Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G1qfcPZPy5YYoV1gY81dH4JkQUGZvD1vhuVgffrFiQ3L/2/3133382e3138352e3231322e302f32322d3234203d3e20323632343832.roa
File:                     3133382e3138352e3231322e302f32322d3234203d3e20323632343832.roa (raw, json)
Hash identifier:          N5AjXVKSQJd7J5bJelKOcWOCwLsj9TyoTdOhhim2l8M=
Subject key identifier:   9D:AD:0A:67:31:EB:37:F8:FC:41:26:84:F5:01:72:7A:8B:12:1A:14
Certificate issuer:       /CN=A096C66C522750DD8B28AE26182F90FE99954BFF
Certificate serial:       4EFF5A5B2D2DC29FDAFD76568C4C272152A3810A
Authority key identifier: A0:96:C6:6C:52:27:50:DD:8B:28:AE:26:18:2F:90:FE:99:95:4B:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A096C66C522750DD8B28AE26182F90FE99954BFF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G1qfcPZPy5YYoV1gY81dH4JkQUGZvD1vhuVgffrFiQ3L/2/3133382e3138352e3231322e302f32322d3234203d3e20323632343832.roa
Signing time:             Wed 17 Jun 2026 14:58:13 +0000
ROA not before:           Wed 17 Jun 2026 14:53:13 +0000
ROA not after:            Wed 16 Jun 2027 14:58:13 +0000
asID:                     262482
IP address blocks:        138.185.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G1qfcPZPy5YYoV1gY81dH4JkQUGZvD1vhuVgffrFiQ3L/2/A096C66C522750DD8B28AE26182F90FE99954BFF.crl
                          rsync://rpki-repo.registro.br/repo/G1qfcPZPy5YYoV1gY81dH4JkQUGZvD1vhuVgffrFiQ3L/2/A096C66C522750DD8B28AE26182F90FE99954BFF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A096C66C522750DD8B28AE26182F90FE99954BFF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 08:39:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ff:5a:5b:2d:2d:c2:9f:da:fd:76:56:8c:4c:27:21:52:a3:81:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A096C66C522750DD8B28AE26182F90FE99954BFF
        Validity
            Not Before: Jun 17 14:53:13 2026 GMT
            Not After : Jun 16 14:58:13 2027 GMT
        Subject: CN=9DAD0A6731EB37F8FC412684F501727A8B121A14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:35:b2:64:65:84:55:79:36:6d:57:ed:8e:11:
                    26:d7:b8:df:51:e3:21:51:22:9e:bc:1b:42:c6:fb:
                    e3:2e:a7:a9:a7:07:df:41:2a:d0:c8:77:58:6e:c4:
                    14:b4:5f:c1:d1:6f:12:65:e5:f1:19:84:e0:d5:f4:
                    8c:c4:48:31:19:9b:e6:ea:4d:1a:e7:8f:2d:4a:fa:
                    f3:1a:88:b1:24:86:ec:24:c7:47:07:23:78:46:b7:
                    a6:24:4c:c9:f9:70:d5:95:ad:0a:42:c4:42:65:31:
                    5e:3e:e1:73:5b:7e:ad:e2:08:fc:6d:9b:4c:a9:db:
                    69:26:3c:56:3a:e3:91:39:64:78:cd:05:49:7d:6a:
                    44:60:09:ee:0b:a1:c4:2f:08:77:ab:03:fa:f1:46:
                    bc:81:66:70:6b:9e:5c:54:be:8f:26:11:3e:ec:42:
                    97:2a:d5:30:f7:f9:7a:b8:95:c5:e3:49:e9:38:42:
                    f1:a9:e5:7b:a3:65:66:c3:65:57:c3:6e:76:47:ee:
                    58:a9:99:3c:36:5b:68:4c:63:1b:9d:17:5f:3f:10:
                    58:c8:08:ca:bb:fe:f5:92:36:94:11:cb:52:f7:7e:
                    79:b5:bf:41:a9:d1:60:20:89:3f:0c:dc:2f:4e:29:
                    f9:af:45:cb:3d:e6:94:4d:e3:e9:70:83:31:dc:9e:
                    cb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:AD:0A:67:31:EB:37:F8:FC:41:26:84:F5:01:72:7A:8B:12:1A:14
            X509v3 Authority Key Identifier:
                keyid:A0:96:C6:6C:52:27:50:DD:8B:28:AE:26:18:2F:90:FE:99:95:4B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G1qfcPZPy5YYoV1gY81dH4JkQUGZvD1vhuVgffrFiQ3L/2/A096C66C522750DD8B28AE26182F90FE99954BFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A096C66C522750DD8B28AE26182F90FE99954BFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G1qfcPZPy5YYoV1gY81dH4JkQUGZvD1vhuVgffrFiQ3L/2/3133382e3138352e3231322e302f32322d3234203d3e20323632343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:79:cc:4d:bc:ad:22:c8:0e:a2:62:6b:2a:5e:bc:5f:b6:e0:
         6f:97:60:63:7c:63:ed:2c:10:35:1a:a6:30:2f:b0:af:fa:51:
         1f:7f:d5:1d:76:e1:73:7f:c1:36:e2:b5:2d:c4:af:30:e9:a0:
         b4:1b:71:b7:6a:19:d8:f0:f5:44:3d:5f:fc:87:ab:96:20:81:
         97:f1:74:5c:4f:c5:2b:b9:8f:4e:cf:4e:bc:f0:61:ff:db:b3:
         ed:a8:02:8c:16:d1:a6:21:28:49:a5:1d:91:61:2c:f8:fa:61:
         1b:6a:05:72:be:14:39:91:81:80:a2:d8:3b:a9:c4:d8:15:a6:
         62:1d:bc:7f:33:13:70:c9:58:eb:bb:9e:31:e3:14:2c:a1:7e:
         24:25:e4:10:cf:ed:07:99:5e:3c:f4:28:13:13:82:ea:5d:17:
         54:60:cf:57:86:81:bc:7e:12:f8:8d:a7:13:59:4f:ef:16:fe:
         cd:e3:cd:e6:55:70:be:ec:11:e3:42:de:76:03:2c:1a:92:4e:
         4a:d3:36:9d:22:bb:6d:11:79:0b:66:4d:ff:ba:a8:87:db:39:
         51:b8:d2:10:3b:66:a6:1c:e1:62:c1:9d:32:14:57:4d:8b:4e:
         63:15:45:4e:4a:83:13:cc:0f:f4:99:2d:aa:a9:e2:63:84:61:
         b8:f1:08:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 13:09:35 2026 by rpki-client