Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS264299.roa
File:                     AS264299.roa (raw, json)
Hash identifier:          4lfV0BieVRf7wFHyUv4qC4a9VVygMX0YuTXxFrfIpuU=
Subject key identifier:   43:88:87:3B:BA:14:DD:6B:74:F6:05:AB:D0:AA:77:08:3F:21:52:0A
Certificate issuer:       /CN=135830443F9F0628207359060862957206FBE517
Certificate serial:       44271DF1107A3591BDB40B3000DB22967BEA1686
Authority key identifier: 13:58:30:44:3F:9F:06:28:20:73:59:06:08:62:95:72:06:FB:E5:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/135830443F9F0628207359060862957206FBE517.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS264299.roa
Signing time:             Wed 29 Apr 2026 19:45:52 +0000
ROA not before:           Wed 29 Apr 2026 19:40:52 +0000
ROA not after:            Wed 28 Apr 2027 19:45:52 +0000
asID:                     264299
IP address blocks:        138.121.152.0/22 maxlen: 24
                          170.254.20.0/22 maxlen: 24
                          2804:25bc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/135830443F9F0628207359060862957206FBE517.crl
                          rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/135830443F9F0628207359060862957206FBE517.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/135830443F9F0628207359060862957206FBE517.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:35:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:27:1d:f1:10:7a:35:91:bd:b4:0b:30:00:db:22:96:7b:ea:16:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135830443F9F0628207359060862957206FBE517
        Validity
            Not Before: Apr 29 19:40:52 2026 GMT
            Not After : Apr 28 19:45:52 2027 GMT
        Subject: CN=4388873BBA14DD6B74F605ABD0AA77083F21520A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2a:2a:f2:7c:60:a8:fe:c1:0f:ae:f8:5d:85:
                    8c:b5:c8:30:c3:ce:01:18:57:55:06:89:a4:2f:3b:
                    7a:dd:28:28:6e:6e:15:7a:eb:4d:32:48:3b:18:19:
                    5c:3f:1f:61:5d:89:23:21:34:9a:d0:02:3f:56:2b:
                    48:e1:56:77:4c:0d:bc:86:ff:07:a5:16:6b:f9:8c:
                    2d:e7:83:47:bb:28:3b:9a:63:56:31:5e:6e:12:21:
                    37:e9:71:00:35:49:df:0a:f0:3c:87:01:e5:fb:54:
                    2a:ce:13:aa:09:85:00:3d:4b:0d:5e:91:4d:04:a1:
                    1a:ea:4e:5f:00:56:61:c2:9a:34:d5:db:ab:53:ad:
                    dc:09:4a:79:fa:f4:13:4f:eb:ca:43:1e:3e:ec:f4:
                    1d:f5:e4:3f:da:db:d7:b5:3a:f7:78:a4:c8:b2:95:
                    fd:67:ea:22:e7:6d:79:76:d4:0a:88:95:37:f3:a1:
                    51:be:90:95:83:3d:1e:bf:91:92:70:1a:99:f5:22:
                    e0:f0:60:cd:46:dc:97:30:a6:47:24:fb:76:9c:bf:
                    8e:d4:4d:33:76:32:01:39:6c:31:09:a0:d2:29:ff:
                    7d:4d:7e:dd:cb:4a:6c:3c:8a:f7:35:a0:c0:dc:0c:
                    b1:d8:6c:a8:06:d4:a0:3c:a8:1d:05:f2:fd:80:18:
                    eb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:88:87:3B:BA:14:DD:6B:74:F6:05:AB:D0:AA:77:08:3F:21:52:0A
            X509v3 Authority Key Identifier:
                keyid:13:58:30:44:3F:9F:06:28:20:73:59:06:08:62:95:72:06:FB:E5:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/135830443F9F0628207359060862957206FBE517.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/135830443F9F0628207359060862957206FBE517.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS264299.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.152.0/22
                  170.254.20.0/22
                IPv6:
                  2804:25bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:95:86:30:c7:db:54:6a:82:9a:3d:2d:1b:f7:d7:a5:0e:ee:
         89:5b:fe:ca:86:c1:43:80:b0:2c:b1:1d:4a:45:0c:ac:1d:8a:
         40:32:56:b2:09:4b:c9:2e:c1:8b:25:35:1c:af:f3:05:f4:c2:
         98:9e:10:d6:65:31:35:67:86:4b:25:e3:b4:90:18:5e:0c:4a:
         55:91:23:10:37:12:19:b7:e1:b0:65:ef:8c:d8:a4:73:40:2f:
         39:c6:5f:98:8f:58:24:4d:a1:19:4c:19:70:fa:f4:41:df:1a:
         f4:8a:70:ca:12:7a:97:bb:88:25:a2:5e:ac:6b:0e:12:12:20:
         a8:35:9f:dc:b5:a9:45:3f:50:90:8f:5d:9b:00:73:4a:c4:17:
         ac:01:10:16:9e:3d:08:83:aa:bc:2a:4b:40:26:ef:ce:f9:8e:
         61:4f:04:c9:d4:f5:74:c1:72:c7:40:22:29:a9:58:59:2a:4c:
         1c:12:a5:5e:25:ad:cf:88:f5:ee:47:a6:9b:23:05:0b:6e:79:
         b5:23:a4:29:27:b2:cc:dd:30:4c:2c:ba:3a:d9:30:04:37:94:
         5f:56:1f:83:78:9e:53:d3:0c:b9:20:91:07:9a:2c:0a:f0:1f:
         09:0b:76:fc:74:0a:00:98:12:4d:b9:83:a7:ec:e6:37:c8:99:
         c9:24:f7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:42:50 2026 by rpki-client