Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EZ31i2iVzQPCDjYu89Bx78mVaLL9b6jZtySUS3t4vGkE/1/3133382e302e3233362e302f32342d3234203d3e20323634353733.roa
File:                     3133382e302e3233362e302f32342d3234203d3e20323634353733.roa (raw, json)
Hash identifier:          vatiGmEwGbNPSoT01+Kqn6Mvi1IK9A7/3RN0sxmwOFA=
Subject key identifier:   82:60:B1:26:EF:7B:5B:80:41:A2:77:58:54:F6:F7:3A:B8:F7:81:CA
Certificate issuer:       /CN=DF915FC701D29BA7ABB1E98C2A4207E51058EE32
Certificate serial:       60122250E011EC6DE472A09E8C31EAE779099D3C
Authority key identifier: DF:91:5F:C7:01:D2:9B:A7:AB:B1:E9:8C:2A:42:07:E5:10:58:EE:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF915FC701D29BA7ABB1E98C2A4207E51058EE32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZ31i2iVzQPCDjYu89Bx78mVaLL9b6jZtySUS3t4vGkE/1/3133382e302e3233362e302f32342d3234203d3e20323634353733.roa
Signing time:             Wed 28 Oct 2026 13:04:48 +0000
ROA not before:           Wed 28 Oct 2026 12:59:48 +0000
ROA not after:            Wed 27 Oct 2027 13:04:48 +0000
asID:                     264573
IP address blocks:        138.0.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EZ31i2iVzQPCDjYu89Bx78mVaLL9b6jZtySUS3t4vGkE/1/DF915FC701D29BA7ABB1E98C2A4207E51058EE32.crl
                          rsync://rpki-repo.registro.br/repo/EZ31i2iVzQPCDjYu89Bx78mVaLL9b6jZtySUS3t4vGkE/1/DF915FC701D29BA7ABB1E98C2A4207E51058EE32.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF915FC701D29BA7ABB1E98C2A4207E51058EE32.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 03:40:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:12:22:50:e0:11:ec:6d:e4:72:a0:9e:8c:31:ea:e7:79:09:9d:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF915FC701D29BA7ABB1E98C2A4207E51058EE32
        Validity
            Not Before: Oct 28 12:59:48 2026 GMT
            Not After : Oct 27 13:04:48 2027 GMT
        Subject: CN=8260B126EF7B5B8041A2775854F6F73AB8F781CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fc:9f:01:58:3f:38:5d:1b:17:ba:5c:cf:c2:
                    23:a6:5a:93:38:88:88:24:a7:20:65:45:ba:19:d7:
                    d1:0d:f4:ea:9e:f4:21:5e:d6:6c:74:d2:f8:fe:dd:
                    08:ce:7d:d3:7c:37:b2:4c:1e:18:c9:2c:f3:78:36:
                    58:47:cf:11:f0:a6:70:3e:e1:d5:62:eb:82:c3:71:
                    55:ee:f7:2b:a2:5c:8f:dd:ec:75:d5:52:1b:14:c2:
                    2f:e3:f7:31:c7:38:df:83:53:1d:81:35:95:8e:e6:
                    d5:15:71:a3:2d:70:99:ed:6a:11:a9:fb:62:dc:dc:
                    ad:59:c5:49:37:11:60:95:9b:6a:bc:c5:d3:b4:45:
                    ee:18:51:f0:df:62:a5:fc:17:48:29:bd:c5:78:33:
                    38:b7:02:eb:a0:ea:f0:c9:ac:7e:cb:87:6c:d1:eb:
                    ad:23:57:31:db:c7:e7:04:e2:0c:1e:52:4f:e1:30:
                    5f:9a:5c:79:ba:d7:18:fe:a7:58:ab:f8:f0:53:d0:
                    40:60:50:95:e9:47:53:db:b1:78:d7:58:94:e6:e2:
                    4a:54:fb:77:0e:37:76:f4:0b:40:7d:86:5d:be:67:
                    67:0b:3c:a6:d3:0f:ee:37:ef:49:52:46:9c:b1:56:
                    04:fa:71:81:e8:56:be:f5:ee:3d:c8:a5:56:de:78:
                    43:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:60:B1:26:EF:7B:5B:80:41:A2:77:58:54:F6:F7:3A:B8:F7:81:CA
            X509v3 Authority Key Identifier:
                keyid:DF:91:5F:C7:01:D2:9B:A7:AB:B1:E9:8C:2A:42:07:E5:10:58:EE:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZ31i2iVzQPCDjYu89Bx78mVaLL9b6jZtySUS3t4vGkE/1/DF915FC701D29BA7ABB1E98C2A4207E51058EE32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF915FC701D29BA7ABB1E98C2A4207E51058EE32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZ31i2iVzQPCDjYu89Bx78mVaLL9b6jZtySUS3t4vGkE/1/3133382e302e3233362e302f32342d3234203d3e20323634353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:6c:b5:d1:9d:cd:2f:d7:5d:39:e1:09:af:88:69:6e:ae:9f:
         f0:90:4b:03:8f:c5:e8:6a:ea:47:25:49:bf:b7:12:d7:55:bd:
         1d:8d:c4:63:91:9f:d1:a1:55:00:ed:c2:de:9c:a6:af:11:0b:
         6a:af:a9:d4:a6:6b:a3:5b:5e:e0:37:fe:b8:fc:ca:de:f6:4c:
         e1:a8:48:e3:e4:e4:a6:d9:72:3a:b7:86:ce:aa:4f:c6:8a:8f:
         af:0d:87:a1:20:2f:d7:14:4e:eb:37:e1:53:03:64:e8:13:52:
         cf:64:65:fc:41:e3:77:9a:85:29:d4:85:0d:f1:e3:06:d4:54:
         22:4a:20:a8:0f:b7:8f:6b:c6:d9:12:6b:28:b2:54:6c:d4:e0:
         c1:ca:97:3d:e3:a7:1b:86:db:c2:d1:ff:7d:54:91:83:64:9b:
         ab:2e:fc:4c:d9:4b:ca:8d:2a:8e:68:8b:bb:0f:78:5a:47:38:
         ab:eb:8c:1d:81:19:60:d1:f3:97:2a:26:8a:c3:4d:d0:a0:60:
         67:da:25:c1:8d:92:7f:86:3f:55:c8:65:e9:81:78:7b:02:a0:
         e9:28:7b:8a:2e:a9:f6:77:40:e8:61:3a:f8:50:71:9d:8c:7a:
         7f:b1:36:c2:ff:ef:29:4e:a5:cc:cf:90:c1:ac:8d:2d:32:41:
         1d:0d:ae:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 20:19:38 2026 by rpki-client