Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/3133382e3235352e3136302e302f32342d3234203d3e20323633393735.roa
File:                     3133382e3235352e3136302e302f32342d3234203d3e20323633393735.roa (raw, json)
Hash identifier:          oUCYpu+MXH2XKtlmbPVxi/CYsuLLzaOOr7MirCpvW44=
Subject key identifier:   02:A6:F4:B3:A9:4A:CA:F8:80:B3:E6:98:87:8C:D1:EC:AE:8A:5D:1E
Certificate issuer:       /CN=D6274A390B48BA4705B9758D16F2C8FAB648BE56
Certificate serial:       57D060FB2C55C2D935D35CE899005FDA5E81FEA6
Authority key identifier: D6:27:4A:39:0B:48:BA:47:05:B9:75:8D:16:F2:C8:FA:B6:48:BE:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6274A390B48BA4705B9758D16F2C8FAB648BE56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/3133382e3235352e3136302e302f32342d3234203d3e20323633393735.roa
Signing time:             Mon 10 Aug 2026 20:32:06 +0000
ROA not before:           Mon 10 Aug 2026 20:27:06 +0000
ROA not after:            Mon 09 Aug 2027 20:32:06 +0000
asID:                     263975
IP address blocks:        138.255.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/D6274A390B48BA4705B9758D16F2C8FAB648BE56.crl
                          rsync://rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/D6274A390B48BA4705B9758D16F2C8FAB648BE56.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6274A390B48BA4705B9758D16F2C8FAB648BE56.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 21:23:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:d0:60:fb:2c:55:c2:d9:35:d3:5c:e8:99:00:5f:da:5e:81:fe:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6274A390B48BA4705B9758D16F2C8FAB648BE56
        Validity
            Not Before: Aug 10 20:27:06 2026 GMT
            Not After : Aug  9 20:32:06 2027 GMT
        Subject: CN=02A6F4B3A94ACAF880B3E698878CD1ECAE8A5D1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0a:c3:83:5c:cc:ae:ea:8d:a5:20:31:20:73:
                    a9:95:cd:73:30:8b:c8:93:bb:1e:6f:d3:f5:86:55:
                    7a:c6:84:f3:2d:4a:c7:0c:82:67:ed:6e:a2:00:db:
                    95:c4:a8:0d:34:69:13:5a:2a:5b:bf:5b:da:39:02:
                    33:8d:5a:cd:5d:8a:2e:c6:5b:7d:95:e4:79:9a:63:
                    33:b4:88:fe:d4:13:eb:b1:cf:79:50:f1:9e:a3:61:
                    7a:20:ed:f7:c4:8f:0a:07:3b:9c:18:4c:c2:8f:a0:
                    e9:a0:62:fe:1f:40:95:69:de:04:ed:8d:69:66:4a:
                    a6:d1:9c:10:fe:9b:86:4b:b6:d3:9f:d4:58:9c:d9:
                    c1:ca:7a:85:1e:36:f3:95:18:09:11:f1:34:81:73:
                    a2:19:da:df:f3:38:36:98:05:e2:61:78:0d:0d:20:
                    21:2b:2e:0d:24:24:e3:50:39:41:b2:69:49:b9:46:
                    14:45:54:90:0e:ae:7d:8d:69:a4:dc:19:ed:d5:4e:
                    09:06:1e:f4:f9:8a:c4:21:26:67:00:df:db:b2:ba:
                    f0:e6:38:94:96:18:e0:1a:11:bc:9d:8d:53:c1:ca:
                    30:98:e2:24:93:f1:42:c0:9f:94:e0:94:2a:16:95:
                    17:db:df:00:bd:a2:b9:fb:33:52:4c:27:62:58:ef:
                    06:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:A6:F4:B3:A9:4A:CA:F8:80:B3:E6:98:87:8C:D1:EC:AE:8A:5D:1E
            X509v3 Authority Key Identifier:
                keyid:D6:27:4A:39:0B:48:BA:47:05:B9:75:8D:16:F2:C8:FA:B6:48:BE:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/D6274A390B48BA4705B9758D16F2C8FAB648BE56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6274A390B48BA4705B9758D16F2C8FAB648BE56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/3133382e3235352e3136302e302f32342d3234203d3e20323633393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:6a:5f:7e:b8:6b:89:18:86:41:7b:21:e2:dd:9b:f0:cc:5e:
         95:a0:46:39:07:f1:6f:df:cc:d8:e9:2a:85:16:0c:c9:ee:8d:
         86:0e:88:79:a7:60:85:93:b8:43:02:22:f5:30:79:80:4c:d3:
         61:1c:81:35:c4:a8:c6:4b:fe:75:2a:1a:7a:cf:30:fd:87:b9:
         2d:2c:63:91:62:6f:80:7f:97:af:ea:b6:5b:a5:b6:04:a5:74:
         e9:0b:fe:14:66:b3:9e:ca:53:69:0d:21:e4:e5:68:c2:6b:52:
         48:ec:a4:5f:2d:87:f2:88:7a:23:3d:b5:2f:42:c3:38:bb:24:
         d5:0f:ed:57:83:d9:03:2a:3d:7b:4b:50:19:19:bc:bb:b1:51:
         59:4e:83:63:a7:b7:34:af:c4:3b:fe:fd:21:32:b7:b3:99:45:
         54:92:8c:7d:28:c9:52:6a:11:b4:d0:d2:4e:8f:a9:1d:a2:ab:
         5c:f5:9c:8c:37:97:6d:bf:fd:58:87:10:bb:d0:52:d8:be:45:
         72:91:4f:f5:55:61:ff:6f:15:95:ea:27:6a:d4:f8:68:ac:63:
         32:dd:65:fa:0e:e9:cd:76:71:d2:09:37:90:40:f1:d2:0e:dd:
         f9:f9:00:e3:91:fd:1f:93:76:71:ac:60:73:5b:a0:03:a2:c3:
         05:be:73:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 09:18:47 2026 by rpki-client