Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/3133382e39342e3133302e302f32342d3234203d3e203631353834.roa
File:                     3133382e39342e3133302e302f32342d3234203d3e203631353834.roa (raw, json)
Hash identifier:          /P60eIa0/KJ+edOeZB6QDOOJtPveIckOTC7SLiPEGJw=
Subject key identifier:   64:7B:6B:00:A6:C7:A0:EC:83:A9:AC:86:9D:15:93:D7:BD:61:4D:06
Certificate issuer:       /CN=6B242A8818C89D2DD9D2251A26FFAEF0F59C80FF
Certificate serial:       6ED06E8208F1028B7EB1365F2C3090B90140076F
Authority key identifier: 6B:24:2A:88:18:C8:9D:2D:D9:D2:25:1A:26:FF:AE:F0:F5:9C:80:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B242A8818C89D2DD9D2251A26FFAEF0F59C80FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/3133382e39342e3133302e302f32342d3234203d3e203631353834.roa
Signing time:             Thu 03 Sep 2026 17:35:45 +0000
ROA not before:           Thu 03 Sep 2026 17:30:45 +0000
ROA not after:            Thu 02 Sep 2027 17:35:45 +0000
asID:                     61584
IP address blocks:        138.94.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/6B242A8818C89D2DD9D2251A26FFAEF0F59C80FF.crl
                          rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/6B242A8818C89D2DD9D2251A26FFAEF0F59C80FF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B242A8818C89D2DD9D2251A26FFAEF0F59C80FF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 11:05:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:d0:6e:82:08:f1:02:8b:7e:b1:36:5f:2c:30:90:b9:01:40:07:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B242A8818C89D2DD9D2251A26FFAEF0F59C80FF
        Validity
            Not Before: Sep  3 17:30:45 2026 GMT
            Not After : Sep  2 17:35:45 2027 GMT
        Subject: CN=647B6B00A6C7A0EC83A9AC869D1593D7BD614D06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f6:90:6a:aa:02:21:dc:25:84:d7:4d:06:15:
                    c9:67:51:f4:83:aa:be:e3:e3:51:3f:f3:56:d1:0b:
                    59:f9:36:a0:e8:db:6e:82:be:76:63:8c:ee:1b:f6:
                    1d:c7:d8:1a:aa:07:d9:27:39:b8:50:ff:98:3e:32:
                    31:06:c4:a0:4c:f4:2a:3c:c1:fc:83:f4:02:90:23:
                    87:2a:8d:8e:de:65:bc:59:d3:62:ec:f0:5c:3a:70:
                    5b:40:a8:7f:f1:a1:d1:0c:ff:84:8f:5a:0d:3b:1d:
                    cf:5e:c8:2a:90:d4:42:56:cd:af:53:9b:9e:23:75:
                    6c:5d:f9:23:1c:08:86:75:b0:6c:1e:ba:c3:65:59:
                    00:b9:23:5a:56:cf:81:ce:cb:91:93:6c:2f:c7:01:
                    94:82:44:d4:3f:6a:35:3e:9f:6d:11:57:68:86:85:
                    9c:dc:3c:03:0f:21:62:51:0c:5b:97:36:c5:fb:b4:
                    d8:fa:80:71:1f:5a:0e:76:47:06:2d:d4:10:9d:18:
                    6f:d0:17:bb:fb:16:c5:b0:fe:05:46:7e:80:0b:76:
                    4d:24:c7:41:2a:d1:7b:30:67:de:fe:bd:ab:29:41:
                    84:9c:7e:ba:02:08:d4:b9:d4:4a:89:3d:50:29:4f:
                    63:cc:0a:c7:8e:8f:f3:6c:78:31:ec:d2:7d:92:a8:
                    4d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:7B:6B:00:A6:C7:A0:EC:83:A9:AC:86:9D:15:93:D7:BD:61:4D:06
            X509v3 Authority Key Identifier:
                keyid:6B:24:2A:88:18:C8:9D:2D:D9:D2:25:1A:26:FF:AE:F0:F5:9C:80:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/6B242A8818C89D2DD9D2251A26FFAEF0F59C80FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B242A8818C89D2DD9D2251A26FFAEF0F59C80FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/3133382e39342e3133302e302f32342d3234203d3e203631353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:db:62:f9:6c:6c:d3:01:7c:b3:78:16:4e:a8:0d:15:41:bf:
         fc:13:78:33:36:c5:7a:46:bc:a6:72:01:5a:ac:0e:d8:86:98:
         10:01:5b:92:fe:bb:61:28:a1:7a:ca:9a:3a:79:ad:52:c0:98:
         62:42:0c:30:1d:c1:9e:9a:92:67:fe:77:91:ca:4d:97:1c:e7:
         4d:41:38:8b:46:8b:a8:b8:61:fb:71:84:0b:35:f2:f5:c0:28:
         af:0d:49:82:f0:f8:a4:43:12:16:44:d2:42:63:0f:a4:12:c6:
         94:6a:57:e6:81:1a:40:73:86:9f:52:0c:1b:74:15:d5:e6:0e:
         5f:4f:6a:ef:04:c7:d8:01:e2:42:b1:60:cb:52:1e:fb:c1:bc:
         8d:17:7d:82:48:68:25:4d:1c:e1:a2:d3:ee:20:f8:e3:59:32:
         32:e0:39:c4:79:de:8a:c3:d1:7c:0f:70:82:bd:d2:94:a5:27:
         45:06:52:b0:9e:84:0e:67:1f:4b:c4:cc:ed:91:55:59:f3:c9:
         83:75:ca:2a:97:34:c0:e7:a9:c7:ed:e1:f1:9f:73:cc:32:49:
         1c:65:7d:0c:ad:f5:e3:60:14:82:cf:1f:7e:23:81:59:c1:b3:
         cd:32:87:b5:a9:3d:87:da:9e:60:ca:c7:ea:d8:c5:1c:3c:41:
         aa:56:23:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:15:11 2026 by rpki-client