Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/3133382e3235352e3136322e302f32342d3234203d3e20323633393735.roa
File:                     3133382e3235352e3136322e302f32342d3234203d3e20323633393735.roa (raw, json)
Hash identifier:          BiKUHygHUoAr+z6nhf5UEcG4dYKTGNLJJNDoI2QfdQE=
Subject key identifier:   A4:8E:A3:99:05:D0:E8:FE:C4:C2:F2:8C:F8:9E:23:79:39:7F:7E:83
Certificate issuer:       /CN=D6274A390B48BA4705B9758D16F2C8FAB648BE56
Certificate serial:       762FCD82F4F58FCAFD05465D580F1950CA26DB89
Authority key identifier: D6:27:4A:39:0B:48:BA:47:05:B9:75:8D:16:F2:C8:FA:B6:48:BE:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6274A390B48BA4705B9758D16F2C8FAB648BE56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/3133382e3235352e3136322e302f32342d3234203d3e20323633393735.roa
Signing time:             Mon 10 Aug 2026 20:32:06 +0000
ROA not before:           Mon 10 Aug 2026 20:27:06 +0000
ROA not after:            Mon 09 Aug 2027 20:32:06 +0000
asID:                     263975
IP address blocks:        138.255.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/D6274A390B48BA4705B9758D16F2C8FAB648BE56.crl
                          rsync://rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/D6274A390B48BA4705B9758D16F2C8FAB648BE56.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6274A390B48BA4705B9758D16F2C8FAB648BE56.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 14:05:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:2f:cd:82:f4:f5:8f:ca:fd:05:46:5d:58:0f:19:50:ca:26:db:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6274A390B48BA4705B9758D16F2C8FAB648BE56
        Validity
            Not Before: Aug 10 20:27:06 2026 GMT
            Not After : Aug  9 20:32:06 2027 GMT
        Subject: CN=A48EA39905D0E8FEC4C2F28CF89E2379397F7E83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:71:6c:f1:56:56:b8:49:53:19:7f:61:4c:3f:
                    20:1e:b6:d2:0c:7a:5e:78:46:c5:c0:23:80:02:7e:
                    13:87:ab:25:81:88:67:fa:8e:5d:61:59:f7:04:8f:
                    49:85:1b:b2:43:73:f1:2d:05:bd:09:38:e1:59:cf:
                    86:b7:d3:02:b6:ed:fa:7e:fe:7d:78:e0:19:de:81:
                    c9:d4:26:79:fd:ee:ee:2e:06:4a:07:f9:1a:a0:22:
                    8e:17:40:16:dd:6b:c7:87:6f:45:3a:98:03:0c:a5:
                    23:d1:9b:a5:9f:1f:81:0f:0e:68:ff:5d:fb:ce:9f:
                    4d:4d:9a:6e:71:02:5d:5b:03:05:81:35:b9:71:9e:
                    11:d5:af:67:65:ad:ea:63:7f:fe:e3:56:ad:1f:4f:
                    61:e2:eb:13:2d:fd:6b:a3:6f:98:4a:35:e5:df:17:
                    4f:1c:71:b4:97:58:06:5a:c7:cc:d9:1f:08:d8:66:
                    c9:81:9b:06:67:be:d9:8b:ad:b3:42:66:fb:a2:a5:
                    c8:37:3f:51:67:25:c5:59:91:de:48:9e:f7:91:46:
                    cd:0c:97:0a:19:8e:a3:2e:0f:08:27:49:85:2e:dc:
                    21:ff:86:4f:48:20:e8:40:ea:47:8f:72:13:5d:4b:
                    03:5d:a5:87:6e:c9:ac:47:d1:78:a7:7a:42:e0:f1:
                    82:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:8E:A3:99:05:D0:E8:FE:C4:C2:F2:8C:F8:9E:23:79:39:7F:7E:83
            X509v3 Authority Key Identifier:
                keyid:D6:27:4A:39:0B:48:BA:47:05:B9:75:8D:16:F2:C8:FA:B6:48:BE:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/D6274A390B48BA4705B9758D16F2C8FAB648BE56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6274A390B48BA4705B9758D16F2C8FAB648BE56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/3133382e3235352e3136322e302f32342d3234203d3e20323633393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:90:9c:52:a9:16:ee:9d:fe:e7:e7:23:bd:ad:de:58:96:38:
         d6:fb:c7:9e:a2:85:af:7c:f5:3a:a4:89:ef:29:a7:58:d6:a3:
         7f:f7:88:49:a7:a5:db:ca:44:55:44:62:0e:11:8d:23:f2:17:
         ce:76:ca:88:76:c7:fa:56:e3:ce:e4:fb:85:28:79:63:6a:a5:
         8b:72:b6:5a:23:ad:de:47:7b:50:4b:15:78:2f:35:8a:7c:68:
         34:b1:44:a7:66:18:1a:0d:be:eb:b1:a9:dc:50:09:97:51:5e:
         d2:ff:ad:c5:f9:21:b3:1a:ea:3f:ec:61:d2:da:f3:42:b9:47:
         d4:31:0d:1a:1a:3d:0a:fc:9a:2b:08:fe:5f:bc:68:80:45:10:
         bb:86:6b:e2:bc:77:2c:33:9d:93:28:22:e1:93:6c:44:11:eb:
         20:c6:de:d7:f7:04:ff:aa:1f:b4:44:3a:62:76:2a:4e:34:62:
         9d:6c:06:76:1d:68:8e:03:7d:46:2b:8c:f6:00:a5:b8:ff:68:
         58:7e:a7:ab:e7:5f:1d:1a:69:fe:e7:d7:70:40:5d:be:2d:29:
         5c:80:bb:c0:b5:fc:56:0f:61:ff:9d:8a:a1:35:ee:24:6b:f6:
         42:f6:57:d1:ad:0d:d1:2c:b5:ba:e4:3d:ac:2d:b9:70:9f:82:
         d5:3d:81:63
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUdi/NgvT1j8r9BUZdWA8ZUMom24kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDYyNzRBMzkwQjQ4QkE0NzA1Qjk3NThEMTZGMkM4RkFC
NjQ4QkU1NjAeFw0yNjA4MTAyMDI3MDZaFw0yNzA4MDkyMDMyMDZaMDMxMTAvBgNV
BAMTKEE0OEVBMzk5MDVEMEU4RkVDNEMyRjI4Q0Y4OUUyMzc5Mzk3RjdFODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8cWzxVla4SVMZf2FMPyAettIM
el54RsXAI4ACfhOHqyWBiGf6jl1hWfcEj0mFG7JDc/EtBb0JOOFZz4a30wK27fp+
/n144BnegcnUJnn97u4uBkoH+RqgIo4XQBbda8eHb0U6mAMMpSPRm6WfH4EPDmj/
XfvOn01Nmm5xAl1bAwWBNblxnhHVr2dlrepjf/7jVq0fT2Hi6xMt/Wujb5hKNeXf
F08ccbSXWAZax8zZHwjYZsmBmwZnvtmLrbNCZvuipcg3P1FnJcVZkd5InveRRs0M
lwoZjqMuDwgnSYUu3CH/hk9IIOhA6kePchNdSwNdpYduyaxH0XinekLg8YJRAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUpI6jmQXQ6P7EwvKM+J4jeTl/foMwHwYDVR0j
BBgwFoAU1idKOQtIukcFuXWNFvLI+rZIvlYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHRvWFRjSFFFaTFLaW50aUZ6NndHdEZBVVFvY1hwSGlXOW9BZkVpM3Vr
R3MvMC9ENjI3NEEzOTBCNDhCQTQ3MDVCOTc1OEQxNkYyQzhGQUI2NDhCRTU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2Mjc0QTM5MEI0OEJBNDcw
NUI5NzU4RDE2RjJDOEZBQjY0OEJFNTYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R0b1hUY0hRRWkxS2ludGlGejZ3R3RGQVVRb2NYcEhpVzlvQWZFaTN1a0dzLzAv
MzEzMzM4MmUzMjM1MzUyZTMxMzYzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM5MzczNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIr/ojANBgkqhkiG9w0BAQsFAAOCAQEAJpCc
UqkW7p3+5+cjva3eWJY41vvHnqKFr3z1OqSJ7ymnWNajf/eISael28pEVURiDhGN
I/IXznbKiHbH+lbjzuT7hSh5Y2qli3K2WiOt3kd7UEsVeC81inxoNLFEp2YYGg2+
67Gp3FAJl1Fe0v+txfkhsxrqP+xh0trzQrlH1DENGho9CvyaKwj+X7xogEUQu4Zr
4rx3LDOdkygi4ZNsRBHrIMbe1/cE/6oftEQ6YnYqTjRinWwGdh1ojgN9RiuM9gCl
uP9oWH6nq+dfHRpp/ufXcEBdvi0pXIC7wLX8Vg9h/52KoTXuJGv2QvZX0a0N0Sy1
uuQ9rC25cJ+C1T2BYw==
-----END CERTIFICATE-----
Generated at Wed Aug 26 08:11:13 2026 by rpki-client