Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EZ31i2iVzQPCDjYu89Bx78mVaLL9b6jZtySUS3t4vGkE/1/3133382e302e3233382e302f32332d3233203d3e20323634353733.roa
File:                     3133382e302e3233382e302f32332d3233203d3e20323634353733.roa (raw, json)
Hash identifier:          gB3fMz/OKnxH64L6NwgpfequmaMX0KxFJFv4ZMktFKc=
Subject key identifier:   CB:C1:35:16:88:0E:A5:C5:DF:30:84:A7:4A:80:0F:E7:C9:CC:49:EA
Certificate issuer:       /CN=DF915FC701D29BA7ABB1E98C2A4207E51058EE32
Certificate serial:       2D58692612CA49D5144DA70AFE73510DC4C520DC
Authority key identifier: DF:91:5F:C7:01:D2:9B:A7:AB:B1:E9:8C:2A:42:07:E5:10:58:EE:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF915FC701D29BA7ABB1E98C2A4207E51058EE32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZ31i2iVzQPCDjYu89Bx78mVaLL9b6jZtySUS3t4vGkE/1/3133382e302e3233382e302f32332d3233203d3e20323634353733.roa
Signing time:             Wed 28 Oct 2026 13:05:51 +0000
ROA not before:           Wed 28 Oct 2026 13:00:51 +0000
ROA not after:            Wed 27 Oct 2027 13:05:51 +0000
asID:                     264573
IP address blocks:        138.0.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EZ31i2iVzQPCDjYu89Bx78mVaLL9b6jZtySUS3t4vGkE/1/DF915FC701D29BA7ABB1E98C2A4207E51058EE32.crl
                          rsync://rpki-repo.registro.br/repo/EZ31i2iVzQPCDjYu89Bx78mVaLL9b6jZtySUS3t4vGkE/1/DF915FC701D29BA7ABB1E98C2A4207E51058EE32.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF915FC701D29BA7ABB1E98C2A4207E51058EE32.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 03:40:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:58:69:26:12:ca:49:d5:14:4d:a7:0a:fe:73:51:0d:c4:c5:20:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF915FC701D29BA7ABB1E98C2A4207E51058EE32
        Validity
            Not Before: Oct 28 13:00:51 2026 GMT
            Not After : Oct 27 13:05:51 2027 GMT
        Subject: CN=CBC13516880EA5C5DF3084A74A800FE7C9CC49EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9b:1d:49:71:97:4f:f0:26:0d:b8:99:11:1d:
                    44:60:5b:4e:7d:12:8b:99:34:1e:b4:9d:64:eb:40:
                    86:6a:69:2b:64:fd:aa:1b:66:57:cc:1c:03:b0:51:
                    59:03:90:03:90:4a:3a:b0:d2:bb:6e:ef:71:fb:2e:
                    7f:5e:f7:f6:19:87:55:11:7a:d7:15:bd:ef:25:73:
                    b8:5b:3f:1a:14:b4:ae:6a:23:e5:2f:d2:75:7f:1b:
                    6b:5f:16:46:4d:de:54:71:1c:8d:57:d2:4f:f9:e1:
                    49:7e:1e:3c:f3:05:ee:7d:de:8a:7b:7b:b6:0c:4c:
                    b1:9a:cf:fb:69:54:e1:bd:da:de:74:9a:8c:ed:f1:
                    da:f1:02:7b:c2:08:ca:84:60:fe:c4:b5:55:34:f7:
                    6b:10:a3:2f:a9:69:74:10:5d:e7:77:56:86:d8:e3:
                    8c:1d:d8:1e:49:e6:4a:ee:7b:04:d9:b8:ad:bd:f5:
                    c7:4a:cb:b2:93:85:6e:8d:93:78:98:d8:0b:a6:22:
                    ad:5a:75:ed:54:78:9e:3a:ff:ea:b0:9b:97:dc:ea:
                    63:4b:41:21:25:b3:5d:f5:0e:6b:4f:36:a7:f5:f3:
                    80:bf:05:30:f4:32:44:3e:4b:05:20:b7:ec:7f:e3:
                    a6:1a:64:ab:23:a0:6a:93:75:af:cb:7c:17:6a:30:
                    c4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C1:35:16:88:0E:A5:C5:DF:30:84:A7:4A:80:0F:E7:C9:CC:49:EA
            X509v3 Authority Key Identifier:
                keyid:DF:91:5F:C7:01:D2:9B:A7:AB:B1:E9:8C:2A:42:07:E5:10:58:EE:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZ31i2iVzQPCDjYu89Bx78mVaLL9b6jZtySUS3t4vGkE/1/DF915FC701D29BA7ABB1E98C2A4207E51058EE32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF915FC701D29BA7ABB1E98C2A4207E51058EE32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZ31i2iVzQPCDjYu89Bx78mVaLL9b6jZtySUS3t4vGkE/1/3133382e302e3233382e302f32332d3233203d3e20323634353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:a4:31:56:52:ce:83:ac:6d:66:67:a6:35:d3:c8:8f:c1:ec:
         dd:27:51:cc:b3:64:76:05:20:e6:47:12:c9:a0:eb:3f:88:d1:
         d3:a5:8c:9c:c6:d7:f9:63:d6:06:7e:d6:32:ee:ea:b2:d0:b1:
         a4:03:0e:8f:55:dc:94:a9:87:f6:c6:d1:b4:93:f5:ca:00:bb:
         77:1c:22:e3:34:0e:30:b5:29:92:5f:f5:c9:14:77:43:e5:84:
         ce:c3:1e:15:c4:45:bf:c5:48:a0:9f:28:71:29:85:7d:a7:8e:
         61:5a:76:da:b7:d7:ec:cb:1d:64:59:cb:ed:05:c3:c7:23:33:
         ee:49:f1:5a:d4:af:66:55:6f:77:36:f9:60:cf:85:e3:3f:4a:
         ef:49:f6:9e:9b:ce:f1:f2:fa:8e:3e:e4:29:41:f1:57:35:bf:
         dc:4e:e3:73:fc:74:28:1e:09:96:b4:64:7d:9d:ab:3c:64:38:
         a1:ba:45:14:69:88:df:47:80:e5:50:ab:11:a1:0c:06:59:23:
         3c:e2:7f:56:6e:a0:2b:9a:47:0d:9a:a3:69:e6:ae:6d:81:cc:
         eb:3a:21:02:b1:93:ad:2b:81:76:9a:03:1d:8b:00:c6:7c:ed:
         eb:ca:6b:f1:b0:42:cb:a8:f9:0b:d7:a0:59:c0:fd:a5:e5:ed:
         e2:fa:6b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 14:20:34 2026 by rpki-client