Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS266201.roa
File:                     AS266201.roa (raw, json)
Hash identifier:          nA9Tu2AyY7/d6gxRzD5KoHk86zMsjCzQP7yu3cDL3T0=
Subject key identifier:   7E:7A:5C:DF:E8:D9:9D:E3:92:C1:6F:01:59:A1:80:65:1F:B6:17:3F
Certificate issuer:       /CN=135830443F9F0628207359060862957206FBE517
Certificate serial:       368B5E766809594D89C918D8E2F0AEC571CEB0FB
Authority key identifier: 13:58:30:44:3F:9F:06:28:20:73:59:06:08:62:95:72:06:FB:E5:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/135830443F9F0628207359060862957206FBE517.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS266201.roa
Signing time:             Wed 29 Apr 2026 19:45:54 +0000
ROA not before:           Wed 29 Apr 2026 19:40:54 +0000
ROA not after:            Wed 28 Apr 2027 19:45:54 +0000
asID:                     266201
IP address blocks:        138.94.32.0/22 maxlen: 24
                          192.140.32.0/22 maxlen: 24
                          2804:3c48::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/135830443F9F0628207359060862957206FBE517.crl
                          rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/135830443F9F0628207359060862957206FBE517.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/135830443F9F0628207359060862957206FBE517.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:35:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:8b:5e:76:68:09:59:4d:89:c9:18:d8:e2:f0:ae:c5:71:ce:b0:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135830443F9F0628207359060862957206FBE517
        Validity
            Not Before: Apr 29 19:40:54 2026 GMT
            Not After : Apr 28 19:45:54 2027 GMT
        Subject: CN=7E7A5CDFE8D99DE392C16F0159A180651FB6173F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3d:93:2d:bd:d0:f2:6f:f7:d5:8c:12:09:03:
                    ab:1e:c9:c5:36:c9:21:9b:bd:6a:38:51:b7:d4:e2:
                    a6:58:f6:2b:83:39:02:b8:ee:ce:36:4a:78:be:ce:
                    92:92:c5:8b:64:2c:e5:74:d0:6a:cd:48:11:98:63:
                    85:16:f6:56:d6:33:aa:0b:7c:88:27:2d:b0:0e:08:
                    a5:98:09:a4:45:b0:27:c3:91:b7:f3:5d:bc:5d:fd:
                    87:02:54:b5:d9:78:c2:95:2e:b2:de:b5:bf:e8:54:
                    10:dd:24:9e:64:6e:f1:0b:2d:1e:29:9d:c7:20:33:
                    47:bf:51:8f:9d:b1:a2:a8:11:ab:a2:2f:7b:31:d8:
                    ad:df:a4:2e:ee:fa:e2:ce:e2:3c:64:2c:29:d0:77:
                    56:8e:e7:48:06:c6:1b:be:ad:f5:55:6f:e3:e8:fe:
                    0d:08:36:a8:f9:9b:5e:12:68:fb:d4:49:23:82:14:
                    23:28:90:5c:72:0e:2e:a9:0b:d4:1f:06:8e:91:de:
                    d1:7e:8b:a9:e0:62:2b:e0:1e:49:c4:c2:73:cc:4b:
                    e5:77:5b:01:f5:62:1b:f8:e9:19:14:71:ac:29:93:
                    cd:3e:62:86:92:fc:e6:79:d4:fe:45:0b:12:c1:b6:
                    99:4a:e6:53:01:7c:0f:3c:c6:ea:15:0c:4d:55:fb:
                    49:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:7A:5C:DF:E8:D9:9D:E3:92:C1:6F:01:59:A1:80:65:1F:B6:17:3F
            X509v3 Authority Key Identifier:
                keyid:13:58:30:44:3F:9F:06:28:20:73:59:06:08:62:95:72:06:FB:E5:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/135830443F9F0628207359060862957206FBE517.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/135830443F9F0628207359060862957206FBE517.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS266201.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.32.0/22
                  192.140.32.0/22
                IPv6:
                  2804:3c48::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:0b:fe:62:c0:62:8f:1f:17:1a:84:a7:c4:ec:44:d4:86:59:
         ae:3b:c2:38:d7:e6:a2:89:bb:68:1e:5b:32:35:96:b8:a8:4f:
         f1:7c:8a:57:37:c9:36:a1:85:56:4c:95:bd:11:00:f6:83:5a:
         93:c3:0e:23:ef:01:db:87:6e:78:9a:d2:8a:69:fc:ea:80:98:
         f7:d3:3c:87:7c:61:8d:e6:09:0e:60:74:2b:3a:3a:fa:57:79:
         fa:d5:35:f8:ce:a4:69:13:bd:3d:b9:66:fd:23:18:1c:75:19:
         72:d1:2b:48:e2:bd:77:ac:a6:8a:c9:06:79:a4:87:9e:ea:ff:
         56:ce:cd:91:9d:28:7b:75:ad:49:45:7f:3a:52:a6:02:c9:38:
         25:30:04:a3:ab:a7:af:46:9d:69:b1:4a:16:ab:76:5e:b5:83:
         5a:92:fe:38:e1:a8:6d:d3:0f:a4:78:83:3e:6b:d6:92:b0:af:
         38:62:96:46:c8:f1:e4:9b:87:9c:a2:36:d0:e2:10:4a:fe:35:
         d2:59:dd:ef:fd:46:8e:80:bc:11:3a:b2:12:03:4f:ab:69:1e:
         95:95:a3:63:6e:9d:a4:3a:b4:66:0e:da:d0:ce:79:2e:ee:3c:
         d3:64:b9:7b:18:24:91:c4:3c:92:1a:ca:30:fd:52:c3:5e:02:
         4f:35:1e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:02:45 2026 by rpki-client