Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/0/3133382e3132322e3130342e302f32322d3234203d3e20323634333331.roa
File:                     3133382e3132322e3130342e302f32322d3234203d3e20323634333331.roa (raw, json)
Hash identifier:          1bf/wSQ5ILebjAKNlBa1ymjVhHSW/hcX4q/b9QPY6dc=
Subject key identifier:   DC:A2:DE:EB:C8:D9:38:81:1A:21:46:D4:90:DB:75:16:83:29:BA:6E
Certificate issuer:       /CN=2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1
Certificate serial:       1E3950A6D3488A3D631E798248C8AEDED92F4011
Authority key identifier: 2C:D1:1F:1C:63:9F:B5:D4:95:F1:A5:BA:66:FC:73:3D:44:CB:97:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/0/3133382e3132322e3130342e302f32322d3234203d3e20323634333331.roa
Signing time:             Fri 18 Sep 2026 14:37:17 +0000
ROA not before:           Fri 18 Sep 2026 14:32:17 +0000
ROA not after:            Fri 17 Sep 2027 14:37:17 +0000
asID:                     264331
IP address blocks:        138.122.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/0/2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1.crl
                          rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/0/2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 12:33:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:39:50:a6:d3:48:8a:3d:63:1e:79:82:48:c8:ae:de:d9:2f:40:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1
        Validity
            Not Before: Sep 18 14:32:17 2026 GMT
            Not After : Sep 17 14:37:17 2027 GMT
        Subject: CN=DCA2DEEBC8D938811A2146D490DB75168329BA6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:87:60:53:02:b3:28:8c:e8:45:cb:e0:0f:b7:
                    bc:61:50:4c:63:58:06:df:45:a6:af:4b:5f:49:ae:
                    92:0d:7f:11:a2:8c:b2:9f:e6:6f:13:74:c0:5e:82:
                    2c:f5:c3:bd:82:6d:12:5d:92:5a:1d:f5:2c:2d:11:
                    ce:f7:c4:8b:09:27:86:30:09:a3:a9:87:ea:1e:52:
                    f6:ab:5a:c7:6d:3a:df:47:62:23:43:e3:3e:02:90:
                    65:73:de:79:05:5f:7c:07:78:d9:d8:f6:03:a5:6e:
                    8a:1e:58:2c:91:11:72:07:27:ae:d6:3c:3e:d0:9d:
                    20:1d:8c:85:fc:b7:0c:da:8b:54:b9:02:f0:f5:5e:
                    43:a1:8f:53:30:c4:2f:77:3b:f2:28:58:a5:a2:44:
                    e7:e9:2f:89:51:9a:3a:0d:c0:2a:e8:e6:58:90:44:
                    6a:bd:a4:6f:95:52:d1:a4:6d:9f:aa:b7:2a:2c:50:
                    14:ab:3b:b6:c6:96:42:20:60:9b:e4:dc:ad:4c:ae:
                    ee:d8:ea:80:ad:69:ca:3e:ba:fb:3a:a5:d0:82:8d:
                    11:39:cc:5e:87:3e:22:a9:d7:e7:4f:bc:c3:3f:5d:
                    df:7b:55:6d:ef:1a:d6:eb:e2:d7:13:a6:01:d5:c1:
                    0b:2d:00:ab:cc:f5:29:b2:87:8a:ed:07:ef:e2:6b:
                    f4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:A2:DE:EB:C8:D9:38:81:1A:21:46:D4:90:DB:75:16:83:29:BA:6E
            X509v3 Authority Key Identifier:
                keyid:2C:D1:1F:1C:63:9F:B5:D4:95:F1:A5:BA:66:FC:73:3D:44:CB:97:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/0/2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/0/3133382e3132322e3130342e302f32322d3234203d3e20323634333331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:7a:0d:cb:e7:ef:7a:ca:26:52:e1:23:c7:d0:af:31:97:6c:
         5b:6e:ec:c2:f5:eb:80:56:6b:45:74:35:e8:54:d5:b7:d1:a0:
         ff:2b:65:ee:8e:7d:ae:b1:d8:43:10:15:a0:53:2e:fd:a3:a1:
         3a:99:b3:9b:5b:ab:f7:ac:5d:53:49:07:57:1c:ec:08:bc:45:
         29:e3:82:d3:3b:bc:e8:be:2b:5e:24:1c:79:8f:f8:e6:18:16:
         80:00:1e:4b:0a:db:35:91:e8:aa:08:fc:a9:e2:c3:a6:1c:d9:
         fb:91:bb:94:29:7a:ec:8b:dc:8a:65:30:8d:4e:80:69:e8:71:
         a8:18:43:89:16:cf:96:65:69:b2:fe:f9:67:e1:45:3d:99:85:
         03:66:4f:d8:fb:67:5f:d3:28:d6:75:f9:e3:a2:e2:22:5e:38:
         86:48:04:18:8f:b8:56:c6:02:84:e8:5f:4f:e0:41:d1:97:02:
         1b:7b:06:71:75:80:f7:83:2a:69:d5:25:79:1e:cd:88:33:a5:
         b3:81:f5:9b:7f:55:63:6d:65:5a:b9:e8:c9:f6:de:52:3d:7c:
         60:83:f0:d0:36:c0:65:d2:d8:8c:89:57:2b:cf:12:e0:ce:58:
         e9:d8:09:d5:85:57:d3:19:0d:1e:8f:b0:50:2c:fa:d1:13:df:
         b0:35:7d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 06:10:28 2026 by rpki-client