Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0/3133382e3231392e39362e302f32332d3233203d3e20323633393232.roa
File:                     3133382e3231392e39362e302f32332d3233203d3e20323633393232.roa (raw, json)
Hash identifier:          u/kp8FxuxA3GFiMI+ODFtzT0HUHk5OacX6K89caOmq8=
Subject key identifier:   DF:85:28:6C:3E:9F:90:39:B5:A9:82:F8:74:80:9D:91:05:B4:F1:41
Certificate issuer:       /CN=8EF81DBEF48E51CE5626821BD6BC29DE6C771834
Certificate serial:       7E873FC63B7C8BB7B60768C296F3D43E9642359F
Authority key identifier: 8E:F8:1D:BE:F4:8E:51:CE:56:26:82:1B:D6:BC:29:DE:6C:77:18:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EF81DBEF48E51CE5626821BD6BC29DE6C771834.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0/3133382e3231392e39362e302f32332d3233203d3e20323633393232.roa
Signing time:             Mon 22 Jun 2026 13:02:15 +0000
ROA not before:           Mon 22 Jun 2026 12:57:15 +0000
ROA not after:            Mon 21 Jun 2027 13:02:15 +0000
asID:                     263922
IP address blocks:        138.219.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0/8EF81DBEF48E51CE5626821BD6BC29DE6C771834.crl
                          rsync://rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0/8EF81DBEF48E51CE5626821BD6BC29DE6C771834.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EF81DBEF48E51CE5626821BD6BC29DE6C771834.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 09:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:87:3f:c6:3b:7c:8b:b7:b6:07:68:c2:96:f3:d4:3e:96:42:35:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF81DBEF48E51CE5626821BD6BC29DE6C771834
        Validity
            Not Before: Jun 22 12:57:15 2026 GMT
            Not After : Jun 21 13:02:15 2027 GMT
        Subject: CN=DF85286C3E9F9039B5A982F874809D9105B4F141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b1:4e:9b:a9:a0:ff:68:04:bd:7b:ed:9d:f8:
                    fe:6a:21:a2:b2:30:7c:36:39:ba:65:3a:a9:64:26:
                    b7:40:22:b6:6d:57:bc:02:d8:32:bc:eb:31:26:96:
                    97:9c:96:e1:0e:36:9e:7f:f3:f2:51:26:d4:f6:08:
                    6e:41:82:11:be:91:d5:bb:7f:ac:3d:1f:29:e5:c5:
                    4d:10:74:4e:1e:fb:92:44:46:ef:dc:47:e7:00:46:
                    cd:f8:54:34:95:06:4a:b3:4e:84:c6:76:f0:f8:05:
                    fb:fc:e7:a0:d5:ba:4a:6c:79:f4:4f:20:f4:61:67:
                    05:70:a2:76:42:50:5a:e4:b0:e9:38:34:5e:07:6f:
                    83:6a:83:c2:0b:9f:48:55:36:39:40:b6:13:3a:35:
                    05:0b:d7:a6:29:24:f6:e4:40:81:ef:c1:ac:50:ef:
                    35:1e:f5:f8:36:c6:9c:00:23:b9:19:a0:1a:3c:f4:
                    35:00:db:42:2f:6a:92:81:f4:96:65:b0:a6:54:3b:
                    6d:86:d5:0c:38:a1:14:60:60:ab:bf:4d:ba:93:20:
                    42:f2:5c:65:fe:79:d2:9f:bb:ec:24:d9:04:ef:71:
                    55:65:9f:a4:b5:ea:76:98:b9:44:da:1f:8c:0e:da:
                    da:37:da:d3:9c:43:ba:99:7e:46:ab:06:f7:fa:2b:
                    77:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:85:28:6C:3E:9F:90:39:B5:A9:82:F8:74:80:9D:91:05:B4:F1:41
            X509v3 Authority Key Identifier:
                keyid:8E:F8:1D:BE:F4:8E:51:CE:56:26:82:1B:D6:BC:29:DE:6C:77:18:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0/8EF81DBEF48E51CE5626821BD6BC29DE6C771834.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EF81DBEF48E51CE5626821BD6BC29DE6C771834.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0/3133382e3231392e39362e302f32332d3233203d3e20323633393232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:e0:c0:32:3e:c0:3d:bc:10:81:39:66:6c:7f:6d:c8:23:d9:
         1d:1e:5d:b4:5b:40:7a:c2:59:7c:19:fe:2b:2d:0f:e1:c4:4c:
         7b:7f:19:6b:3a:d2:f5:96:c7:2a:3f:3e:37:72:4b:23:c6:74:
         ca:68:69:80:2d:19:6f:a3:7a:58:97:72:fb:0f:55:af:5d:40:
         7f:be:63:fd:08:ce:55:4b:cb:19:87:fd:dd:8c:8d:3b:63:2d:
         6d:09:3f:19:45:eb:05:81:d4:7a:a7:bf:63:73:93:2b:90:24:
         7e:d0:db:46:ce:8d:50:c9:36:46:7b:7e:a1:e2:57:86:a2:08:
         8e:ef:e6:00:cc:98:79:e8:74:da:6a:9f:20:51:f9:15:75:fb:
         be:2c:63:84:46:12:fa:25:e8:44:98:ce:5a:31:e0:77:38:01:
         d8:2b:08:c9:c6:a3:04:6b:5c:1c:b3:b5:36:e7:eb:df:23:3f:
         90:44:f3:92:50:bf:ce:59:64:a4:1e:74:47:48:92:bd:fb:5c:
         f3:61:2e:df:bc:77:61:39:ee:1c:4d:79:07:52:a9:08:69:63:
         6f:0d:8b:14:6c:2f:39:8e:31:76:d1:dd:e9:44:b0:9b:7c:bb:
         72:3b:5a:82:01:2c:2a:e7:3c:f3:b5:2c:b7:99:95:d9:f6:61:
         6f:25:4a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:01:27 2026 by rpki-client