Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/3133382e39392e3132342e302f32332d3233203d3e20323730393937.roa
File:                     3133382e39392e3132342e302f32332d3233203d3e20323730393937.roa (raw, json)
Hash identifier:          BIEEOt3pZq+415KJIyPGs2s/tKkkfZDqiLJie322oJ8=
Subject key identifier:   C1:AD:BA:F3:FA:E3:AD:C2:46:AF:3E:5B:43:02:5E:53:D2:87:38:9E
Certificate issuer:       /CN=258338C892819C29299C2555CE03148F8D63A950
Certificate serial:       32B75DDE005AC336B405AEB2ACB5D20578057A09
Authority key identifier: 25:83:38:C8:92:81:9C:29:29:9C:25:55:CE:03:14:8F:8D:63:A9:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/258338C892819C29299C2555CE03148F8D63A950.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/3133382e39392e3132342e302f32332d3233203d3e20323730393937.roa
Signing time:             Fri 19 Jun 2026 14:13:59 +0000
ROA not before:           Fri 19 Jun 2026 14:08:59 +0000
ROA not after:            Fri 18 Jun 2027 14:13:59 +0000
asID:                     270997
IP address blocks:        138.99.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/258338C892819C29299C2555CE03148F8D63A950.crl
                          rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/258338C892819C29299C2555CE03148F8D63A950.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/258338C892819C29299C2555CE03148F8D63A950.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 13:33:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:b7:5d:de:00:5a:c3:36:b4:05:ae:b2:ac:b5:d2:05:78:05:7a:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=258338C892819C29299C2555CE03148F8D63A950
        Validity
            Not Before: Jun 19 14:08:59 2026 GMT
            Not After : Jun 18 14:13:59 2027 GMT
        Subject: CN=C1ADBAF3FAE3ADC246AF3E5B43025E53D287389E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:38:6e:b7:c7:27:c3:10:9e:8a:df:7f:e0:ac:
                    a3:54:8b:da:51:86:96:23:18:f8:55:02:a3:c9:2c:
                    2a:d5:f1:a0:13:78:06:54:39:a1:91:5f:90:84:f4:
                    a9:df:1d:a9:78:d0:d2:5b:1b:0a:29:3e:d9:85:a6:
                    b4:00:b6:b3:60:2d:63:10:cf:d1:d1:d1:7f:0f:ea:
                    d3:7c:11:13:3b:0e:ed:37:68:ee:39:62:ca:40:13:
                    a6:dd:6a:a6:90:68:67:92:82:ee:30:7b:be:dd:38:
                    39:9f:db:19:24:bd:f6:46:81:d1:d1:d1:de:c1:bc:
                    77:d7:6a:af:01:dd:97:94:1c:98:70:d2:af:99:f2:
                    0b:5e:36:46:e1:b1:fb:03:d8:1b:0c:d0:32:cd:f3:
                    de:99:f2:aa:5b:2b:ce:b6:54:64:98:34:f4:ca:47:
                    45:ee:28:29:08:91:c6:93:68:d9:51:e2:49:8d:b8:
                    0a:43:ab:e2:45:67:a5:e2:fb:fd:53:70:04:95:ce:
                    c5:f4:c2:a7:52:da:a0:d4:58:b4:15:72:c6:f9:0f:
                    07:0f:a3:ec:41:e3:bf:af:f6:7c:ba:b8:45:55:e0:
                    cc:2b:d8:af:d2:f0:34:ea:f8:f8:4f:b2:90:f4:f5:
                    0f:af:02:ee:aa:31:5c:cc:21:8e:47:7d:07:73:10:
                    db:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:AD:BA:F3:FA:E3:AD:C2:46:AF:3E:5B:43:02:5E:53:D2:87:38:9E
            X509v3 Authority Key Identifier:
                keyid:25:83:38:C8:92:81:9C:29:29:9C:25:55:CE:03:14:8F:8D:63:A9:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/258338C892819C29299C2555CE03148F8D63A950.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/258338C892819C29299C2555CE03148F8D63A950.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/3133382e39392e3132342e302f32332d3233203d3e20323730393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b8:dd:9d:af:50:d9:66:5b:35:6a:62:30:1c:2a:1c:f2:d2:7b:
         39:f7:e9:12:e5:d5:33:74:28:e6:a6:f6:a2:a2:45:53:24:79:
         79:c2:97:bb:3b:c3:8d:2e:24:30:d7:4b:9a:76:63:af:41:12:
         ce:7a:cd:4e:77:79:75:51:db:2f:72:8c:30:b8:48:a6:92:24:
         91:b5:04:90:75:2c:a9:92:bd:50:b0:71:af:9c:65:6d:0d:1c:
         cf:7c:ae:76:15:0f:7d:f5:94:30:d9:3c:dd:14:40:06:59:f3:
         48:f2:65:34:a1:7e:a3:ce:f3:a9:f3:7f:3c:b9:21:19:8a:1d:
         75:a0:72:03:b7:42:c8:78:dc:4b:83:b7:86:79:3e:00:0f:6f:
         3e:3c:be:cc:c0:12:56:af:04:04:da:df:55:31:0d:1c:06:92:
         40:c7:ee:56:01:7b:7d:7b:1d:a0:f4:9c:92:57:d8:68:c2:be:
         5d:0b:90:56:c7:ee:e8:c5:57:a7:cd:97:8c:57:df:36:d9:d1:
         06:9e:28:a5:d3:28:46:14:de:f4:f5:45:16:29:24:87:43:31:
         4f:a1:b4:f8:20:42:43:26:e2:f1:4d:75:e5:c0:f5:cc:a6:5a:
         9e:91:3b:88:b3:3c:0b:14:37:f7:05:f9:c4:d0:23:27:2f:91:
         31:e2:e9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:58:50 2026 by rpki-client