Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/3133382e3230342e3138342e302f32342d3234203d3e20323633393037.roa
File:                     3133382e3230342e3138342e302f32342d3234203d3e20323633393037.roa (raw, json)
Hash identifier:          LrdOrkROEmVCT7xNd4m6RDiFT91hJPvG98BEHyYGJEg=
Subject key identifier:   21:92:C6:43:C3:95:A6:43:23:9F:00:B0:7D:3A:96:36:2A:66:65:04
Certificate issuer:       /CN=F0DB15D3F66BA725DE7E70733346C03C0E4D1408
Certificate serial:       1E3E995F4D268A3FD471D76FE0D54A1A0BC3A803
Authority key identifier: F0:DB:15:D3:F6:6B:A7:25:DE:7E:70:73:33:46:C0:3C:0E:4D:14:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/3133382e3230342e3138342e302f32342d3234203d3e20323633393037.roa
Signing time:             Mon 03 Aug 2026 14:43:09 +0000
ROA not before:           Mon 03 Aug 2026 14:38:09 +0000
ROA not after:            Mon 02 Aug 2027 14:43:09 +0000
asID:                     263907
IP address blocks:        138.204.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.crl
                          rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 07:49:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:3e:99:5f:4d:26:8a:3f:d4:71:d7:6f:e0:d5:4a:1a:0b:c3:a8:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0DB15D3F66BA725DE7E70733346C03C0E4D1408
        Validity
            Not Before: Aug  3 14:38:09 2026 GMT
            Not After : Aug  2 14:43:09 2027 GMT
        Subject: CN=2192C643C395A643239F00B07D3A96362A666504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:9a:1d:cf:22:08:e5:ee:5b:d6:10:b0:dd:00:
                    f6:cb:d4:4e:20:ac:17:ce:15:dd:e7:d8:aa:7a:c8:
                    b7:a0:d3:14:3c:cd:c7:d7:d0:17:63:cd:7b:20:eb:
                    9e:77:96:f2:36:08:af:0d:5e:cb:47:01:9a:74:49:
                    cc:16:95:5c:5b:cb:7c:07:e4:1a:aa:c5:8e:c9:e1:
                    b1:df:77:ff:c6:00:55:eb:b9:c9:42:fc:cd:b7:36:
                    c5:d0:26:6f:5b:f5:7e:e8:99:ba:2f:90:d7:f6:a0:
                    29:dd:d0:98:32:00:94:4b:8a:77:47:31:36:fa:02:
                    20:d7:54:65:ef:5c:b1:39:81:10:6d:16:f2:41:9b:
                    aa:4c:a9:dd:87:8c:9c:8e:56:68:0e:12:23:67:60:
                    bb:7a:3c:36:5d:b6:53:82:b3:00:af:e2:6c:c8:ff:
                    1e:df:dd:d4:21:fb:64:4c:dc:96:48:c4:e0:ef:b1:
                    29:c0:36:51:9b:7c:f8:cc:e8:60:05:bb:2b:96:00:
                    a4:dc:a4:ee:17:34:0b:fc:ab:bb:39:e0:2d:09:58:
                    80:fb:b4:34:1f:74:f5:ba:72:54:d4:e8:d4:a3:0e:
                    16:5b:79:24:b8:3f:a9:c6:50:eb:71:dc:b6:cc:1a:
                    a2:c8:fa:d4:fe:6f:22:4b:94:57:5c:2d:0b:72:04:
                    d4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:92:C6:43:C3:95:A6:43:23:9F:00:B0:7D:3A:96:36:2A:66:65:04
            X509v3 Authority Key Identifier:
                keyid:F0:DB:15:D3:F6:6B:A7:25:DE:7E:70:73:33:46:C0:3C:0E:4D:14:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/3133382e3230342e3138342e302f32342d3234203d3e20323633393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:e0:c8:91:bb:fd:4e:19:c9:34:ed:12:62:c6:dc:42:a2:61:
         04:07:6b:9a:41:5a:89:0a:7e:77:53:c6:3d:a2:98:f8:87:6c:
         55:72:1a:80:40:7f:44:9f:68:12:ff:fc:51:3b:05:77:3c:c1:
         05:30:39:1c:f8:e4:53:3d:4b:f8:23:70:2c:3c:7f:54:f8:d5:
         21:33:a8:b6:c8:64:7f:50:6a:e2:e3:71:6b:99:80:d3:f2:84:
         65:fd:73:72:39:d8:fd:4f:4e:3a:83:aa:73:7a:cc:64:79:bf:
         17:a8:cc:6f:62:af:94:24:27:8c:49:fb:e5:04:53:52:ef:48:
         49:6c:75:a5:88:89:3b:b5:5e:27:f9:a5:81:a2:84:c9:f8:b9:
         b8:39:09:9f:ab:cc:d3:a9:db:dc:30:17:f1:29:56:2c:8c:ea:
         08:a6:09:81:5d:47:75:0d:08:47:8a:79:51:02:b6:33:c1:8e:
         ea:f8:a3:1d:04:cf:cf:f6:dd:b6:22:e3:aa:7a:5a:d2:46:bb:
         72:ac:ba:7e:1e:01:63:57:91:83:a9:8c:ab:f8:a8:23:cf:2d:
         23:07:38:1b:15:27:fb:8f:35:cc:8f:01:75:2b:4c:7b:b9:e4:
         5c:b4:d0:aa:be:9b:32:a9:98:f1:2c:39:52:e4:94:98:73:98:
         35:c4:14:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 13:29:15 2026 by rpki-client