Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e39342e38302e302f32322d3234203d3e20323634303838.roa
File:                     3133382e39342e38302e302f32322d3234203d3e20323634303838.roa (raw, json)
Hash identifier:          QQcSC3hkOGArysnfkCGLy74xFdx1bFUbCMV+JGJjqwg=
Subject key identifier:   31:AF:85:2D:72:C1:01:90:21:28:E5:B9:43:3F:99:A8:4F:87:9A:FE
Certificate issuer:       /CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
Certificate serial:       33478B31C128960FD6392C77356F8428DC0A743E
Authority key identifier: CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e39342e38302e302f32322d3234203d3e20323634303838.roa
Signing time:             Tue 20 Oct 2026 15:42:10 +0000
ROA not before:           Tue 20 Oct 2026 15:37:10 +0000
ROA not after:            Tue 19 Oct 2027 15:42:10 +0000
asID:                     264088
IP address blocks:        138.94.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl
                          rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 23:45:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:47:8b:31:c1:28:96:0f:d6:39:2c:77:35:6f:84:28:dc:0a:74:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
        Validity
            Not Before: Oct 20 15:37:10 2026 GMT
            Not After : Oct 19 15:42:10 2027 GMT
        Subject: CN=31AF852D72C101902128E5B9433F99A84F879AFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e6:2e:2a:da:89:9e:01:cb:a6:9a:84:db:cc:
                    d7:a9:48:0c:29:e2:b2:d7:1b:12:08:ba:15:ad:44:
                    b5:89:a7:92:82:db:96:73:9f:cc:23:9c:ef:87:89:
                    f6:6b:25:a8:a1:42:cd:56:a8:ec:e4:f3:17:df:b8:
                    31:11:95:d8:4f:7c:0e:a9:20:b6:b8:c4:64:72:3a:
                    18:75:8d:73:a4:60:34:d6:f6:3d:40:b7:1e:2e:ee:
                    5a:12:36:05:01:d5:8e:0c:f8:a2:ba:f2:f8:39:d6:
                    0a:a8:87:d9:ec:fb:fc:e9:1e:8a:8c:69:1e:48:07:
                    4a:b6:cc:d7:3a:b9:1b:7c:d5:3d:4f:2d:0c:e8:46:
                    ab:91:bd:0b:95:90:5d:80:d6:e4:85:69:73:2f:92:
                    8b:02:21:0b:03:9a:21:be:19:c5:8a:df:e7:51:21:
                    f6:38:22:b6:53:79:c9:11:fa:3e:bf:04:6c:da:86:
                    27:39:a4:de:58:1f:e1:84:d3:c5:b0:d0:0b:56:0d:
                    e9:d9:18:ec:cf:6f:67:55:44:45:ed:a3:31:e8:42:
                    b3:ca:59:65:4d:3e:0d:c5:8f:b1:76:0f:48:47:fc:
                    0a:cb:f5:52:6b:23:f6:e1:3d:58:58:47:fc:84:eb:
                    f5:41:4f:c5:1c:6b:2e:b7:61:de:1c:40:c9:ba:f8:
                    f9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:AF:85:2D:72:C1:01:90:21:28:E5:B9:43:3F:99:A8:4F:87:9A:FE
            X509v3 Authority Key Identifier:
                keyid:CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e39342e38302e302f32322d3234203d3e20323634303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:60:33:2e:58:68:66:0b:65:57:3a:4a:2b:cb:62:f0:2b:99:
         a0:c9:39:8f:1b:17:80:02:9b:14:4e:c3:90:4f:b2:d1:52:8b:
         39:be:e0:d9:1b:04:a0:34:59:b1:a3:f9:18:4e:ab:58:38:64:
         ae:80:38:61:e8:be:41:03:db:75:42:a0:78:b6:05:cd:65:5c:
         3b:5a:28:2d:87:28:b8:f2:16:a8:83:43:b2:6b:a6:1d:bc:b0:
         08:ae:3e:fb:c2:85:02:24:da:4f:5d:4f:eb:e3:fd:1a:6f:b9:
         6f:99:57:29:71:19:23:ea:09:84:69:ea:c6:e0:8a:ce:e1:87:
         ea:a6:11:ba:98:8e:8c:60:ed:44:22:62:e1:62:aa:f2:e2:39:
         0e:74:aa:aa:c2:1f:20:1f:34:de:72:27:bd:23:e8:b4:d5:e1:
         33:71:c2:b2:ad:6d:6a:79:db:a5:52:89:d2:98:0c:eb:9f:ad:
         61:a6:3e:cc:34:3c:49:76:14:a5:3b:1f:a0:e1:4f:e7:7f:a8:
         d1:72:95:79:0d:c1:47:a7:b6:60:6d:c6:57:e8:af:96:17:d0:
         7c:4c:a2:bd:0a:91:a0:46:77:86:3e:53:94:d2:1e:cd:84:fe:
         9e:8a:55:17:04:b9:ab:81:34:64:12:e2:1e:fe:66:55:8b:52:
         8c:c5:93:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 18:03:00 2026 by rpki-client