Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0/3133382e3231392e39362e302f32342d3234203d3e20323633393232.roa
File:                     3133382e3231392e39362e302f32342d3234203d3e20323633393232.roa (raw, json)
Hash identifier:          g/QiqHwW1X/Pls9VqYMQ2GkqTXgdY5StLy8ulX9RLSo=
Subject key identifier:   E1:76:AA:2F:C2:A6:0F:95:18:59:EA:41:59:DD:BD:EE:82:6A:B7:7F
Certificate issuer:       /CN=8EF81DBEF48E51CE5626821BD6BC29DE6C771834
Certificate serial:       39D75A73D63AA531B18CBBA66BBE90042B65EBC9
Authority key identifier: 8E:F8:1D:BE:F4:8E:51:CE:56:26:82:1B:D6:BC:29:DE:6C:77:18:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EF81DBEF48E51CE5626821BD6BC29DE6C771834.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0/3133382e3231392e39362e302f32342d3234203d3e20323633393232.roa
Signing time:             Mon 22 Jun 2026 13:02:16 +0000
ROA not before:           Mon 22 Jun 2026 12:57:16 +0000
ROA not after:            Mon 21 Jun 2027 13:02:16 +0000
asID:                     263922
IP address blocks:        138.219.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0/8EF81DBEF48E51CE5626821BD6BC29DE6C771834.crl
                          rsync://rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0/8EF81DBEF48E51CE5626821BD6BC29DE6C771834.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EF81DBEF48E51CE5626821BD6BC29DE6C771834.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 09:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:d7:5a:73:d6:3a:a5:31:b1:8c:bb:a6:6b:be:90:04:2b:65:eb:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF81DBEF48E51CE5626821BD6BC29DE6C771834
        Validity
            Not Before: Jun 22 12:57:16 2026 GMT
            Not After : Jun 21 13:02:16 2027 GMT
        Subject: CN=E176AA2FC2A60F951859EA4159DDBDEE826AB77F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:21:9f:c6:93:6e:f8:07:c0:3d:63:bd:a1:38:
                    1a:83:f4:dd:58:5e:07:3b:52:34:c3:43:01:e2:36:
                    31:59:9f:b1:59:98:fd:cb:eb:9a:f3:ad:e7:7c:3b:
                    ed:89:dc:b4:86:ed:6b:b8:23:ab:67:4d:b7:96:80:
                    74:55:86:a1:d7:56:15:1a:44:34:1a:e0:15:4b:e0:
                    1d:ba:45:0c:6d:91:87:8f:e4:43:ab:5a:5f:e0:60:
                    b4:b0:83:bb:6e:c4:2d:39:f6:c4:c4:a7:e5:6d:99:
                    8d:56:8a:5b:36:8d:05:3f:f6:0e:8a:43:3a:cb:fc:
                    fd:41:d6:e4:83:5e:4a:88:9d:3f:0c:49:11:9f:83:
                    db:31:ac:da:df:ca:69:60:f2:42:fb:bd:a4:00:73:
                    91:26:38:c4:88:93:b7:55:8d:2a:1b:52:f2:78:8e:
                    c2:64:bf:4a:ad:37:2d:5b:7a:83:b3:c0:d1:06:6a:
                    ff:44:0f:a8:18:79:8c:7b:c7:dc:76:9f:23:a4:85:
                    87:e4:77:cd:57:0c:b0:2a:ab:48:d7:c7:c8:e6:5b:
                    05:3e:90:b4:06:68:47:72:dc:32:97:07:ee:a3:4a:
                    89:b3:d9:55:40:01:ab:f8:9a:33:e2:fe:23:31:d8:
                    90:32:26:b4:01:0d:ea:ba:20:8c:ae:42:92:34:95:
                    1a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:76:AA:2F:C2:A6:0F:95:18:59:EA:41:59:DD:BD:EE:82:6A:B7:7F
            X509v3 Authority Key Identifier:
                keyid:8E:F8:1D:BE:F4:8E:51:CE:56:26:82:1B:D6:BC:29:DE:6C:77:18:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0/8EF81DBEF48E51CE5626821BD6BC29DE6C771834.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EF81DBEF48E51CE5626821BD6BC29DE6C771834.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0/3133382e3231392e39362e302f32342d3234203d3e20323633393232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:32:d4:70:85:b0:8f:fc:1e:17:53:8d:b8:3f:a9:82:e4:94:
         ef:c4:a0:a7:9c:6e:4d:ba:d4:d2:90:b9:14:0e:1f:50:d5:ea:
         11:11:d4:80:e4:20:4e:e7:a9:16:8d:11:77:6b:ae:19:89:7c:
         2d:92:94:06:1c:a7:ed:c8:55:7c:85:4a:48:55:0d:c9:0e:fc:
         09:31:6d:39:9e:6a:63:03:f8:1d:cc:98:8e:bc:e3:a6:83:c6:
         ae:24:42:5a:11:6b:32:ff:07:59:a3:55:ff:64:3d:25:72:f4:
         3e:51:25:9f:e0:d9:a9:e3:f3:0d:73:ff:c2:fb:7a:3f:a9:be:
         fe:86:89:c5:db:8f:92:92:b8:3c:28:d6:7d:67:9f:1c:c5:7b:
         97:7e:5e:a8:32:1e:c6:63:07:11:ca:d7:94:6e:ae:2e:9f:45:
         92:d2:0e:84:28:f4:fb:7a:b0:23:f0:1e:56:77:d1:2d:19:36:
         f2:90:60:32:06:55:58:96:2b:8c:15:5a:d3:96:f8:f4:c8:23:
         f9:e4:e2:d5:b8:28:c4:74:85:c4:4b:79:89:cc:7f:6f:b8:45:
         ba:4b:d2:da:40:8c:39:14:22:4e:dd:06:b3:96:7f:f2:3d:4c:
         01:9e:32:dd:84:5c:65:51:61:01:54:ee:ff:a4:0c:9e:80:f3:
         5d:67:9e:40
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOddac9Y6pTGxjLuma76QBCtl68kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEVGODFEQkVGNDhFNTFDRTU2MjY4MjFCRDZCQzI5REU2
Qzc3MTgzNDAeFw0yNjA2MjIxMjU3MTZaFw0yNzA2MjExMzAyMTZaMDMxMTAvBgNV
BAMTKEUxNzZBQTJGQzJBNjBGOTUxODU5RUE0MTU5RERCREVFODI2QUI3N0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdIZ/Gk274B8A9Y72hOBqD9N1Y
Xgc7UjTDQwHiNjFZn7FZmP3L65rzred8O+2J3LSG7Wu4I6tnTbeWgHRVhqHXVhUa
RDQa4BVL4B26RQxtkYeP5EOrWl/gYLSwg7tuxC059sTEp+VtmY1Wils2jQU/9g6K
QzrL/P1B1uSDXkqInT8MSRGfg9sxrNrfymlg8kL7vaQAc5EmOMSIk7dVjSobUvJ4
jsJkv0qtNy1beoOzwNEGav9ED6gYeYx7x9x2nyOkhYfkd81XDLAqq0jXx8jmWwU+
kLQGaEdy3DKXB+6jSomz2VVAAav4mjPi/iMx2JAyJrQBDeq6IIyuQpI0lRpnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU4XaqL8KmD5UYWepBWd297oJqt38wHwYDVR0j
BBgwFoAUjvgdvvSOUc5WJoIb1rwp3mx3GDQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSkI5eXRZR1hXVU52VmJEd3ZBanZzQXNnMVRhMm5XQnl4QUdpV2NXWHZQ
VjYvMC84RUY4MURCRUY0OEU1MUNFNTYyNjgyMUJENkJDMjlERTZDNzcxODM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFRjgxREJFRjQ4RTUxQ0U1
NjI2ODIxQkQ2QkMyOURFNkM3NzE4MzQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0pCOXl0WUdYV1VOdlZiRHd2QWp2c0FzZzFUYTJuV0J5eEFHaVdjV1h2UFY2LzAv
MzEzMzM4MmUzMjMxMzkyZTM5MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzOTMyMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACK22AwDQYJKoZIhvcNAQELBQADggEBADIy1HCF
sI/8HhdTjbg/qYLklO/EoKecbk261NKQuRQOH1DV6hER1IDkIE7nqRaNEXdrrhmJ
fC2SlAYcp+3IVXyFSkhVDckO/AkxbTmeamMD+B3MmI6846aDxq4kQloRazL/B1mj
Vf9kPSVy9D5RJZ/g2anj8w1z/8L7ej+pvv6GicXbj5KSuDwo1n1nnxzFe5d+Xqgy
HsZjBxHK15Ruri6fRZLSDoQo9Pt6sCPwHlZ30S0ZNvKQYDIGVViWK4wVWtOW+PTI
I/nk4tW4KMR0hcRLeYnMf2+4RbpL0tpAjDkUIk7dBrOWf/I9TAGeMt2EXGVRYQFU
7v+kDJ6A811nnkA=
-----END CERTIFICATE-----
Generated at Wed Jul 8 18:07:49 2026 by rpki-client