Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/3133382e3230342e3138362e302f32332d3233203d3e20323633393037.roa
File:                     3133382e3230342e3138362e302f32332d3233203d3e20323633393037.roa (raw, json)
Hash identifier:          +JAMnMEOL72uRM6gU5QSqKxKCKq6tUL961kCbIUJiMs=
Subject key identifier:   59:15:12:6D:5E:A6:C8:E3:04:7D:0A:C7:42:02:84:12:BF:66:ED:BD
Certificate issuer:       /CN=F0DB15D3F66BA725DE7E70733346C03C0E4D1408
Certificate serial:       60588AC431C6F3008681840FBE0A3AD0A2390622
Authority key identifier: F0:DB:15:D3:F6:6B:A7:25:DE:7E:70:73:33:46:C0:3C:0E:4D:14:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/3133382e3230342e3138362e302f32332d3233203d3e20323633393037.roa
Signing time:             Mon 03 Aug 2026 14:43:07 +0000
ROA not before:           Mon 03 Aug 2026 14:38:07 +0000
ROA not after:            Mon 02 Aug 2027 14:43:07 +0000
asID:                     263907
IP address blocks:        138.204.186.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.crl
                          rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 07:49:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:58:8a:c4:31:c6:f3:00:86:81:84:0f:be:0a:3a:d0:a2:39:06:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0DB15D3F66BA725DE7E70733346C03C0E4D1408
        Validity
            Not Before: Aug  3 14:38:07 2026 GMT
            Not After : Aug  2 14:43:07 2027 GMT
        Subject: CN=5915126D5EA6C8E3047D0AC742028412BF66EDBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:01:1c:96:22:2e:8e:58:79:32:07:71:51:62:
                    37:9f:09:36:32:8c:55:62:d2:48:4e:f8:59:2e:b7:
                    c5:ad:c5:cc:ba:dc:f5:28:e1:4a:35:8b:d4:16:95:
                    9b:6f:bf:12:75:ee:3a:42:cc:65:d8:4e:d3:12:1f:
                    0c:cc:fa:1d:e0:27:88:13:19:92:16:05:df:fd:3f:
                    81:e4:a5:2d:ff:f0:ce:01:9d:68:58:83:a4:2e:69:
                    d3:e1:ae:62:c9:f2:22:e3:79:14:8d:8f:18:a2:d7:
                    bb:28:be:1a:a6:5b:fa:16:b9:1e:bc:2d:6c:3d:c6:
                    b7:9d:98:a6:38:c4:a5:b5:e7:68:ac:c4:22:dd:fa:
                    f9:aa:2c:c8:62:ee:9d:e0:55:0b:c8:b3:a6:0a:81:
                    d3:c6:c5:a8:51:b6:41:d9:dc:cd:ae:d3:f1:d5:6c:
                    24:74:15:1b:3a:d3:78:3d:95:34:76:bd:49:8d:db:
                    e2:c7:5e:34:e1:eb:73:f0:06:3c:a0:28:1a:9e:76:
                    b5:b5:47:2f:ac:50:b8:da:7c:aa:42:9b:d6:ec:46:
                    85:d7:2b:d4:82:2e:22:f8:01:e0:f6:d7:d8:52:5f:
                    ed:86:58:bf:8e:e0:3a:26:df:b5:97:78:b7:87:51:
                    7a:a4:22:27:89:77:20:93:b1:9a:36:29:c8:8b:88:
                    1f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:15:12:6D:5E:A6:C8:E3:04:7D:0A:C7:42:02:84:12:BF:66:ED:BD
            X509v3 Authority Key Identifier:
                keyid:F0:DB:15:D3:F6:6B:A7:25:DE:7E:70:73:33:46:C0:3C:0E:4D:14:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/3133382e3230342e3138362e302f32332d3233203d3e20323633393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         db:8b:1c:0d:49:a6:30:f4:3b:8a:19:07:b4:10:df:61:57:10:
         46:8a:66:b4:b1:52:63:9f:fe:3e:e2:fb:95:dd:1a:4e:b1:6a:
         2a:ef:ba:33:fb:4c:6c:85:cb:34:91:28:0f:8c:5e:d4:86:c0:
         04:e8:c3:25:80:2b:3d:02:24:98:9e:16:d8:9d:57:bb:68:2b:
         86:73:3c:d3:c2:11:8d:e6:c6:d1:94:36:c0:f9:d8:3e:d3:28:
         e4:a0:bb:ed:e1:ac:36:4a:54:76:f6:26:62:20:9a:ba:86:aa:
         cf:98:d2:a7:1f:e3:6d:29:39:3b:85:9d:9b:7e:5a:b0:15:86:
         58:39:c1:f3:b7:df:cc:47:e0:77:6c:fd:c4:32:2c:60:62:b8:
         0a:70:73:06:f1:df:50:1d:08:1e:38:b9:0e:a8:0a:40:76:84:
         34:5a:94:40:d7:f2:29:05:d3:0c:cb:e7:b7:0f:1e:50:d6:c1:
         d4:f2:e4:59:83:b6:59:c6:b5:38:25:f0:4a:ff:04:08:33:72:
         a7:69:d7:63:8b:f4:a3:9c:e2:d1:cc:ea:bc:68:a1:d2:ff:82:
         a8:d6:64:08:28:3d:06:20:44:e3:ce:5e:5f:6e:4e:07:11:0a:
         85:1a:0f:14:bb:d2:37:01:cf:bb:e0:de:90:95:87:45:8f:36:
         8b:34:ce:84
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUYFiKxDHG8wCGgYQPvgo60KI5BiIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjBEQjE1RDNGNjZCQTcyNURFN0U3MDczMzM0NkMwM0Mw
RTREMTQwODAeFw0yNjA4MDMxNDM4MDdaFw0yNzA4MDIxNDQzMDdaMDMxMTAvBgNV
BAMTKDU5MTUxMjZENUVBNkM4RTMwNDdEMEFDNzQyMDI4NDEyQkY2NkVEQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ARyWIi6OWHkyB3FRYjefCTYy
jFVi0khO+Fkut8Wtxcy63PUo4Uo1i9QWlZtvvxJ17jpCzGXYTtMSHwzM+h3gJ4gT
GZIWBd/9P4HkpS3/8M4BnWhYg6QuadPhrmLJ8iLjeRSNjxii17sovhqmW/oWuR68
LWw9xredmKY4xKW152isxCLd+vmqLMhi7p3gVQvIs6YKgdPGxahRtkHZ3M2u0/HV
bCR0FRs603g9lTR2vUmN2+LHXjTh63PwBjygKBqedrW1Ry+sULjafKpCm9bsRoXX
K9SCLiL4AeD219hSX+2GWL+O4Dom37WXeLeHUXqkIieJdyCTsZo2KciLiB/DAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUWRUSbV6myOMEfQrHQgKEEr9m7b0wHwYDVR0j
BBgwFoAU8NsV0/ZrpyXefnBzM0bAPA5NFAgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmt2eGR5eTNhalJCc3Z5em1TYlRzWjlBVTZLYkF3OVNWellnUUxQYXdS
ekovMC9GMERCMTVEM0Y2NkJBNzI1REU3RTcwNzMzMzQ2QzAzQzBFNEQxNDA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YwREIxNUQzRjY2QkE3MjVE
RTdFNzA3MzMzNDZDMDNDMEU0RDE0MDguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZrdnhkeXkzYWpSQnN2eXptU2JUc1o5QVU2S2JBdzlTVnpZZ1FMUGF3UnpKLzAv
MzEzMzM4MmUzMjMwMzQyZTMxMzgzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMzM5MzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYrMujANBgkqhkiG9w0BAQsFAAOCAQEA24sc
DUmmMPQ7ihkHtBDfYVcQRopmtLFSY5/+PuL7ld0aTrFqKu+6M/tMbIXLNJEoD4xe
1IbABOjDJYArPQIkmJ4W2J1Xu2grhnM808IRjebG0ZQ2wPnYPtMo5KC77eGsNkpU
dvYmYiCauoaqz5jSpx/jbSk5O4Wdm35asBWGWDnB87ffzEfgd2z9xDIsYGK4CnBz
BvHfUB0IHji5DqgKQHaENFqUQNfyKQXTDMvntw8eUNbB1PLkWYO2Wca1OCXwSv8E
CDNyp2nXY4v0o5zi0czqvGih0v+CqNZkCCg9BiBE485eX25OBxEKhRoPFLvSNwHP
u+DekJWHRY82izTOhA==
-----END CERTIFICATE-----
Generated at Mon Aug 24 11:37:03 2026 by rpki-client