Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/3133382e3230342e3138342e302f32322d3232203d3e20323633393037.roa
File:                     3133382e3230342e3138342e302f32322d3232203d3e20323633393037.roa (raw, json)
Hash identifier:          rSMbXH/XrLmtj8gu+NT6LuYa8ppNOj5t8/XKUbM5lHk=
Subject key identifier:   39:E7:77:7D:A2:83:EC:CC:4A:77:F4:51:11:E3:4D:18:15:64:14:D1
Certificate issuer:       /CN=F0DB15D3F66BA725DE7E70733346C03C0E4D1408
Certificate serial:       22A9600179A1819B29BBF7DB9503AC8F6028269A
Authority key identifier: F0:DB:15:D3:F6:6B:A7:25:DE:7E:70:73:33:46:C0:3C:0E:4D:14:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/3133382e3230342e3138342e302f32322d3232203d3e20323633393037.roa
Signing time:             Mon 03 Aug 2026 14:43:08 +0000
ROA not before:           Mon 03 Aug 2026 14:38:08 +0000
ROA not after:            Mon 02 Aug 2027 14:43:08 +0000
asID:                     263907
IP address blocks:        138.204.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.crl
                          rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 07:49:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:a9:60:01:79:a1:81:9b:29:bb:f7:db:95:03:ac:8f:60:28:26:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0DB15D3F66BA725DE7E70733346C03C0E4D1408
        Validity
            Not Before: Aug  3 14:38:08 2026 GMT
            Not After : Aug  2 14:43:08 2027 GMT
        Subject: CN=39E7777DA283ECCC4A77F45111E34D18156414D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9b:35:6b:f7:75:c2:e8:02:98:b8:7c:3d:88:
                    b8:b6:c3:30:ad:a8:27:b8:95:01:4d:8d:96:dd:31:
                    1e:bd:65:01:db:14:1d:da:cb:42:80:86:fe:b1:69:
                    3e:fa:36:b2:44:11:32:91:90:f0:84:fa:a3:6d:2a:
                    f7:9c:50:2b:54:d2:df:84:f7:3d:92:f7:d1:ab:db:
                    81:85:fb:79:64:7e:92:af:75:ec:20:42:0b:07:b1:
                    7a:e4:5d:bf:82:d7:77:f0:bf:cc:ec:55:6b:1a:4c:
                    96:b5:77:f7:63:78:c2:a8:e0:06:74:d2:b2:e5:5c:
                    3d:a5:1e:6f:43:b1:03:72:7c:6a:b4:0a:54:d1:4f:
                    b4:27:9c:cd:f5:18:51:7a:db:fe:f3:71:68:36:bb:
                    1c:e4:6b:64:09:80:36:cd:ef:d3:76:c4:fb:4e:25:
                    9e:e9:8f:20:26:eb:01:c8:4b:a3:0f:dc:c9:7f:1a:
                    73:7c:2e:ce:93:2f:c4:12:5d:d8:bf:1f:d7:a1:b0:
                    3e:4b:20:74:d1:02:7d:38:0a:57:1c:06:b5:cd:6b:
                    06:69:3d:40:55:72:e0:60:7b:dc:1f:51:33:12:a7:
                    af:ec:db:aa:b4:3d:d6:d2:91:72:93:15:21:45:b8:
                    92:07:06:e0:90:6d:c0:7c:7a:dd:06:fd:d1:db:80:
                    86:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E7:77:7D:A2:83:EC:CC:4A:77:F4:51:11:E3:4D:18:15:64:14:D1
            X509v3 Authority Key Identifier:
                keyid:F0:DB:15:D3:F6:6B:A7:25:DE:7E:70:73:33:46:C0:3C:0E:4D:14:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/3133382e3230342e3138342e302f32322d3232203d3e20323633393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:a6:ea:59:60:dc:a0:8f:9f:79:92:c9:b8:5f:1d:cc:14:67:
         5f:aa:8d:4a:44:92:23:70:94:a4:f7:ce:78:b9:5e:26:af:76:
         fc:1a:3f:c7:0b:88:a9:ca:41:64:fc:b9:f3:9c:a3:fe:1b:74:
         8f:fb:cb:a3:e3:00:02:ae:e3:e4:04:5e:05:5a:13:76:f6:03:
         4c:b1:7e:0e:16:27:36:bf:62:6d:bf:23:07:61:c7:55:73:59:
         0e:5b:bc:5e:92:91:83:1f:a8:ae:bc:93:5b:ec:1e:ea:6a:27:
         85:c9:fa:6c:cc:18:d0:27:45:ca:f0:55:ae:c7:c0:90:1f:e1:
         1d:52:ae:4a:53:8c:10:de:1b:6d:4a:2c:bd:c1:7f:97:05:34:
         dc:f0:93:44:04:5a:83:b2:93:09:4e:3b:17:35:2a:7b:4e:2e:
         90:86:12:e6:fd:1e:2a:ff:9b:e8:77:70:35:96:7e:88:5e:30:
         20:95:04:d5:45:53:50:db:d6:e4:c9:3d:72:35:1b:87:ae:c7:
         fe:a1:a1:9f:d5:a0:c9:f1:db:b5:9a:af:2f:87:95:fb:e5:0b:
         2c:82:8f:0e:97:fa:b6:96:f9:b9:e4:3c:ca:1f:39:9b:0c:f2:
         2b:52:dc:03:10:a5:51:4f:c1:73:90:1d:f4:46:93:47:82:d2:
         c6:a6:2e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 13:27:44 2026 by rpki-client