Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/3133382e3235352e3133382e302f32342d3234203d3e20323634323830.roa
File:                     3133382e3235352e3133382e302f32342d3234203d3e20323634323830.roa (raw, json)
Hash identifier:          IJfJcF8PVX5mJmmL9DMYa3lt3mKUFFjL4Qk4kKuT88g=
Subject key identifier:   05:F0:67:3E:4A:8B:74:2F:A5:F1:99:75:48:84:B0:F1:D3:31:31:2A
Certificate issuer:       /CN=E47F4698E6792B56BAAE1D24E87AC2C8E3E5EB3B
Certificate serial:       649F16E3EBEEE75A5CE99E1D1D87AB351B734FC2
Authority key identifier: E4:7F:46:98:E6:79:2B:56:BA:AE:1D:24:E8:7A:C2:C8:E3:E5:EB:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E47F4698E6792B56BAAE1D24E87AC2C8E3E5EB3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/3133382e3235352e3133382e302f32342d3234203d3e20323634323830.roa
Signing time:             Tue 28 Jul 2026 18:32:03 +0000
ROA not before:           Tue 28 Jul 2026 18:27:03 +0000
ROA not after:            Tue 27 Jul 2027 18:32:03 +0000
asID:                     264280
IP address blocks:        138.255.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/E47F4698E6792B56BAAE1D24E87AC2C8E3E5EB3B.crl
                          rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/E47F4698E6792B56BAAE1D24E87AC2C8E3E5EB3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E47F4698E6792B56BAAE1D24E87AC2C8E3E5EB3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 02:25:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:9f:16:e3:eb:ee:e7:5a:5c:e9:9e:1d:1d:87:ab:35:1b:73:4f:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E47F4698E6792B56BAAE1D24E87AC2C8E3E5EB3B
        Validity
            Not Before: Jul 28 18:27:03 2026 GMT
            Not After : Jul 27 18:32:03 2027 GMT
        Subject: CN=05F0673E4A8B742FA5F199754884B0F1D331312A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3d:e7:04:46:e9:1b:3f:08:7c:c8:f1:5c:c0:
                    ec:2d:3a:e2:8a:9d:ef:8e:b4:6e:14:1f:e1:e3:0f:
                    bf:05:85:77:1e:80:ef:0f:4d:7b:df:77:fb:88:79:
                    6c:07:bc:72:0d:75:8a:f0:9d:1e:25:64:78:1e:43:
                    3a:71:63:5c:50:2d:83:fb:8e:bc:bf:36:87:8b:e3:
                    83:90:e1:04:a9:f9:d0:5a:23:8f:92:d1:2d:e3:38:
                    88:ba:cd:c6:a1:de:3e:9a:de:52:40:d7:10:a8:74:
                    ea:34:8a:1c:a4:07:37:4a:13:4e:7f:dd:86:8c:dd:
                    14:16:8d:8a:4a:52:69:67:03:bd:bc:41:f4:00:12:
                    a3:0c:b5:c6:bb:fc:af:2d:51:c1:80:ca:b7:96:32:
                    5b:8e:d6:3c:ab:81:eb:63:f0:ca:12:f8:b0:d5:4c:
                    9b:a8:03:e6:bc:0c:3c:67:85:12:1e:51:49:27:db:
                    ce:1b:a3:66:8b:9a:d9:f6:3f:7c:8b:b9:ac:ed:58:
                    15:22:26:ed:7e:e6:99:c6:a6:79:37:fa:08:42:02:
                    f4:1e:5d:00:11:7e:7d:4b:49:18:09:f2:1b:ff:e0:
                    c9:7f:4e:f5:00:5e:7f:9f:66:88:3d:4d:5b:9e:41:
                    d5:e4:f1:60:af:41:df:c1:01:d6:2a:94:2f:4b:4a:
                    a1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F0:67:3E:4A:8B:74:2F:A5:F1:99:75:48:84:B0:F1:D3:31:31:2A
            X509v3 Authority Key Identifier:
                keyid:E4:7F:46:98:E6:79:2B:56:BA:AE:1D:24:E8:7A:C2:C8:E3:E5:EB:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/E47F4698E6792B56BAAE1D24E87AC2C8E3E5EB3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E47F4698E6792B56BAAE1D24E87AC2C8E3E5EB3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/3133382e3235352e3133382e302f32342d3234203d3e20323634323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:c2:46:d2:22:a1:77:39:df:cf:1c:fb:72:ae:42:2d:8b:2c:
         12:93:77:cc:06:2f:18:bf:9d:d2:ef:68:f8:43:fb:ac:b7:a9:
         6f:82:6c:de:a2:ee:c7:7a:af:20:fe:24:5c:c7:e8:9e:5f:ab:
         1f:2c:fb:3b:91:bb:d0:aa:1c:60:95:c1:48:15:55:52:9f:f8:
         e7:53:8e:e4:cf:e7:48:16:56:a8:be:bb:29:90:c3:7c:87:48:
         e8:45:9f:bb:8d:9f:dd:7c:d9:ce:ba:11:3e:f9:11:bc:82:12:
         18:f4:7a:89:b6:c3:60:fe:63:3e:d4:19:dd:2d:b9:77:29:f1:
         51:b1:14:6e:0f:66:d0:bc:be:16:c8:80:8e:2e:e0:78:66:6e:
         26:18:23:8b:d4:83:e5:80:3c:f6:2a:d1:e6:71:ea:90:17:2d:
         b3:b2:2f:85:48:ce:4c:5a:56:c1:3a:04:a2:16:46:76:3c:63:
         7f:fc:8b:b8:17:83:93:b9:9c:09:b4:24:58:17:c4:91:7c:40:
         17:99:cf:6e:c9:1b:3d:f9:67:0e:c5:05:4e:2b:48:92:1f:30:
         52:4a:b2:9d:ad:9b:80:76:05:99:ae:91:16:b1:66:73:25:45:
         3e:83:bd:c3:12:4b:7f:ba:37:b1:50:98:ff:d9:71:a5:4e:e1:
         7b:2e:aa:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:19:07 2026 by rpki-client