Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/36xLerUMPWj4Sih66NqxwERiTR5Q4BLadqioChteHDmM/0/3133382e3231392e3133362e302f32322d3332203d3e20323633393331.roa
File:                     3133382e3231392e3133362e302f32322d3332203d3e20323633393331.roa (raw, json)
Hash identifier:          O2acMIt4kHXXaytAuvCyVnAkfN4S5myGUmaM63KLRAc=
Subject key identifier:   49:91:70:B1:2F:60:77:DF:13:5A:70:D9:B9:D4:51:16:D5:D7:59:B0
Certificate issuer:       /CN=C45C77C8570A84BD7AF2E5A91CF82D584E8167A5
Certificate serial:       5F81AD9BBFDC29E9A13AD1F3CA77C13560D5713D
Authority key identifier: C4:5C:77:C8:57:0A:84:BD:7A:F2:E5:A9:1C:F8:2D:58:4E:81:67:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C45C77C8570A84BD7AF2E5A91CF82D584E8167A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/36xLerUMPWj4Sih66NqxwERiTR5Q4BLadqioChteHDmM/0/3133382e3231392e3133362e302f32322d3332203d3e20323633393331.roa
Signing time:             Tue 07 Jul 2026 21:06:52 +0000
ROA not before:           Tue 07 Jul 2026 21:01:52 +0000
ROA not after:            Tue 06 Jul 2027 21:06:52 +0000
asID:                     263931
IP address blocks:        138.219.136.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/36xLerUMPWj4Sih66NqxwERiTR5Q4BLadqioChteHDmM/0/C45C77C8570A84BD7AF2E5A91CF82D584E8167A5.crl
                          rsync://rpki-repo.registro.br/repo/36xLerUMPWj4Sih66NqxwERiTR5Q4BLadqioChteHDmM/0/C45C77C8570A84BD7AF2E5A91CF82D584E8167A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C45C77C8570A84BD7AF2E5A91CF82D584E8167A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 19:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:81:ad:9b:bf:dc:29:e9:a1:3a:d1:f3:ca:77:c1:35:60:d5:71:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C45C77C8570A84BD7AF2E5A91CF82D584E8167A5
        Validity
            Not Before: Jul  7 21:01:52 2026 GMT
            Not After : Jul  6 21:06:52 2027 GMT
        Subject: CN=499170B12F6077DF135A70D9B9D45116D5D759B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:af:9a:5f:61:c2:ad:16:41:e3:cc:c4:d9:1b:
                    43:ea:1b:a9:09:15:25:97:1a:32:0b:e8:b8:ec:41:
                    24:6a:f1:94:f4:b1:54:dc:e2:69:34:74:e6:0e:99:
                    cb:8d:56:79:4b:e2:4d:59:0a:d7:9c:11:3a:bd:c6:
                    6d:01:f7:58:ae:5a:10:a0:bc:1b:cb:69:26:49:58:
                    5f:c0:3a:1e:af:49:cc:dd:b6:a8:c0:ff:16:ca:6c:
                    bc:ea:b9:34:d4:d6:06:19:8a:56:51:6d:17:19:79:
                    75:56:f0:f5:95:69:a2:23:29:f1:ae:f4:5f:6b:f1:
                    57:cc:88:19:ad:3f:50:26:3d:a3:b8:9f:d8:66:b3:
                    03:b1:52:5c:1c:b5:4e:47:a2:29:2a:5a:d5:82:26:
                    70:11:d6:6d:5c:4d:b3:76:d3:7d:ee:6d:26:43:30:
                    c8:2a:14:ed:53:cc:6d:f7:b8:62:d7:7c:e5:3d:4b:
                    95:b4:b7:65:25:c3:cf:d2:55:3f:34:d1:f1:14:c7:
                    e1:75:78:b3:c6:28:8a:0e:da:92:63:79:8e:24:ab:
                    10:d2:9d:c5:f2:53:96:e1:c7:1a:a8:d8:7f:38:ce:
                    06:df:29:bf:91:5e:5d:91:1e:db:c2:49:ee:7a:2e:
                    d5:b8:c1:91:73:27:fb:33:14:05:c4:ad:4c:a8:e5:
                    c5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:91:70:B1:2F:60:77:DF:13:5A:70:D9:B9:D4:51:16:D5:D7:59:B0
            X509v3 Authority Key Identifier:
                keyid:C4:5C:77:C8:57:0A:84:BD:7A:F2:E5:A9:1C:F8:2D:58:4E:81:67:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/36xLerUMPWj4Sih66NqxwERiTR5Q4BLadqioChteHDmM/0/C45C77C8570A84BD7AF2E5A91CF82D584E8167A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C45C77C8570A84BD7AF2E5A91CF82D584E8167A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/36xLerUMPWj4Sih66NqxwERiTR5Q4BLadqioChteHDmM/0/3133382e3231392e3133362e302f32322d3332203d3e20323633393331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:16:76:64:94:18:39:28:93:d7:b6:bb:4d:1d:0e:d4:ff:97:
         b4:54:ab:77:b9:b8:02:3b:99:c9:69:9e:b6:88:17:cb:49:c6:
         6c:b6:da:14:c7:98:3f:e7:65:98:d4:0d:8f:5d:9e:60:53:d3:
         fd:27:c2:74:7e:e4:94:0c:eb:c1:90:0f:7d:3f:1e:28:ff:07:
         62:25:2b:13:b0:c2:4a:00:72:78:e8:dd:83:60:20:f7:31:ea:
         b0:ac:e2:3c:c6:7a:b4:2e:3b:ef:68:d4:c0:69:05:7f:b8:78:
         69:41:ee:fd:83:a4:2b:01:5d:f4:5d:92:72:32:da:88:41:7b:
         45:75:47:88:4a:35:25:c1:94:6b:6d:f6:97:c8:bb:46:96:0e:
         d3:c9:78:33:22:8a:50:d6:3f:18:b9:e4:1d:10:4b:f8:8b:0c:
         56:7b:b8:ad:7a:73:8a:18:d0:69:a1:f0:37:a0:08:41:53:d5:
         64:4b:e1:62:01:d2:bd:30:96:c3:34:43:96:9d:da:79:a8:a9:
         05:53:ca:aa:16:99:6d:2a:f8:e5:7f:93:c1:80:fe:bb:30:36:
         8a:fc:28:7b:e2:c6:25:54:6f:3c:e5:01:49:1f:1b:4c:aa:8e:
         24:e5:b3:c1:dd:45:24:89:17:ef:c8:06:27:95:b5:cb:10:1c:
         6d:e4:1f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:52:57 2026 by rpki-client