Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/3133382e35392e34342e302f32322d3233203d3e20323634353935.roa
File:                     3133382e35392e34342e302f32322d3233203d3e20323634353935.roa (raw, json)
Hash identifier:          Mnd5mIsm72AyenyyYvoC7DJh+aoJ8DSoaC8ExKUucFs=
Subject key identifier:   1F:A9:57:68:03:40:1A:13:70:B1:C0:B4:17:A1:06:4E:2C:7B:98:61
Certificate issuer:       /CN=70D8687B5AE705FBBBF1A216424FA994C09423E7
Certificate serial:       77D0F01F048EFE825A9A1A02D7EF7D5B0380A293
Authority key identifier: 70:D8:68:7B:5A:E7:05:FB:BB:F1:A2:16:42:4F:A9:94:C0:94:23:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70D8687B5AE705FBBBF1A216424FA994C09423E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/3133382e35392e34342e302f32322d3233203d3e20323634353935.roa
Signing time:             Thu 14 May 2026 22:50:18 +0000
ROA not before:           Thu 14 May 2026 22:45:18 +0000
ROA not after:            Thu 13 May 2027 22:50:18 +0000
asID:                     264595
IP address blocks:        138.59.44.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/70D8687B5AE705FBBBF1A216424FA994C09423E7.crl
                          rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/70D8687B5AE705FBBBF1A216424FA994C09423E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70D8687B5AE705FBBBF1A216424FA994C09423E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 07:33:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:d0:f0:1f:04:8e:fe:82:5a:9a:1a:02:d7:ef:7d:5b:03:80:a2:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70D8687B5AE705FBBBF1A216424FA994C09423E7
        Validity
            Not Before: May 14 22:45:18 2026 GMT
            Not After : May 13 22:50:18 2027 GMT
        Subject: CN=1FA9576803401A1370B1C0B417A1064E2C7B9861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f2:0c:7d:4e:d0:31:af:ee:be:7b:49:ac:b1:
                    63:2d:b5:be:b9:1b:c6:5f:99:40:5f:f3:b1:65:62:
                    ef:96:d6:da:b2:60:ef:d5:a3:b8:89:de:29:67:ee:
                    a4:95:32:11:01:cd:8f:a4:ee:22:f3:da:88:a3:8b:
                    64:67:fb:0f:3f:bf:30:49:2c:ac:8b:cd:c2:ab:6f:
                    41:ee:ef:61:58:2a:97:d5:47:e3:e1:cb:fd:c8:59:
                    a6:f8:f3:e8:a3:58:78:c3:ef:40:da:50:d5:b3:1e:
                    3f:57:97:75:d2:48:c4:91:33:bb:72:97:18:66:f0:
                    6c:b6:41:aa:ef:6d:c2:dc:0a:b3:91:a7:f9:98:75:
                    81:17:22:c2:36:5a:9f:ba:b0:cd:29:d1:2d:3f:dd:
                    77:32:33:b2:c8:3d:4f:b9:56:90:be:4e:15:63:c7:
                    65:03:ed:99:7a:39:fd:40:e7:f7:e7:42:87:22:ce:
                    7e:88:0e:9e:01:35:bc:aa:77:4e:f6:59:5b:5d:7e:
                    11:02:e5:7e:5b:43:e1:77:fd:80:95:e1:4d:70:73:
                    3b:d4:1d:97:ab:45:87:e9:d3:30:f3:3d:f5:46:11:
                    6c:0e:d9:21:72:da:ad:fc:86:73:b5:2a:49:e4:52:
                    bd:3b:fa:f2:10:1c:ab:96:0e:62:fe:47:5f:6c:6a:
                    37:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A9:57:68:03:40:1A:13:70:B1:C0:B4:17:A1:06:4E:2C:7B:98:61
            X509v3 Authority Key Identifier:
                keyid:70:D8:68:7B:5A:E7:05:FB:BB:F1:A2:16:42:4F:A9:94:C0:94:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/70D8687B5AE705FBBBF1A216424FA994C09423E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70D8687B5AE705FBBBF1A216424FA994C09423E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/3133382e35392e34342e302f32322d3233203d3e20323634353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:36:14:2a:88:84:a8:bb:c2:90:8c:12:70:33:fb:c6:1f:ef:
         bd:db:42:34:d6:7c:32:73:85:f8:52:cb:ee:8e:bc:bf:63:87:
         72:b3:6c:d3:f9:be:65:91:3a:60:d1:92:ce:f1:14:93:e6:53:
         bd:b1:cd:84:95:b4:74:a8:c2:d7:c4:e1:f7:81:7e:ab:72:6e:
         10:bb:f4:bd:ff:69:f2:d2:2a:4a:20:c8:76:4f:20:fb:31:50:
         d3:d0:ba:bf:86:76:b2:24:4b:29:31:84:5e:2c:f0:87:c4:f2:
         58:a5:a6:c6:bb:14:66:69:c1:7a:35:f8:7e:e5:15:89:3e:2b:
         bd:1e:3f:5e:46:46:5d:df:d7:34:74:79:3e:d1:85:d9:ac:86:
         c8:8e:4d:e7:89:71:9e:51:e7:37:69:9a:ed:6b:64:d8:be:d8:
         b0:ce:c5:a9:9b:e4:70:c7:44:9c:13:e8:a5:63:0f:be:20:4c:
         7c:c0:cd:39:e6:11:e4:5e:a0:a6:13:d8:da:03:0e:fa:71:47:
         b1:fc:71:85:00:71:da:37:3f:82:2f:57:15:c9:0f:41:ff:cf:
         12:73:28:53:aa:13:93:0f:47:77:3f:97:1b:24:c0:6b:9a:05:
         03:ef:c7:e3:44:14:ce:b0:00:36:bc:19:68:3a:3f:bf:12:9a:
         0f:43:de:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 17:10:41 2026 by rpki-client