Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/3133382e3138352e3136382e302f32322d3234203d3e203238313837.roa
File:                     3133382e3138352e3136382e302f32322d3234203d3e203238313837.roa (raw, json)
Hash identifier:          tqbGGs/A06/k8COcdhAWX5UaPzDRpHFPuszQDryrgLM=
Subject key identifier:   90:92:4E:AD:BD:46:BA:B0:A7:4D:8C:27:A2:7B:FF:35:FC:AD:68:51
Certificate issuer:       /CN=640539F45452C2299C340AFF511D40CB7EEAA212
Certificate serial:       4A732686461DCA9C03AF6839BA4E571F60FCF1D6
Authority key identifier: 64:05:39:F4:54:52:C2:29:9C:34:0A:FF:51:1D:40:CB:7E:EA:A2:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/640539F45452C2299C340AFF511D40CB7EEAA212.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/3133382e3138352e3136382e302f32322d3234203d3e203238313837.roa
Signing time:             Fri 19 Jun 2026 19:31:10 +0000
ROA not before:           Fri 19 Jun 2026 19:26:10 +0000
ROA not after:            Fri 18 Jun 2027 19:31:10 +0000
asID:                     28187
IP address blocks:        138.185.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/640539F45452C2299C340AFF511D40CB7EEAA212.crl
                          rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/640539F45452C2299C340AFF511D40CB7EEAA212.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/640539F45452C2299C340AFF511D40CB7EEAA212.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 17:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:73:26:86:46:1d:ca:9c:03:af:68:39:ba:4e:57:1f:60:fc:f1:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=640539F45452C2299C340AFF511D40CB7EEAA212
        Validity
            Not Before: Jun 19 19:26:10 2026 GMT
            Not After : Jun 18 19:31:10 2027 GMT
        Subject: CN=90924EADBD46BAB0A74D8C27A27BFF35FCAD6851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:28:e1:c2:e6:0a:b1:2f:2c:24:a1:da:ee:94:
                    2c:03:5f:de:32:db:02:a1:99:d5:19:4e:db:e3:b9:
                    a9:8a:cb:38:0b:e3:7a:7e:e1:af:0b:34:48:28:a2:
                    d3:0b:4f:0c:34:9d:51:77:20:2e:16:6e:30:d2:0c:
                    bf:03:4b:db:2a:bf:a5:d7:d9:21:ff:ae:ad:3a:bc:
                    a5:7e:07:86:36:0b:0d:de:4a:56:ec:52:2a:8b:19:
                    7a:c5:c5:f6:db:43:5f:ae:64:01:0c:8b:fe:90:1b:
                    3f:46:f3:6c:a1:bf:7c:9e:3a:e0:35:5b:bd:1c:bb:
                    88:64:53:13:3c:9c:0a:42:1e:bf:1c:6f:1c:0a:1d:
                    75:67:78:7b:9c:16:20:83:50:f3:bc:57:bc:c7:92:
                    c0:80:4f:34:14:85:91:12:b3:25:da:15:0f:f1:0e:
                    5d:6b:ca:0e:b2:f5:e3:ba:fd:21:b1:63:2a:97:ae:
                    6b:43:cf:6c:a3:29:97:a3:2b:02:24:bb:5b:1c:5b:
                    40:c3:27:f0:79:2e:2c:51:44:60:9b:a2:32:8d:d6:
                    5a:01:d4:dc:da:cd:d1:cc:82:6b:93:3b:60:a3:5c:
                    31:94:ce:28:a6:1b:1d:e2:02:f3:14:ac:af:60:91:
                    8d:03:eb:03:36:6d:3a:63:c0:cc:71:c6:28:17:a6:
                    ff:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:92:4E:AD:BD:46:BA:B0:A7:4D:8C:27:A2:7B:FF:35:FC:AD:68:51
            X509v3 Authority Key Identifier:
                keyid:64:05:39:F4:54:52:C2:29:9C:34:0A:FF:51:1D:40:CB:7E:EA:A2:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/640539F45452C2299C340AFF511D40CB7EEAA212.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/640539F45452C2299C340AFF511D40CB7EEAA212.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/3133382e3138352e3136382e302f32322d3234203d3e203238313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:25:07:24:fd:4f:e5:ef:1c:71:48:b7:8d:b8:cd:5c:3c:0d:
         b3:ea:11:19:a8:b0:f5:f8:92:db:49:77:ba:b6:43:df:c5:0f:
         27:db:2a:ae:a5:4a:96:85:d1:66:2c:93:6c:8a:5f:d2:50:5f:
         67:ec:fc:4a:9f:98:76:ed:b9:bb:0d:c5:ed:a3:cf:c2:2f:16:
         40:a6:4a:52:e1:30:9d:c6:47:af:12:39:65:41:dd:47:03:ec:
         fc:09:d8:9e:a6:e8:af:0b:9b:a1:19:9d:c4:79:2b:35:37:bd:
         db:92:92:e9:47:59:3c:f5:54:cb:fb:8b:65:60:44:02:d3:9a:
         1c:f6:b2:6f:df:8c:ba:ac:3b:8a:1e:89:0b:24:b3:b0:fd:87:
         80:04:5a:9c:13:50:5e:37:85:84:a1:96:7f:da:d8:82:3c:a3:
         92:16:82:47:84:b8:81:71:7b:f0:64:00:30:9c:f7:86:d8:25:
         82:ab:37:61:9b:77:a0:54:56:35:bd:bc:fc:a4:7c:3f:c5:f5:
         95:da:4a:11:88:d1:9d:7c:63:91:01:77:0c:96:62:5e:e6:a8:
         5d:58:f5:e3:59:76:56:36:f4:9c:e4:84:4d:24:57:38:7a:d0:
         5c:63:36:95:40:3f:37:71:16:c8:35:e5:a5:cb:dc:00:b2:ab:
         29:e5:4f:03
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUSnMmhkYdypwDr2g5uk5XH2D88dYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQwNTM5RjQ1NDUyQzIyOTlDMzQwQUZGNTExRDQwQ0I3
RUVBQTIxMjAeFw0yNjA2MTkxOTI2MTBaFw0yNzA2MTgxOTMxMTBaMDMxMTAvBgNV
BAMTKDkwOTI0RUFEQkQ0NkJBQjBBNzREOEMyN0EyN0JGRjM1RkNBRDY4NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVKOHC5gqxLywkodrulCwDX94y
2wKhmdUZTtvjuamKyzgL43p+4a8LNEgootMLTww0nVF3IC4WbjDSDL8DS9sqv6XX
2SH/rq06vKV+B4Y2Cw3eSlbsUiqLGXrFxfbbQ1+uZAEMi/6QGz9G82yhv3yeOuA1
W70cu4hkUxM8nApCHr8cbxwKHXVneHucFiCDUPO8V7zHksCATzQUhZESsyXaFQ/x
Dl1ryg6y9eO6/SGxYyqXrmtDz2yjKZejKwIku1scW0DDJ/B5LixRRGCbojKN1loB
1NzazdHMgmuTO2CjXDGUziimGx3iAvMUrK9gkY0D6wM2bTpjwMxxxigXpv/dAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUkJJOrb1GurCnTYwnonv/NfytaFEwHwYDVR0j
BBgwFoAUZAU59FRSwimcNAr/UR1Ay37qohIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRENOdmVqMWE4cjJSUTNrWjVwV1dDc29iMlJuNE1xWXVCSEtkN0FQOThi
RDYvMC82NDA1MzlGNDU0NTJDMjI5OUMzNDBBRkY1MTFENDBDQjdFRUFBMjEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY0MDUzOUY0NTQ1MkMyMjk5
QzM0MEFGRjUxMUQ0MENCN0VFQUEyMTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RDTnZlajFhOHIyUlEza1o1cFdXQ3NvYjJSbjRNcVl1QkhLZDdBUDk4YkQ2LzAv
MzEzMzM4MmUzMTM4MzUyZTMxMzYzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzgzMTM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKuagwDQYJKoZIhvcNAQELBQADggEBAI0lByT9
T+XvHHFIt424zVw8DbPqERmosPX4kttJd7q2Q9/FDyfbKq6lSpaF0WYsk2yKX9JQ
X2fs/EqfmHbtubsNxe2jz8IvFkCmSlLhMJ3GR68SOWVB3UcD7PwJ2J6m6K8Lm6EZ
ncR5KzU3vduSkulHWTz1VMv7i2VgRALTmhz2sm/fjLqsO4oeiQsks7D9h4AEWpwT
UF43hYShln/a2II8o5IWgkeEuIFxe/BkADCc94bYJYKrN2Gbd6BUVjW9vPykfD/F
9ZXaShGI0Z18Y5EBdwyWYl7mqF1Y9eNZdlY29JzkhE0kVzh60FxjNpVAPzdxFsg1
5aXL3ACyqynlTwM=
-----END CERTIFICATE-----
Generated at Wed Jul 8 18:06:08 2026 by rpki-client