Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/0/3133382e39372e3231362e302f32322d3332203d3e20323634323032.roa
File:                     3133382e39372e3231362e302f32322d3332203d3e20323634323032.roa (raw, json)
Hash identifier:          ZvL+qegYjw0tmiaoqW9AgBN3VVRT9WnJfpGsYysGB/I=
Subject key identifier:   9B:F1:11:AB:A3:01:4B:41:F2:4A:8C:40:E7:2B:95:A2:BB:36:D8:BC
Certificate issuer:       /CN=30D2D3ADA5D5272BEF2DFE936089A2433E4EA087
Certificate serial:       27DAE591D42B19BA40655250FCF759FBAC039240
Authority key identifier: 30:D2:D3:AD:A5:D5:27:2B:EF:2D:FE:93:60:89:A2:43:3E:4E:A0:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30D2D3ADA5D5272BEF2DFE936089A2433E4EA087.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/0/3133382e39372e3231362e302f32322d3332203d3e20323634323032.roa
Signing time:             Mon 27 Apr 2026 20:30:30 +0000
ROA not before:           Mon 27 Apr 2026 20:25:30 +0000
ROA not after:            Mon 26 Apr 2027 20:30:30 +0000
asID:                     264202
IP address blocks:        138.97.216.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/0/30D2D3ADA5D5272BEF2DFE936089A2433E4EA087.crl
                          rsync://rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/0/30D2D3ADA5D5272BEF2DFE936089A2433E4EA087.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30D2D3ADA5D5272BEF2DFE936089A2433E4EA087.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 15:40:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:da:e5:91:d4:2b:19:ba:40:65:52:50:fc:f7:59:fb:ac:03:92:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30D2D3ADA5D5272BEF2DFE936089A2433E4EA087
        Validity
            Not Before: Apr 27 20:25:30 2026 GMT
            Not After : Apr 26 20:30:30 2027 GMT
        Subject: CN=9BF111ABA3014B41F24A8C40E72B95A2BB36D8BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5e:d1:72:5b:27:28:90:60:4b:92:f2:0a:e3:
                    4b:97:a1:c9:c6:df:1d:b3:46:4d:46:79:73:85:a4:
                    a0:02:11:f1:99:93:48:d9:e3:b0:93:3d:ad:ab:67:
                    de:0e:3d:d2:9b:f7:34:25:5d:e8:c7:71:28:80:72:
                    f7:3a:f2:33:dd:65:aa:5e:eb:25:16:55:c4:c6:ad:
                    f7:e2:61:32:63:11:d7:45:8b:78:98:8d:b5:56:a3:
                    cf:7c:d6:b0:87:9e:ff:6b:b7:84:46:ae:60:c4:24:
                    ef:3e:86:56:6e:a7:e3:d6:a1:5b:89:3b:c2:c7:c1:
                    7a:2e:e7:85:51:f6:ef:ac:a8:1f:62:bc:6f:e1:9d:
                    e8:49:08:58:26:24:68:48:47:38:f6:6c:07:b5:b0:
                    59:56:02:47:de:a3:0a:84:5e:63:d6:9b:29:75:76:
                    cf:87:92:a0:17:21:09:10:2d:35:6e:f4:da:aa:c0:
                    2a:7f:bc:65:85:4b:c8:bb:c2:4b:0e:76:8b:36:13:
                    1f:4e:bf:fb:02:69:68:b0:3f:81:c5:89:50:69:3e:
                    c6:21:97:7f:9f:2e:9b:c7:4a:03:b5:86:29:be:f6:
                    d9:05:d6:df:6d:7f:0a:6c:ab:9c:cd:3c:3f:29:8f:
                    c0:5e:6a:1b:33:f2:a9:c4:e4:da:bc:cf:17:85:c4:
                    f8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F1:11:AB:A3:01:4B:41:F2:4A:8C:40:E7:2B:95:A2:BB:36:D8:BC
            X509v3 Authority Key Identifier:
                keyid:30:D2:D3:AD:A5:D5:27:2B:EF:2D:FE:93:60:89:A2:43:3E:4E:A0:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/0/30D2D3ADA5D5272BEF2DFE936089A2433E4EA087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30D2D3ADA5D5272BEF2DFE936089A2433E4EA087.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/0/3133382e39372e3231362e302f32322d3332203d3e20323634323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:e4:bc:18:e4:11:0b:98:5a:7d:98:98:23:92:39:2f:7f:d0:
         e7:9d:8d:ca:2c:96:7a:d0:84:82:11:a2:91:f1:f1:91:00:86:
         63:51:57:59:e9:06:84:42:33:2c:33:1b:0a:86:87:c6:a2:91:
         79:08:d9:be:4b:29:5e:4f:4c:27:6d:18:7d:4a:79:af:c6:d9:
         ad:5a:69:42:30:87:1d:ba:1f:c7:e1:96:d8:1f:98:46:d5:31:
         dc:d8:7c:8d:10:4a:3d:91:ec:b4:e5:8d:3b:b1:00:f0:73:05:
         da:cf:62:42:a2:a1:6c:e8:3d:8b:4a:83:2a:9d:42:02:0d:84:
         bc:2e:69:8e:cb:b8:1c:cd:c4:95:3a:1b:77:f7:80:66:d1:f3:
         e8:40:49:54:df:3f:5d:7e:18:c0:af:08:ca:a9:52:e6:ed:52:
         89:94:c7:74:f6:9b:ee:4c:41:04:9e:ee:17:3b:a3:ca:6b:3e:
         b7:6a:76:a5:f1:83:7f:1f:ed:d8:69:7b:5d:37:02:77:47:b1:
         7c:20:53:aa:06:33:0b:e8:aa:62:b9:24:1c:80:26:02:5e:29:
         76:3e:69:17:4b:57:b5:e0:cf:dc:ce:94:bd:94:95:73:49:15:
         d0:52:81:20:09:44:b8:c2:c0:10:67:70:2a:5c:82:66:d7:bf:
         3f:d2:5b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:50:15 2026 by rpki-client