Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/1/3133382e3230342e36342e302f32322d3332203d3e203533313831.roa
File:                     3133382e3230342e36342e302f32322d3332203d3e203533313831.roa (raw, json)
Hash identifier:          ZGyhoV1J2A8uZUkygdx34b2z1Hf2qpiDs/uZfCCuoFQ=
Subject key identifier:   C2:F9:74:A9:76:EA:F2:DC:C3:C4:AC:C4:14:3A:8D:B9:29:32:24:61
Certificate issuer:       /CN=5A1A652FEE328D6F3E1B47CD4C84232CB2EEF95E
Certificate serial:       179F2DCE4243111D3FAE6091EB66CC76671D3342
Authority key identifier: 5A:1A:65:2F:EE:32:8D:6F:3E:1B:47:CD:4C:84:23:2C:B2:EE:F9:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A1A652FEE328D6F3E1B47CD4C84232CB2EEF95E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/1/3133382e3230342e36342e302f32322d3332203d3e203533313831.roa
Signing time:             Wed 09 Sep 2026 11:38:22 +0000
ROA not before:           Wed 09 Sep 2026 11:33:22 +0000
ROA not after:            Wed 08 Sep 2027 11:38:22 +0000
asID:                     53181
IP address blocks:        138.204.64.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/1/5A1A652FEE328D6F3E1B47CD4C84232CB2EEF95E.crl
                          rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/1/5A1A652FEE328D6F3E1B47CD4C84232CB2EEF95E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A1A652FEE328D6F3E1B47CD4C84232CB2EEF95E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 13:30:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:9f:2d:ce:42:43:11:1d:3f:ae:60:91:eb:66:cc:76:67:1d:33:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A1A652FEE328D6F3E1B47CD4C84232CB2EEF95E
        Validity
            Not Before: Sep  9 11:33:22 2026 GMT
            Not After : Sep  8 11:38:22 2027 GMT
        Subject: CN=C2F974A976EAF2DCC3C4ACC4143A8DB929322461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:10:1f:fd:ee:eb:92:51:e7:db:a2:f7:1d:04:
                    aa:f2:ec:7b:4d:86:84:5e:63:d1:ef:db:6e:37:51:
                    39:8e:14:22:ab:7e:22:6e:6c:96:6f:1a:0c:f2:47:
                    07:26:b3:db:2b:7a:73:5e:12:d8:41:b1:93:82:61:
                    85:22:9b:ca:8a:69:89:7f:d1:bf:f7:9d:26:f4:fe:
                    39:6f:98:21:0d:03:c5:06:b8:60:f7:77:f7:a2:80:
                    9d:88:b2:68:51:39:ed:90:8a:77:87:ca:7b:1a:eb:
                    cc:4a:8d:65:5a:cd:79:2e:80:2d:28:e2:14:9e:30:
                    14:e3:05:ed:f4:f4:ba:08:19:4f:dc:ce:d6:28:e6:
                    c6:ce:d2:d2:09:24:06:46:d0:dd:7a:96:c6:ad:4a:
                    1b:4c:ec:f7:2b:20:bf:7e:96:7d:93:f5:fc:38:03:
                    0e:3f:2c:83:05:7c:ec:e5:8f:98:4c:45:ee:90:ce:
                    0d:32:20:43:ee:62:29:83:b4:46:30:a2:0e:b9:a2:
                    5e:1d:26:4a:22:13:aa:b3:86:0e:81:f2:60:e7:d3:
                    1d:2b:7b:0f:49:59:5a:cd:e9:3e:a7:f3:b7:21:f4:
                    74:19:bd:b2:f5:e7:c3:1b:11:d4:50:aa:4b:c5:b1:
                    07:28:f2:c1:bb:80:35:27:7d:d5:a1:23:84:38:36:
                    3e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F9:74:A9:76:EA:F2:DC:C3:C4:AC:C4:14:3A:8D:B9:29:32:24:61
            X509v3 Authority Key Identifier:
                keyid:5A:1A:65:2F:EE:32:8D:6F:3E:1B:47:CD:4C:84:23:2C:B2:EE:F9:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/1/5A1A652FEE328D6F3E1B47CD4C84232CB2EEF95E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A1A652FEE328D6F3E1B47CD4C84232CB2EEF95E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/1/3133382e3230342e36342e302f32322d3332203d3e203533313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:74:60:fc:3b:ed:df:ba:25:2e:48:d4:54:b3:3f:a2:d1:5e:
         be:43:e7:40:f0:d8:ab:d4:a8:09:bd:ec:da:89:96:8e:81:45:
         19:e5:d5:8a:62:86:bd:ec:50:cc:15:35:16:66:22:1c:a1:e1:
         f0:4d:90:01:87:3a:00:03:bb:c1:1b:f4:6d:89:f5:87:2f:fe:
         a4:7d:35:fc:56:62:59:ca:d6:c8:ff:df:66:b2:0a:68:b1:b0:
         bb:70:aa:a5:e1:1f:2e:ff:55:a6:9f:c5:a1:84:a6:29:13:3a:
         8a:38:33:23:6b:d8:c7:e0:4b:ef:a4:15:a3:54:e7:12:ac:42:
         7c:e5:cf:3a:03:5f:20:5c:df:f4:3b:2d:b3:29:e8:43:58:31:
         97:6f:1a:76:41:70:64:c9:39:33:3a:cb:2b:59:00:54:a5:aa:
         44:d9:96:dd:7a:7e:ab:70:3d:c1:ce:67:68:45:43:b1:b4:33:
         b7:17:f1:f8:04:e5:1a:78:c3:71:95:8d:18:89:39:20:fc:65:
         ec:fe:64:e9:93:1f:45:e1:74:8f:48:7d:57:f9:46:e1:00:85:
         d4:8e:c6:2e:57:69:37:2f:ca:bd:e1:12:e8:09:64:7f:43:89:
         7e:7e:4c:7a:cb:a4:4c:b7:74:47:64:dc:83:a3:26:73:e8:c0:
         f0:d1:1c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 01:46:14 2026 by rpki-client