Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/3133382e3230342e38332e302f32342d3234203d3e20323633343738.roa
File:                     3133382e3230342e38332e302f32342d3234203d3e20323633343738.roa (raw, json)
Hash identifier:          7CCB6DPz25DXptDFqaidkFEWJPBJD5RKBQWmH/mEYAI=
Subject key identifier:   45:65:82:D7:86:36:54:C0:2C:E2:C7:A7:D8:17:5F:D7:90:6C:11:C5
Certificate issuer:       /CN=96E8B6585A704FD3BF88A1C96B4B9371432D4A73
Certificate serial:       0368818B2EC9922A65135EF73B42785A60009339
Authority key identifier: 96:E8:B6:58:5A:70:4F:D3:BF:88:A1:C9:6B:4B:93:71:43:2D:4A:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/3133382e3230342e38332e302f32342d3234203d3e20323633343738.roa
Signing time:             Fri 14 Aug 2026 18:51:45 +0000
ROA not before:           Fri 14 Aug 2026 18:46:45 +0000
ROA not after:            Fri 13 Aug 2027 18:51:45 +0000
asID:                     263478
IP address blocks:        138.204.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.crl
                          rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 21:13:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:68:81:8b:2e:c9:92:2a:65:13:5e:f7:3b:42:78:5a:60:00:93:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E8B6585A704FD3BF88A1C96B4B9371432D4A73
        Validity
            Not Before: Aug 14 18:46:45 2026 GMT
            Not After : Aug 13 18:51:45 2027 GMT
        Subject: CN=456582D7863654C02CE2C7A7D8175FD7906C11C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:14:45:37:4a:dc:6b:35:68:ce:5d:e1:e9:60:
                    89:d9:22:69:99:9a:89:9f:71:a4:60:98:11:8b:1b:
                    b1:9b:ba:51:5d:93:1f:df:77:68:e4:be:50:5f:92:
                    d5:7f:fb:7e:a0:ab:8b:87:86:c5:28:fb:df:79:73:
                    11:de:89:66:b4:83:3d:e4:1c:ca:5a:cd:87:67:2f:
                    d4:82:ca:d8:c9:8f:71:7c:fe:3e:49:a3:ef:ac:25:
                    dc:14:c2:00:b8:1c:eb:3c:13:e2:a8:da:04:7f:28:
                    93:09:21:bc:64:ca:2c:ae:ca:1d:d1:86:fb:77:c4:
                    06:bd:f5:06:cb:21:a1:43:05:e4:a2:2e:e5:55:63:
                    f2:03:96:78:dd:21:48:cc:11:83:1f:f7:cb:1c:71:
                    4f:ce:9a:34:73:23:3c:c8:59:de:e2:52:a8:f3:cc:
                    27:24:40:24:58:f7:1d:65:18:9f:ad:5e:60:4d:e0:
                    79:51:2b:24:94:48:0a:6b:23:16:b8:6b:c8:81:9d:
                    ff:5f:b8:81:69:09:c4:97:7f:d1:98:fb:7f:ec:78:
                    c9:61:c0:30:b6:b1:23:95:c9:fa:21:55:09:89:ab:
                    af:2f:c1:19:ec:5d:f3:ee:c8:24:66:7f:0c:31:90:
                    9b:45:61:a2:cf:32:d6:ad:bf:99:43:2a:40:aa:32:
                    75:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:65:82:D7:86:36:54:C0:2C:E2:C7:A7:D8:17:5F:D7:90:6C:11:C5
            X509v3 Authority Key Identifier:
                keyid:96:E8:B6:58:5A:70:4F:D3:BF:88:A1:C9:6B:4B:93:71:43:2D:4A:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/3133382e3230342e38332e302f32342d3234203d3e20323633343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:32:a1:9a:26:ae:2d:ef:0f:86:e8:f0:d7:7d:c9:27:13:bc:
         6a:33:04:03:5a:21:61:9b:93:76:ea:52:a0:c7:1b:43:9f:a8:
         3e:4d:c5:15:eb:be:24:5c:25:6a:b1:fa:9e:23:1b:49:c7:49:
         80:35:05:70:4d:d6:c9:b9:e8:22:e7:40:b0:7b:86:ae:1f:88:
         e1:14:73:b4:d9:5a:4c:e7:89:9e:36:78:5c:b9:b1:eb:d6:36:
         bc:37:64:bd:d3:cf:4e:80:f6:e0:96:78:9a:7d:88:8e:50:ab:
         d9:1a:51:bf:5d:5a:f3:97:69:10:6b:1b:b1:b9:2b:5e:cf:c0:
         49:e5:4e:fd:47:c3:41:d1:83:cb:37:9d:69:c6:54:62:1c:26:
         31:0a:ff:29:29:e9:73:98:82:66:9e:1a:db:94:67:3f:ae:05:
         9e:c3:c3:2d:5d:b1:2a:1a:f2:57:7f:27:85:79:9d:88:b3:45:
         f8:b3:f1:54:23:ad:43:90:85:04:39:db:7b:b9:e1:c6:a5:39:
         a8:84:b2:52:32:e5:6c:f8:9c:5e:9c:b0:36:7a:0c:ce:1c:47:
         ac:88:b4:94:1e:02:a6:d4:48:87:24:68:d5:e8:56:77:14:34:
         d3:86:36:34:f1:86:c4:98:63:2e:ee:2e:5a:d7:eb:7a:f3:4a:
         a5:0a:fb:71
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUA2iBiy7JkiplE173O0J4WmAAkzkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTZFOEI2NTg1QTcwNEZEM0JGODhBMUM5NkI0QjkzNzE0
MzJENEE3MzAeFw0yNjA4MTQxODQ2NDVaFw0yNzA4MTMxODUxNDVaMDMxMTAvBgNV
BAMTKDQ1NjU4MkQ3ODYzNjU0QzAyQ0UyQzdBN0Q4MTc1RkQ3OTA2QzExQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYFEU3StxrNWjOXeHpYInZImmZ
momfcaRgmBGLG7GbulFdkx/fd2jkvlBfktV/+36gq4uHhsUo+995cxHeiWa0gz3k
HMpazYdnL9SCytjJj3F8/j5Jo++sJdwUwgC4HOs8E+Ko2gR/KJMJIbxkyiyuyh3R
hvt3xAa99QbLIaFDBeSiLuVVY/IDlnjdIUjMEYMf98sccU/OmjRzIzzIWd7iUqjz
zCckQCRY9x1lGJ+tXmBN4HlRKySUSAprIxa4a8iBnf9fuIFpCcSXf9GY+3/seMlh
wDC2sSOVyfohVQmJq68vwRnsXfPuyCRmfwwxkJtFYaLPMtatv5lDKkCqMnXzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQURWWC14Y2VMAs4sen2Bdf15BsEcUwHwYDVR0j
BBgwFoAUlui2WFpwT9O/iKHJa0uTcUMtSnMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFdDcWVLNkNGVDh0RTVuUFczWXJ3RlVtS1UzUHRGd1FBQWphUnVGb04x
NVQvMC85NkU4QjY1ODVBNzA0RkQzQkY4OEExQzk2QjRCOTM3MTQzMkQ0QTczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2RThCNjU4NUE3MDRGRDNC
Rjg4QTFDOTZCNEI5MzcxNDMyRDRBNzMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hXQ3FlSzZDRlQ4dEU1blBXM1lyd0ZVbUtVM1B0RndRQUFqYVJ1Rm9OMTVULzAv
MzEzMzM4MmUzMjMwMzQyZTM4MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzNDM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKzFMwDQYJKoZIhvcNAQELBQADggEBABIyoZom
ri3vD4bo8Nd9yScTvGozBANaIWGbk3bqUqDHG0OfqD5NxRXrviRcJWqx+p4jG0nH
SYA1BXBN1sm56CLnQLB7hq4fiOEUc7TZWkzniZ42eFy5sevWNrw3ZL3Tz06A9uCW
eJp9iI5Qq9kaUb9dWvOXaRBrG7G5K17PwEnlTv1Hw0HRg8s3nWnGVGIcJjEK/ykp
6XOYgmaeGtuUZz+uBZ7Dwy1dsSoa8ld/J4V5nYizRfiz8VQjrUOQhQQ523u54cal
OaiEslIy5Wz4nF6csDZ6DM4cR6yItJQeAqbUSIckaNXoVncUNNOGNjTxhsSYYy7u
LlrX63rzSqUK+3E=
-----END CERTIFICATE-----
Generated at Sun Aug 23 06:01:50 2026 by rpki-client