Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/3133382e3131382e31362e302f32322d3332203d3e20323632323930.roa
File:                     3133382e3131382e31362e302f32322d3332203d3e20323632323930.roa (raw, json)
Hash identifier:          HQ5yy3x6sW+9XUn0h1TUQ8xpy+vwjwU3BjZB1W/QntY=
Subject key identifier:   3A:44:06:CD:57:E7:4C:8A:48:D8:EB:6F:71:8B:D8:65:48:AA:D9:18
Certificate issuer:       /CN=2A02FCEB60E97B9DF5AF17DBE6F28DFBBDBB04C9
Certificate serial:       0544FA74A7700AD1CFEDE150E1BFF74CE6231ED2
Authority key identifier: 2A:02:FC:EB:60:E9:7B:9D:F5:AF:17:DB:E6:F2:8D:FB:BD:BB:04:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A02FCEB60E97B9DF5AF17DBE6F28DFBBDBB04C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/3133382e3131382e31362e302f32322d3332203d3e20323632323930.roa
Signing time:             Wed 09 Sep 2026 16:34:20 +0000
ROA not before:           Wed 09 Sep 2026 16:29:20 +0000
ROA not after:            Wed 08 Sep 2027 16:34:20 +0000
asID:                     262290
IP address blocks:        138.118.16.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/2A02FCEB60E97B9DF5AF17DBE6F28DFBBDBB04C9.crl
                          rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/2A02FCEB60E97B9DF5AF17DBE6F28DFBBDBB04C9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A02FCEB60E97B9DF5AF17DBE6F28DFBBDBB04C9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 15:57:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:44:fa:74:a7:70:0a:d1:cf:ed:e1:50:e1:bf:f7:4c:e6:23:1e:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A02FCEB60E97B9DF5AF17DBE6F28DFBBDBB04C9
        Validity
            Not Before: Sep  9 16:29:20 2026 GMT
            Not After : Sep  8 16:34:20 2027 GMT
        Subject: CN=3A4406CD57E74C8A48D8EB6F718BD86548AAD918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:fb:d5:5e:21:13:8d:4b:e1:bc:1a:f9:fa:be:
                    80:5c:47:75:1e:ed:bc:05:82:2c:7c:d4:57:b6:37:
                    34:f3:85:fb:b9:76:59:8f:ff:33:ed:33:96:52:b2:
                    5e:64:60:d7:f1:db:3b:be:2d:7e:a8:03:a4:cd:9d:
                    b4:f2:a8:dd:78:fe:59:88:b6:88:91:02:fa:fb:b5:
                    b9:4f:43:f4:03:7f:f3:2c:db:b7:dd:28:43:04:c3:
                    b9:f6:d8:00:77:1f:20:9d:ee:7f:16:60:3f:17:58:
                    87:8a:7f:f2:56:fb:d3:3d:f4:ac:36:ef:ad:fe:74:
                    29:30:90:a6:ca:08:e1:81:61:01:da:1d:69:bd:f0:
                    9a:ee:ee:8a:f3:41:3e:d6:9c:a6:33:ab:34:f4:ca:
                    13:8f:fc:df:96:a0:9d:42:35:2b:0c:0c:91:62:f8:
                    2a:e0:c4:e4:66:03:60:1b:51:7c:de:1d:53:db:c9:
                    bb:6f:d1:c5:ba:4e:5f:53:9c:6d:0c:86:94:e7:5c:
                    80:ad:20:5d:79:77:4c:2a:84:54:81:19:6e:7c:58:
                    cb:31:25:29:88:a7:a9:8f:95:ab:1d:39:71:34:c9:
                    a4:f9:13:58:b9:cd:85:36:ea:6b:5a:d8:7b:91:1b:
                    25:c4:aa:9f:09:a0:62:ed:a4:40:4b:3e:e3:1d:aa:
                    ab:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:44:06:CD:57:E7:4C:8A:48:D8:EB:6F:71:8B:D8:65:48:AA:D9:18
            X509v3 Authority Key Identifier:
                keyid:2A:02:FC:EB:60:E9:7B:9D:F5:AF:17:DB:E6:F2:8D:FB:BD:BB:04:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/2A02FCEB60E97B9DF5AF17DBE6F28DFBBDBB04C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A02FCEB60E97B9DF5AF17DBE6F28DFBBDBB04C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/3133382e3131382e31362e302f32322d3332203d3e20323632323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:0a:78:65:ac:7d:b6:1d:2a:76:6b:f0:68:30:f5:80:99:95:
         b3:2b:db:df:5d:67:d6:54:a1:d4:10:a2:f5:71:45:7f:24:d3:
         1d:cd:59:bf:df:b4:09:b0:a1:db:d0:7a:50:08:fa:4f:6e:ae:
         20:b1:05:26:4a:85:73:f9:32:c7:17:11:1e:51:e0:6f:2e:dd:
         53:c1:56:be:7d:cf:8b:bc:23:bf:32:e6:02:ec:49:db:c5:69:
         a6:7c:4c:96:c4:82:23:6a:e8:21:a9:6b:19:df:3c:1e:15:2b:
         25:3c:7b:d0:ad:37:78:6f:b2:45:b4:b3:58:d6:ec:ab:21:67:
         64:cf:58:ef:3b:1b:a5:0b:f8:dc:ed:16:df:86:d5:a5:37:97:
         a4:dd:90:be:f8:52:07:58:4b:5e:63:52:a7:60:c4:6a:e4:35:
         7a:1f:6d:63:47:67:0c:84:6e:6b:e8:46:38:62:20:f1:e4:40:
         74:8b:91:e6:43:c9:f2:37:24:2d:e4:81:d5:d4:d8:57:25:35:
         57:0f:0c:82:30:3d:7f:16:3e:03:76:e4:18:2d:ed:f7:81:34:
         27:ef:76:72:13:29:15:a4:67:fa:67:c4:21:f2:c5:15:45:59:
         22:c9:33:e2:42:a5:15:6c:05:15:9a:ba:05:cc:a9:ef:3f:69:
         38:c7:34:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:44:30 2026 by rpki-client