Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/3133382e3230342e36382e302f32322d3234203d3e20323633383830.roa
File:                     3133382e3230342e36382e302f32322d3234203d3e20323633383830.roa (raw, json)
Hash identifier:          LtAc0Hruzk4g8SDc9RiXtJ0CEYtXVQkNSd57BgqRvqw=
Subject key identifier:   EC:C2:BB:45:15:32:FC:5A:AB:38:3B:5C:DE:1F:41:75:C1:58:14:00
Certificate issuer:       /CN=605F3702CE23BBC04859766117DBC4F04EC8F430
Certificate serial:       6134965A44E61A1A9D94B57B9811EE6E2A139195
Authority key identifier: 60:5F:37:02:CE:23:BB:C0:48:59:76:61:17:DB:C4:F0:4E:C8:F4:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605F3702CE23BBC04859766117DBC4F04EC8F430.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/3133382e3230342e36382e302f32322d3234203d3e20323633383830.roa
Signing time:             Mon 21 Sep 2026 19:48:51 +0000
ROA not before:           Mon 21 Sep 2026 19:43:51 +0000
ROA not after:            Mon 20 Sep 2027 19:48:51 +0000
asID:                     263880
IP address blocks:        138.204.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/605F3702CE23BBC04859766117DBC4F04EC8F430.crl
                          rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/605F3702CE23BBC04859766117DBC4F04EC8F430.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605F3702CE23BBC04859766117DBC4F04EC8F430.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 18:48:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:34:96:5a:44:e6:1a:1a:9d:94:b5:7b:98:11:ee:6e:2a:13:91:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605F3702CE23BBC04859766117DBC4F04EC8F430
        Validity
            Not Before: Sep 21 19:43:51 2026 GMT
            Not After : Sep 20 19:48:51 2027 GMT
        Subject: CN=ECC2BB451532FC5AAB383B5CDE1F4175C1581400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c2:87:df:40:84:cb:00:a0:4a:42:2d:df:a9:
                    50:1a:b5:26:dd:ce:de:b5:3d:ec:5e:1d:49:65:90:
                    26:85:00:b1:9b:03:e6:3b:dd:b0:db:43:d4:75:75:
                    d7:29:db:57:0f:1d:68:8a:0f:db:5c:99:f8:fe:aa:
                    2e:d6:77:ab:14:f3:d2:64:5e:77:1f:a9:cd:4b:cd:
                    94:a1:ca:b6:a0:78:c6:ef:f5:80:07:dd:2d:df:c9:
                    2c:9b:03:1e:89:34:57:e5:18:b3:76:e4:9c:9c:2b:
                    59:f9:4c:d1:2e:ca:4e:82:4f:97:d9:ec:67:65:80:
                    a6:58:84:59:e6:da:37:f1:cc:c3:ab:82:55:0d:ec:
                    8e:cd:e1:c1:19:aa:32:3e:5b:d5:0a:6c:3a:cc:50:
                    ea:58:3b:eb:ee:ff:2c:e6:53:11:53:49:fe:35:df:
                    2e:73:bd:48:7b:cb:34:be:e6:41:60:21:14:a0:66:
                    df:e0:ca:57:55:f2:1d:f3:d7:e0:6a:8b:76:90:bc:
                    d8:b9:e1:0c:95:d6:84:36:1f:99:f0:61:6d:94:75:
                    0a:0d:f0:d1:82:6b:d2:23:23:da:1a:57:b2:b5:9e:
                    0b:03:98:43:f8:ab:70:ba:64:3e:27:3e:b1:57:3a:
                    57:a8:09:a3:8e:66:d2:73:ad:22:8c:79:5f:5f:04:
                    3d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C2:BB:45:15:32:FC:5A:AB:38:3B:5C:DE:1F:41:75:C1:58:14:00
            X509v3 Authority Key Identifier:
                keyid:60:5F:37:02:CE:23:BB:C0:48:59:76:61:17:DB:C4:F0:4E:C8:F4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/605F3702CE23BBC04859766117DBC4F04EC8F430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605F3702CE23BBC04859766117DBC4F04EC8F430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/3133382e3230342e36382e302f32322d3234203d3e20323633383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:a6:b8:9b:99:10:b1:b1:07:14:c7:5f:2b:85:24:ed:dd:83:
         7b:08:33:38:7a:b2:c6:8f:ad:a6:8a:90:d9:be:8f:70:95:f3:
         3b:4d:ab:b9:ff:c8:30:29:ab:18:13:fa:d4:e0:cc:cd:bb:99:
         4a:6c:cd:1e:84:48:90:dd:21:f0:75:e1:ed:cb:6e:b0:3f:71:
         31:ac:71:89:26:b1:00:b1:82:4b:57:57:99:dd:d7:2d:1c:1e:
         d0:12:78:8c:d6:7e:d0:e9:76:71:3c:47:f5:af:46:3e:20:76:
         f4:d0:9a:81:db:4e:fd:85:98:df:c7:6b:fe:5e:9d:f0:6c:35:
         e1:61:22:12:4b:b0:33:fa:64:af:f6:5a:a7:32:4d:04:09:74:
         2f:ec:f9:ba:a6:a0:af:bb:91:23:b1:3a:f5:15:a6:fc:83:f5:
         79:36:a9:50:66:9e:b9:89:a5:bb:07:a5:7c:bc:b3:11:e7:a9:
         16:d6:5c:52:3e:2c:07:ed:56:a1:10:df:15:34:ee:dd:a5:f1:
         72:89:e5:88:3e:f2:10:ee:77:f9:d5:f1:3c:db:d1:29:ee:0c:
         6a:89:e2:20:05:26:9d:99:d4:4e:3e:9d:30:3d:e1:c4:fc:b6:
         95:8f:df:9a:b8:7a:15:cf:50:9a:85:25:c3:cc:7f:37:88:87:
         e1:d3:eb:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----