Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EZ31i2iVzQPCDjYu89Bx78mVaLL9b6jZtySUS3t4vGkE/1/3133382e302e3233372e302f32342d3234203d3e20323634353733.roa
File:                     3133382e302e3233372e302f32342d3234203d3e20323634353733.roa (raw, json)
Hash identifier:          Nvy/+jtwyDrqKbZXYDBUlVLnEU9mZ2vF71SL+NIT5LE=
Subject key identifier:   AA:F4:CC:84:93:6F:5E:14:AC:8B:32:75:B0:67:A6:E1:8B:E7:56:1D
Certificate issuer:       /CN=DF915FC701D29BA7ABB1E98C2A4207E51058EE32
Certificate serial:       680B445C2B920A07DBFB3F837D0B218308151BE7
Authority key identifier: DF:91:5F:C7:01:D2:9B:A7:AB:B1:E9:8C:2A:42:07:E5:10:58:EE:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF915FC701D29BA7ABB1E98C2A4207E51058EE32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZ31i2iVzQPCDjYu89Bx78mVaLL9b6jZtySUS3t4vGkE/1/3133382e302e3233372e302f32342d3234203d3e20323634353733.roa
Signing time:             Wed 28 Oct 2026 13:05:30 +0000
ROA not before:           Wed 28 Oct 2026 13:00:30 +0000
ROA not after:            Wed 27 Oct 2027 13:05:30 +0000
asID:                     264573
IP address blocks:        138.0.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EZ31i2iVzQPCDjYu89Bx78mVaLL9b6jZtySUS3t4vGkE/1/DF915FC701D29BA7ABB1E98C2A4207E51058EE32.crl
                          rsync://rpki-repo.registro.br/repo/EZ31i2iVzQPCDjYu89Bx78mVaLL9b6jZtySUS3t4vGkE/1/DF915FC701D29BA7ABB1E98C2A4207E51058EE32.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF915FC701D29BA7ABB1E98C2A4207E51058EE32.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 03:40:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:0b:44:5c:2b:92:0a:07:db:fb:3f:83:7d:0b:21:83:08:15:1b:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF915FC701D29BA7ABB1E98C2A4207E51058EE32
        Validity
            Not Before: Oct 28 13:00:30 2026 GMT
            Not After : Oct 27 13:05:30 2027 GMT
        Subject: CN=AAF4CC84936F5E14AC8B3275B067A6E18BE7561D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:26:66:9b:a6:17:e3:19:47:8e:35:d4:57:5b:
                    b7:86:79:60:68:06:16:d5:9f:80:e4:b3:e9:b9:78:
                    4f:74:16:04:9a:65:4d:06:c6:f6:f3:35:3b:97:d8:
                    73:f6:05:22:db:fc:14:bf:85:47:fc:17:1d:e2:9b:
                    84:71:b7:45:91:2a:24:c9:ef:af:29:f8:41:ab:be:
                    5a:bc:9b:cb:52:6e:96:41:e3:0d:51:0a:28:2f:56:
                    ab:52:ea:20:3b:85:fd:76:4d:1f:6e:a7:62:cf:40:
                    1a:b1:98:e6:38:ce:e3:20:32:86:a5:ef:09:0e:52:
                    26:a7:44:11:79:2e:38:f1:b6:94:9e:98:4c:d3:85:
                    8d:6c:c4:b6:af:4d:69:44:97:9b:ec:af:76:16:1c:
                    d5:23:2b:b9:a2:45:76:09:58:a0:53:42:f3:02:26:
                    55:0b:a5:b6:db:06:fb:3d:7d:54:da:d0:5f:86:75:
                    7d:93:25:69:3a:3b:5c:13:bd:e1:01:48:55:9b:48:
                    21:3c:28:c9:d4:88:01:dd:de:80:20:06:7c:be:c8:
                    a4:66:31:d8:d2:71:c4:95:4e:9a:27:ac:b8:f6:70:
                    44:59:ac:97:bd:57:b8:d7:68:8b:22:a0:c1:2b:07:
                    9f:13:f4:ba:39:52:18:6e:ee:18:ce:aa:6a:8f:b3:
                    ff:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F4:CC:84:93:6F:5E:14:AC:8B:32:75:B0:67:A6:E1:8B:E7:56:1D
            X509v3 Authority Key Identifier:
                keyid:DF:91:5F:C7:01:D2:9B:A7:AB:B1:E9:8C:2A:42:07:E5:10:58:EE:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZ31i2iVzQPCDjYu89Bx78mVaLL9b6jZtySUS3t4vGkE/1/DF915FC701D29BA7ABB1E98C2A4207E51058EE32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF915FC701D29BA7ABB1E98C2A4207E51058EE32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZ31i2iVzQPCDjYu89Bx78mVaLL9b6jZtySUS3t4vGkE/1/3133382e302e3233372e302f32342d3234203d3e20323634353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:c0:b9:be:33:60:4e:79:c7:97:1e:fb:aa:32:48:d9:c4:8a:
         34:5e:c8:19:6d:fe:06:e8:cb:2c:bc:a5:0e:4f:68:65:58:6e:
         26:51:2b:ab:d3:b1:c2:dd:92:3a:87:8c:9b:ad:b5:96:3a:09:
         d3:9e:01:9e:1e:21:08:f9:1a:8a:69:ba:8b:26:33:3c:f6:bb:
         ea:f4:b1:7c:12:84:90:b1:6c:e5:cb:7e:bb:43:04:68:c7:4c:
         3b:2f:92:43:a0:b5:57:5a:af:c8:a7:45:3f:40:f4:53:79:d1:
         db:fc:77:06:b8:de:6d:5b:94:f8:64:1b:4c:ca:05:46:6b:d9:
         b7:2c:39:0a:b3:d2:11:a6:e4:03:4c:55:77:32:6e:ac:16:d0:
         ba:56:62:6c:f7:1a:ab:be:47:1f:3f:72:c4:b7:37:1e:97:02:
         1a:68:8d:dd:63:5a:a9:c9:3b:ad:34:15:50:4e:2d:e7:05:c1:
         91:b1:8f:bc:25:55:ee:82:ca:3f:01:2f:bc:49:e7:23:c8:2f:
         96:d9:4d:99:c4:45:6e:f8:54:b6:41:36:1f:2d:4b:8f:a0:05:
         0d:f0:4e:ac:7a:24:99:28:a5:38:85:a9:af:60:b5:47:cc:d7:
         f4:dc:b5:b7:36:93:63:13:b6:99:fd:ee:58:af:9e:0c:ce:70:
         26:66:f5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 20:19:35 2026 by rpki-client