Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/3133382e39392e3132342e302f32322d3232203d3e20323730393937.roa
File:                     3133382e39392e3132342e302f32322d3232203d3e20323730393937.roa (raw, json)
Hash identifier:          BixwhdFsEYFVfsT3XJhVz/wAbQOMCvlUrezZbUup2tQ=
Subject key identifier:   1A:60:15:07:EA:C0:34:52:01:5A:FD:E3:4D:FE:C6:76:9A:16:1E:9E
Certificate issuer:       /CN=258338C892819C29299C2555CE03148F8D63A950
Certificate serial:       36DC51EEA8645F3BE8724884BE91F094FE30E8AA
Authority key identifier: 25:83:38:C8:92:81:9C:29:29:9C:25:55:CE:03:14:8F:8D:63:A9:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/258338C892819C29299C2555CE03148F8D63A950.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/3133382e39392e3132342e302f32322d3232203d3e20323730393937.roa
Signing time:             Fri 19 Jun 2026 14:14:00 +0000
ROA not before:           Fri 19 Jun 2026 14:09:00 +0000
ROA not after:            Fri 18 Jun 2027 14:14:00 +0000
asID:                     270997
IP address blocks:        138.99.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/258338C892819C29299C2555CE03148F8D63A950.crl
                          rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/258338C892819C29299C2555CE03148F8D63A950.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/258338C892819C29299C2555CE03148F8D63A950.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 13:33:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:dc:51:ee:a8:64:5f:3b:e8:72:48:84:be:91:f0:94:fe:30:e8:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=258338C892819C29299C2555CE03148F8D63A950
        Validity
            Not Before: Jun 19 14:09:00 2026 GMT
            Not After : Jun 18 14:14:00 2027 GMT
        Subject: CN=1A601507EAC03452015AFDE34DFEC6769A161E9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:26:b6:32:63:3a:b7:1f:f8:f1:e4:79:a4:f0:
                    6b:38:79:53:fc:fb:ff:03:06:ab:7c:3c:38:32:50:
                    e8:6e:e2:f5:f4:b2:34:2d:3e:a5:29:dd:5f:c9:70:
                    dc:e0:fe:16:4a:26:94:1e:41:fc:86:8a:fd:98:5e:
                    1b:e1:eb:1c:31:21:36:03:c1:6e:6a:f7:56:7a:90:
                    3f:be:86:a3:b8:85:20:cf:38:ac:2c:9c:f8:f2:a0:
                    a4:52:97:38:48:14:47:1f:63:12:45:7c:d1:ab:1a:
                    fd:1d:1f:12:30:de:47:fc:54:b2:06:d1:9a:7a:c6:
                    3a:2f:1a:df:98:e3:ab:e8:4a:e4:50:92:ee:72:36:
                    c8:56:1a:4c:cd:2b:16:a0:6f:7d:0f:fa:ed:e2:3b:
                    dc:a9:ff:a5:ff:0c:99:88:fa:9e:7c:4b:f8:fc:39:
                    eb:4f:66:7a:2c:f6:7c:36:bd:a8:9b:d4:13:13:9b:
                    6f:93:6d:8f:d1:ec:b1:65:6e:0b:ee:fa:00:2c:85:
                    e4:bf:ad:68:f6:a1:79:d0:f8:e4:5f:76:58:d4:31:
                    d6:62:44:fa:68:ef:28:0e:a5:7d:3e:2b:53:72:6f:
                    52:5b:6e:54:39:82:2a:33:01:62:c2:b9:3e:4e:57:
                    96:26:29:cd:38:09:3e:68:03:51:f6:4d:98:54:98:
                    47:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:60:15:07:EA:C0:34:52:01:5A:FD:E3:4D:FE:C6:76:9A:16:1E:9E
            X509v3 Authority Key Identifier:
                keyid:25:83:38:C8:92:81:9C:29:29:9C:25:55:CE:03:14:8F:8D:63:A9:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/258338C892819C29299C2555CE03148F8D63A950.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/258338C892819C29299C2555CE03148F8D63A950.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/3133382e39392e3132342e302f32322d3232203d3e20323730393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:f0:f3:5a:cf:be:15:a5:9f:63:01:50:5e:fa:71:9b:78:01:
         2f:0e:da:00:8f:f2:96:58:db:76:de:d4:a0:e1:59:b7:bc:01:
         66:3f:0d:9c:82:0d:bb:c3:38:6f:c4:cc:1f:06:03:8a:d3:de:
         10:ce:fa:c9:58:ac:62:f5:a0:d5:40:18:b1:6d:69:a4:34:60:
         c3:81:e3:56:fc:19:8c:86:92:57:f3:40:39:ef:a8:e4:2b:a6:
         4c:e6:64:a5:c0:58:e5:f4:b3:89:49:68:62:42:f8:95:42:a8:
         cc:5c:83:05:c1:d5:5c:3b:5a:c3:42:2e:17:c4:5f:9b:ec:bb:
         e8:a2:39:1e:b0:d7:f6:ed:89:42:41:2c:e8:19:ba:2a:06:b1:
         89:95:4c:bb:7b:a7:ab:63:84:c7:82:d9:3a:94:4d:cb:6e:b7:
         a7:15:c3:da:bf:c6:12:d4:32:59:09:62:f9:73:b2:03:f3:0e:
         3d:58:c0:2d:7a:cb:dd:7a:54:3a:dc:1a:4f:c5:81:99:1f:36:
         8b:05:e9:0d:48:f4:7b:7e:a9:db:9c:24:67:77:ae:47:c8:6c:
         05:41:33:b1:1d:b6:4f:dc:4c:ab:14:c6:dc:b9:57:e2:c7:23:
         d1:83:42:f3:e0:6b:2c:92:31:8b:dd:42:aa:05:83:ab:18:97:
         b9:74:d6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:59:14 2026 by rpki-client