Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2DUnNdVqr3j2fPyiVxd9WdoX6hFNNDXJFhoCvXRHgdJb/0/3133382e35392e3138382e302f32322d3332203d3e20323634313033.roa
File:                     3133382e35392e3138382e302f32322d3332203d3e20323634313033.roa (raw, json)
Hash identifier:          /TdVDAKfDwoAQ96cTB/p2lJ/mvf87G79Ie0qa5xzJto=
Subject key identifier:   EC:EA:DA:0C:1D:BC:8B:CC:8F:6E:11:70:43:DE:C7:F8:0F:34:4E:45
Certificate issuer:       /CN=F11BFF96E5449EE8D9FD98A0FA4CB933ABAB78D8
Certificate serial:       052778BD99334120374980D713D93EC68D3FA6B6
Authority key identifier: F1:1B:FF:96:E5:44:9E:E8:D9:FD:98:A0:FA:4C:B9:33:AB:AB:78:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F11BFF96E5449EE8D9FD98A0FA4CB933ABAB78D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2DUnNdVqr3j2fPyiVxd9WdoX6hFNNDXJFhoCvXRHgdJb/0/3133382e35392e3138382e302f32322d3332203d3e20323634313033.roa
Signing time:             Tue 13 Oct 2026 18:31:25 +0000
ROA not before:           Tue 13 Oct 2026 18:26:25 +0000
ROA not after:            Tue 12 Oct 2027 18:31:25 +0000
asID:                     264103
IP address blocks:        138.59.188.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2DUnNdVqr3j2fPyiVxd9WdoX6hFNNDXJFhoCvXRHgdJb/0/F11BFF96E5449EE8D9FD98A0FA4CB933ABAB78D8.crl
                          rsync://rpki-repo.registro.br/repo/2DUnNdVqr3j2fPyiVxd9WdoX6hFNNDXJFhoCvXRHgdJb/0/F11BFF96E5449EE8D9FD98A0FA4CB933ABAB78D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F11BFF96E5449EE8D9FD98A0FA4CB933ABAB78D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 01:43:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:27:78:bd:99:33:41:20:37:49:80:d7:13:d9:3e:c6:8d:3f:a6:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F11BFF96E5449EE8D9FD98A0FA4CB933ABAB78D8
        Validity
            Not Before: Oct 13 18:26:25 2026 GMT
            Not After : Oct 12 18:31:25 2027 GMT
        Subject: CN=ECEADA0C1DBC8BCC8F6E117043DEC7F80F344E45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:8a:f4:43:a5:dc:30:be:b8:4b:bd:12:41:e5:
                    af:12:f1:f8:77:c0:b4:c0:dd:5a:b5:b9:e8:bc:f6:
                    fb:08:03:ba:cf:51:d8:e6:0b:2c:b2:61:03:f7:64:
                    6d:39:d7:c8:1a:ba:a6:ac:99:67:09:c9:13:e5:50:
                    f8:5d:3c:dd:a4:66:dc:1e:93:6e:d8:e2:3b:b5:49:
                    63:d3:a8:f6:d2:cb:df:5e:3c:fb:12:2e:ce:d5:6c:
                    36:6c:51:db:dd:fa:da:54:c6:50:4f:8a:d7:33:79:
                    81:f9:35:a4:57:aa:69:fc:df:2b:5c:f4:ec:2f:e3:
                    6a:f0:02:a4:b8:a9:a9:24:15:d3:ed:cf:ad:e2:b6:
                    9f:68:23:8e:82:0f:0a:0d:92:a2:1a:4a:53:a1:bc:
                    74:28:b1:af:c7:1b:71:48:4f:90:3a:eb:8e:82:9a:
                    c1:f2:1b:c1:9e:96:a2:bb:73:f3:bb:04:e3:12:13:
                    92:ec:58:ea:9a:25:aa:41:fa:13:ce:4d:46:98:96:
                    f1:91:f2:25:1c:07:0e:84:9e:11:9a:25:2e:74:58:
                    66:f2:62:63:2d:02:85:de:77:d7:78:5d:db:0e:95:
                    66:1a:c7:44:e6:43:43:19:c4:96:d1:f8:89:6a:15:
                    7c:52:82:01:95:da:27:18:69:01:48:e1:b9:24:9e:
                    17:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:EA:DA:0C:1D:BC:8B:CC:8F:6E:11:70:43:DE:C7:F8:0F:34:4E:45
            X509v3 Authority Key Identifier:
                keyid:F1:1B:FF:96:E5:44:9E:E8:D9:FD:98:A0:FA:4C:B9:33:AB:AB:78:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2DUnNdVqr3j2fPyiVxd9WdoX6hFNNDXJFhoCvXRHgdJb/0/F11BFF96E5449EE8D9FD98A0FA4CB933ABAB78D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F11BFF96E5449EE8D9FD98A0FA4CB933ABAB78D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DUnNdVqr3j2fPyiVxd9WdoX6hFNNDXJFhoCvXRHgdJb/0/3133382e35392e3138382e302f32322d3332203d3e20323634313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ce:31:c4:43:90:24:74:13:8b:d0:2a:de:c5:21:83:c1:73:cd:
         9e:32:55:ff:34:fd:f5:2f:5b:04:c0:07:e6:ae:f9:5c:8d:55:
         6f:53:df:5d:80:ec:f7:d4:70:bd:d9:9a:4a:47:94:90:e9:96:
         3c:dd:90:44:bc:a3:a7:d2:a4:e0:56:94:f3:76:98:53:36:fb:
         3e:c0:27:eb:8f:d6:f8:fd:fa:e4:ca:7e:64:4f:b1:26:ed:71:
         a5:c7:fa:d4:3e:ac:03:8d:fe:9e:6c:40:13:7c:07:59:d4:1d:
         8b:b9:09:97:b1:61:6d:48:85:07:b1:65:54:5b:02:e7:0d:16:
         4f:39:88:1f:18:8f:c8:d1:73:7a:73:5d:dc:dd:08:e1:c5:ba:
         69:fa:72:d8:d6:4e:c5:7c:a0:51:7c:c6:90:01:ef:5c:c2:50:
         15:84:58:61:e1:5c:c0:69:4b:8a:69:34:e2:02:97:c2:13:68:
         f0:91:66:ed:34:8f:1a:6c:f5:f0:01:73:8d:cd:fc:3b:bf:5c:
         74:f8:b0:26:17:f4:c4:00:41:b3:43:d7:ea:83:75:72:fe:4e:
         22:68:ab:2a:5e:f4:a4:0d:0b:b6:a0:06:5e:e3:20:99:75:fe:
         a8:b6:f1:77:40:a0:56:c6:16:35:4b:f0:36:b8:77:91:55:e0:
         48:7a:a9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 16:12:47 2026 by rpki-client