Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/D2JQbiYvFJjCoG6bQk4qUNAoS4aSdexiJ3XHsiXgEq2u/0/3133382e3132322e3231362e302f32322d3332203d3e20323632333632.roa
File:                     3133382e3132322e3231362e302f32322d3332203d3e20323632333632.roa (raw, json)
Hash identifier:          w344D/ARI6Rj5llLvKt4C5E2Ht+yS1VYhl/p+3+CTOE=
Subject key identifier:   6C:7B:45:BA:17:93:D6:A3:C2:C0:39:AE:9E:BC:E3:52:48:0B:7D:E0
Certificate issuer:       /CN=E56BC148F24881D384850951C8DAD271E8EC9541
Certificate serial:       3DA37F7BFE255499610F3431F3D2D71C89343B72
Authority key identifier: E5:6B:C1:48:F2:48:81:D3:84:85:09:51:C8:DA:D2:71:E8:EC:95:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E56BC148F24881D384850951C8DAD271E8EC9541.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2JQbiYvFJjCoG6bQk4qUNAoS4aSdexiJ3XHsiXgEq2u/0/3133382e3132322e3231362e302f32322d3332203d3e20323632333632.roa
Signing time:             Fri 14 Aug 2026 19:48:45 +0000
ROA not before:           Fri 14 Aug 2026 19:43:45 +0000
ROA not after:            Fri 13 Aug 2027 19:48:45 +0000
asID:                     262362
IP address blocks:        138.122.216.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D2JQbiYvFJjCoG6bQk4qUNAoS4aSdexiJ3XHsiXgEq2u/0/E56BC148F24881D384850951C8DAD271E8EC9541.crl
                          rsync://rpki-repo.registro.br/repo/D2JQbiYvFJjCoG6bQk4qUNAoS4aSdexiJ3XHsiXgEq2u/0/E56BC148F24881D384850951C8DAD271E8EC9541.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E56BC148F24881D384850951C8DAD271E8EC9541.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 02:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:a3:7f:7b:fe:25:54:99:61:0f:34:31:f3:d2:d7:1c:89:34:3b:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E56BC148F24881D384850951C8DAD271E8EC9541
        Validity
            Not Before: Aug 14 19:43:45 2026 GMT
            Not After : Aug 13 19:48:45 2027 GMT
        Subject: CN=6C7B45BA1793D6A3C2C039AE9EBCE352480B7DE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:08:a1:49:50:80:99:50:f3:de:9b:98:64:fc:
                    b0:b7:fd:c1:13:10:bc:80:0e:e0:90:db:58:41:8a:
                    0d:76:d2:55:b4:19:84:f3:dd:46:69:c4:de:b3:9e:
                    e8:fb:7e:f9:c2:bd:20:45:c5:bb:62:a0:16:4c:16:
                    ec:6f:0d:dc:ee:25:e3:2a:77:8a:c1:00:4d:a1:d7:
                    91:31:fb:72:24:1e:fd:d5:98:a8:aa:ca:72:ff:5c:
                    9b:cd:d5:50:ed:c3:8b:84:43:b8:9b:14:64:52:f8:
                    95:0d:84:22:c6:a5:91:2e:a6:8b:3e:3a:bc:93:7f:
                    b2:cf:cf:27:90:6b:ad:db:04:d9:2a:94:bc:df:41:
                    ac:10:2d:d8:69:f9:50:ba:ca:88:b9:2d:fd:9d:8d:
                    7d:68:f7:ab:10:d4:2d:22:40:67:28:18:56:a5:b1:
                    0f:98:f4:7e:25:49:02:61:de:74:de:55:f8:d7:f4:
                    78:39:ff:e2:e5:1f:2e:87:8d:cf:07:1a:5e:d6:fa:
                    d9:a5:97:ad:52:9a:19:f8:b8:a2:50:bb:c7:a1:9d:
                    ff:64:c2:20:7b:10:c5:9b:dd:ba:9a:33:6d:7a:d8:
                    bc:c0:91:20:a4:57:ee:c6:4e:59:48:9c:2d:63:0d:
                    3b:ad:89:52:dc:08:de:32:3b:7e:67:89:c9:79:48:
                    4a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:7B:45:BA:17:93:D6:A3:C2:C0:39:AE:9E:BC:E3:52:48:0B:7D:E0
            X509v3 Authority Key Identifier:
                keyid:E5:6B:C1:48:F2:48:81:D3:84:85:09:51:C8:DA:D2:71:E8:EC:95:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2JQbiYvFJjCoG6bQk4qUNAoS4aSdexiJ3XHsiXgEq2u/0/E56BC148F24881D384850951C8DAD271E8EC9541.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E56BC148F24881D384850951C8DAD271E8EC9541.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2JQbiYvFJjCoG6bQk4qUNAoS4aSdexiJ3XHsiXgEq2u/0/3133382e3132322e3231362e302f32322d3332203d3e20323632333632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:d1:d4:e8:1e:61:34:44:ad:53:16:4c:3d:83:e5:da:7c:b2:
         c5:99:f4:c0:02:2f:6c:9d:1a:28:ee:d7:55:19:cf:84:01:61:
         2c:7c:77:d3:de:db:92:00:41:9d:ec:a2:96:99:75:bb:1e:43:
         e6:5c:0c:bd:93:8b:18:00:e0:9d:c8:00:98:19:24:53:74:e2:
         9b:db:27:06:1c:c6:8a:1c:85:07:61:d0:f7:2e:ba:06:6c:e7:
         19:d0:aa:38:18:d0:97:8c:54:80:20:9f:ed:d8:21:51:de:51:
         15:1e:68:d1:ed:23:01:2f:6e:06:4d:c0:be:34:47:c4:dd:bc:
         c9:ab:1b:83:be:e8:ce:68:79:db:0d:8b:67:23:9a:c4:5a:35:
         c6:ba:e2:37:d5:fc:d6:bc:74:6f:46:58:37:31:99:3c:d5:58:
         94:bb:49:d5:a4:19:c9:aa:da:99:3d:cc:96:91:0d:32:7b:72:
         4d:88:45:bd:40:47:76:d3:4c:35:84:79:a3:7c:48:96:ba:13:
         a6:a4:21:4f:af:0c:d9:30:33:57:f0:23:60:58:6d:7d:72:e9:
         46:3f:88:fc:34:55:de:49:4e:c9:d4:4e:c9:7c:c1:61:60:93:
         db:c4:a9:a6:2b:b8:fc:01:77:3e:2b:f6:34:97:14:00:8e:7c:
         12:17:03:8a
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUPaN/e/4lVJlhDzQx89LXHIk0O3IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTU2QkMxNDhGMjQ4ODFEMzg0ODUwOTUxQzhEQUQyNzFF
OEVDOTU0MTAeFw0yNjA4MTQxOTQzNDVaFw0yNzA4MTMxOTQ4NDVaMDMxMTAvBgNV
BAMTKDZDN0I0NUJBMTc5M0Q2QTNDMkMwMzlBRTlFQkNFMzUyNDgwQjdERTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRCKFJUICZUPPem5hk/LC3/cET
ELyADuCQ21hBig120lW0GYTz3UZpxN6znuj7fvnCvSBFxbtioBZMFuxvDdzuJeMq
d4rBAE2h15Ex+3IkHv3VmKiqynL/XJvN1VDtw4uEQ7ibFGRS+JUNhCLGpZEupos+
OryTf7LPzyeQa63bBNkqlLzfQawQLdhp+VC6yoi5Lf2djX1o96sQ1C0iQGcoGFal
sQ+Y9H4lSQJh3nTeVfjX9Hg5/+LlHy6Hjc8HGl7W+tmll61Smhn4uKJQu8ehnf9k
wiB7EMWb3bqaM2162LzAkSCkV+7GTllInC1jDTutiVLcCN4yO35nicl5SEqdAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUbHtFuheT1qPCwDmunrzjUkgLfeAwHwYDVR0j
BBgwFoAU5WvBSPJIgdOEhQlRyNrScejslUEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDJKUWJpWXZGSmpDb0c2YlFrNHFVTkFvUzRhU2RleGlKM1hIc2lYZ0Vx
MnUvMC9FNTZCQzE0OEYyNDg4MUQzODQ4NTA5NTFDOERBRDI3MUU4RUM5NTQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U1NkJDMTQ4RjI0ODgxRDM4
NDg1MDk1MUM4REFEMjcxRThFQzk1NDEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QySlFiaVl2RkpqQ29HNmJRazRxVU5Bb1M0YVNkZXhpSjNYSHNpWGdFcTJ1LzAv
MzEzMzM4MmUzMTMyMzIyZTMyMzEzNjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzMjMzMzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAop62DANBgkqhkiG9w0BAQsFAAOCAQEAIdHU
6B5hNEStUxZMPYPl2nyyxZn0wAIvbJ0aKO7XVRnPhAFhLHx3097bkgBBneyilpl1
ux5D5lwMvZOLGADgncgAmBkkU3Tim9snBhzGihyFB2HQ9y66BmznGdCqOBjQl4xU
gCCf7dghUd5RFR5o0e0jAS9uBk3AvjRHxN28yasbg77ozmh52w2LZyOaxFo1xrri
N9X81rx0b0ZYNzGZPNVYlLtJ1aQZyaramT3MlpENMntyTYhFvUBHdtNMNYR5o3xI
lroTpqQhT68M2TAzV/AjYFhtfXLpRj+I/DRV3klOydROyXzBYWCT28Sppiu4/AF3
Piv2NJcUAI58EhcDig==
-----END CERTIFICATE-----
Generated at Mon Aug 24 04:03:25 2026 by rpki-client