6:af:20:d1:e2:00:d1:59:aa:ad:2b:
                    34:1f:28:b8:37:b1:d7:d3:b6:0f:ce:d6:32:30:78:
                    56:9e:30:f9:8e:73:b8:49:14:6a:dc:02:da:b6:6a:
                    80:2b:fe:b3:e4:e3:9a:9e:23:2c:58:0e:96:72:24:
                    e1:e3:cb:14:d1:96:a1:4b:85:f1:d9:9d:ee:21:61:
                    35:6d:e7:d9:fe:1b:10:4b:be:ec:e5:57:5f:98:6b:
                    62:53:4f:65:39:1c:28:e1:2e:0f:51:c5:aa:79:8e:
                    24:3c:51:5e:20:52:32:0b:a4:f3:e3:03:b7:a9:26:
                    b8:2c:2e:b3:09:2e:67:24:84:e2:d0:30:fe:58:d9:
                    04:b7:06:68:c2:25:1a:56:cb:cb:d8:a8:e2:90:aa:
                    f4:02:09:7c:fb:42:64:77:a0:c3:06:3b:cd:c3:87:
                    70:5f:d9:8e:13:00:e6:16:62:2e:a0:41:5d:60:96:
                    3c:a3:a0:8d:61:fc:fd:59:70:2b:a4:11:87:1b:ed:
                    02:c9:4c:95:f3:eb:3f:95:c2:d3:37:f9:3b:fe:6c:
                    87:62:08:8e:21:55:71:7e:cf:cc:fd:29:f9:96:82:
                    d3:8e:d7:3d:c3:c4:0f:a0:03:ed:16:6f:57:b5:e7:
                    82:2c:5a:54:5a:49:7d:e7:0a:d2:e7:d9:9e:39:87:
                    e9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:B7:8C:58:06:68:D1:CC:AB:35:47:2D:8E:69:B4:EE:84:49:08:AF
            X509v3 Authority Key Identifier:
                keyid:B9:2F:5B:16:D8:2D:9F:6A:2A:1E:EA:0D:BB:8A:B0:1E:90:47:2A:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/3/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/3/3133382e3231392e3230342e302f32322d3232203d3e20323632363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:8e:12:91:a6:8a:de:62:bc:29:d3:da:2a:8c:6f:45:1c:31:
         00:7e:e8:5b:1d:52:73:ff:bd:39:cf:cf:cb:d3:27:48:f4:1e:
         7c:c0:ac:e5:e1:2c:89:5f:05:ba:03:5a:53:59:db:93:bb:6c:
         86:4c:95:cb:ec:8b:14:2a:d5:83:88:2b:96:a6:e1:68:3c:ff:
         87:d6:be:c7:10:87:c9:0f:f1:fa:d9:05:aa:49:76:9d:8c:61:
         2c:b2:77:b5:55:52:46:2a:85:38:81:c7:b3:d2:3f:8e:13:4c:
         92:7e:73:bd:74:9a:4e:03:10:a8:50:d2:b9:18:17:33:2a:33:
         f2:15:14:e9:24:d7:fd:37:db:76:c1:6e:19:c7:74:9d:2c:e7:
         a8:49:56:95:af:fc:66:25:5d:b9:2d:19:06:fc:81:04:78:5c:
         a0:e0:a5:b3:f5:be:d8:7e:aa:20:cb:1e:37:49:eb:41:ad:72:
         3a:5d:f5:77:a1:84:51:90:27:f9:7b:b6:54:73:16:87:fd:04:
         73:12:1f:31:d3:a7:d5:e4:56:70:02:f8:17:d0:b6:b3:28:2f:
         18:aa:30:a2:3e:aa:eb:18:47:b1:c4:63:07:42:c5:98:7b:95:
         fc:71:7a:b4:43:36:43:80:f3:0a:8d:40:45:5b:63:27:2e:bc:
         1a:33:06:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----