Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/0/3133382e39342e38342e302f32322d3234203d3e20323633353734.roa
File:                     3133382e39342e38342e302f32322d3234203d3e20323633353734.roa (raw, json)
Hash identifier:          03YvD3LDLkEZKXzcpDfdNthiSvOQGzybozMSPWywbY8=
Subject key identifier:   B4:88:21:5F:E3:F5:08:C8:95:9D:EE:D4:5F:C0:6A:93:BD:C7:51:3E
Certificate issuer:       /CN=72D7F72D16096A110FFAEA11F47C40B7AED4E0BF
Certificate serial:       5F7878B9E3769EC4C8A6A1BDC168007ED4DB7810
Authority key identifier: 72:D7:F7:2D:16:09:6A:11:0F:FA:EA:11:F4:7C:40:B7:AE:D4:E0:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D7F72D16096A110FFAEA11F47C40B7AED4E0BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/0/3133382e39342e38342e302f32322d3234203d3e20323633353734.roa
Signing time:             Wed 09 Sep 2026 17:58:16 +0000
ROA not before:           Wed 09 Sep 2026 17:53:16 +0000
ROA not after:            Wed 08 Sep 2027 17:58:16 +0000
asID:                     263574
IP address blocks:        138.94.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/0/72D7F72D16096A110FFAEA11F47C40B7AED4E0BF.crl
                          rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/0/72D7F72D16096A110FFAEA11F47C40B7AED4E0BF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D7F72D16096A110FFAEA11F47C40B7AED4E0BF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 06:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:78:78:b9:e3:76:9e:c4:c8:a6:a1:bd:c1:68:00:7e:d4:db:78:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D7F72D16096A110FFAEA11F47C40B7AED4E0BF
        Validity
            Not Before: Sep  9 17:53:16 2026 GMT
            Not After : Sep  8 17:58:16 2027 GMT
        Subject: CN=B488215FE3F508C8959DEED45FC06A93BDC7513E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3c:ce:86:83:35:7d:6a:71:77:2c:9b:92:75:
                    c5:37:23:43:ed:c4:b0:c9:7c:cb:33:e2:4d:36:13:
                    e3:de:ac:76:f3:6c:34:5c:35:99:da:c1:8c:25:6f:
                    b1:fe:9e:38:e9:64:61:c2:fc:04:c6:c0:70:c9:b5:
                    99:ee:dd:ab:90:b1:ae:eb:99:e3:fa:de:17:0e:a8:
                    6a:fa:d7:ef:f6:88:52:94:36:d6:dd:eb:32:75:6b:
                    63:77:0f:23:77:60:13:21:20:5b:c6:30:ef:6e:32:
                    a2:3d:6a:76:5c:75:a8:3e:9d:0a:74:cd:93:6f:69:
                    d5:62:77:4a:e8:0e:0d:6e:05:f4:f2:ca:d0:07:ef:
                    29:b8:04:f8:73:9c:b7:9e:50:78:81:48:f7:ac:37:
                    2c:e0:44:1e:1f:a4:7f:04:c5:73:1a:a9:bb:7d:e0:
                    29:ce:e4:86:c4:47:e8:8a:c3:67:32:c2:57:8b:20:
                    93:38:52:1d:b9:d0:15:a7:cb:c5:41:ca:28:36:d4:
                    5b:dc:a6:3a:cb:87:34:8f:5e:fa:e2:6c:9b:81:14:
                    d4:00:5c:ce:55:29:67:6c:88:28:67:e8:7e:e3:32:
                    ee:3f:bd:94:1a:c9:48:f4:a3:53:5c:81:a6:2c:f0:
                    01:19:41:27:77:22:07:c9:bb:d4:d5:1c:17:e1:5b:
                    f6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:88:21:5F:E3:F5:08:C8:95:9D:EE:D4:5F:C0:6A:93:BD:C7:51:3E
            X509v3 Authority Key Identifier:
                keyid:72:D7:F7:2D:16:09:6A:11:0F:FA:EA:11:F4:7C:40:B7:AE:D4:E0:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/0/72D7F72D16096A110FFAEA11F47C40B7AED4E0BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D7F72D16096A110FFAEA11F47C40B7AED4E0BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/0/3133382e39342e38342e302f32322d3234203d3e20323633353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:6d:af:95:66:f0:02:e9:22:b4:95:da:3a:d4:39:0f:a5:a8:
         29:71:14:38:c3:50:f2:41:e4:5d:6b:ca:bc:90:9a:02:2a:c5:
         c2:4e:92:3e:59:00:38:bd:e4:4e:2e:bb:5c:f8:b6:7b:87:37:
         a9:fe:d1:c6:83:d0:ff:c5:d3:07:b6:1b:5b:5c:b5:45:3b:9b:
         c3:5f:60:97:98:8f:48:7e:59:60:72:9c:22:ce:0a:0a:81:15:
         f7:d0:b1:54:6e:16:49:9f:fa:18:bb:61:a8:f5:e1:cd:88:8e:
         b6:6e:be:de:4a:bd:43:e6:e1:1f:33:67:5f:b9:9d:20:4e:0d:
         69:e7:3c:fb:2f:ff:de:2a:32:36:6e:1f:d5:92:2c:19:8c:aa:
         21:f2:a1:51:e0:7b:7b:51:cd:1c:f7:27:0a:96:16:9d:fb:e6:
         25:ef:57:00:00:a2:53:4e:34:9e:78:7c:ce:38:7f:78:2c:05:
         2b:03:5c:21:4f:1d:22:0a:6f:24:d6:50:c3:5d:77:bc:8c:56:
         ad:f6:f1:4a:9e:6a:c0:9f:ea:82:cd:1f:c9:ba:9c:57:b2:e6:
         e9:07:fc:06:6d:6c:7a:4d:0f:f6:8e:b4:d1:23:89:0b:02:5c:
         09:b2:e4:89:80:f6:59:91:6d:78:bb:1c:a5:c1:f8:c9:e7:34:
         f4:ef:41:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----