Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/3136342e3136332e32302e302f32332d3234203d3e20323635393335.roa
File:                     3136342e3136332e32302e302f32332d3234203d3e20323635393335.roa (raw, json)
Hash identifier:          pyTcBfvsMnsbGr0mbE+eiBIk1+PVEldb9I0Psw/EjAU=
Subject key identifier:   73:8A:3F:9C:2D:3C:EE:34:CA:13:35:85:F1:62:C9:38:B6:01:BA:07
Certificate issuer:       /CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3
Certificate serial:       462025D3A3796C08A3182B027B957337F1B0F733
Authority key identifier: 38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/3136342e3136332e32302e302f32332d3234203d3e20323635393335.roa
Signing time:             Fri 03 Jul 2026 11:19:25 +0000
ROA not before:           Fri 03 Jul 2026 11:14:25 +0000
ROA not after:            Fri 02 Jul 2027 11:19:25 +0000
asID:                     265935
IP address blocks:        164.163.20.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl
                          rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 06:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:20:25:d3:a3:79:6c:08:a3:18:2b:02:7b:95:73:37:f1:b0:f7:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3
        Validity
            Not Before: Jul  3 11:14:25 2026 GMT
            Not After : Jul  2 11:19:25 2027 GMT
        Subject: CN=738A3F9C2D3CEE34CA133585F162C938B601BA07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:74:d3:eb:c8:ba:ee:36:28:47:f6:57:cb:b6:
                    af:ef:9a:d6:34:07:e7:6b:8e:eb:8c:6c:58:33:0e:
                    0e:2d:28:9d:ec:38:9f:ff:c9:e7:2d:11:14:f1:b0:
                    89:61:d3:fb:73:cf:d7:9f:9d:22:cc:e9:7e:16:f3:
                    b3:49:d0:d0:f9:f2:02:51:b0:c5:97:5c:c1:5e:52:
                    34:1f:39:d5:89:8b:18:16:98:53:f6:68:82:87:6e:
                    43:2b:ad:8b:74:82:4d:cd:2f:ac:1b:1a:3f:7e:89:
                    e6:fa:9a:0f:e2:e6:6a:4a:e1:f3:02:d2:20:ce:08:
                    a6:3d:bc:51:da:c6:9b:b8:48:b3:86:a9:4f:40:c6:
                    6a:cb:25:e4:92:19:07:42:63:da:22:5f:c2:26:15:
                    0e:bd:ea:01:98:a5:16:d5:2d:5e:2e:b2:1d:ae:96:
                    bf:67:b8:85:5d:c0:93:fe:38:81:da:35:03:c6:d5:
                    03:be:cf:9f:60:a2:68:89:f7:d6:35:7f:6e:2c:56:
                    3a:03:b4:9a:92:7c:c8:9c:6e:a5:23:f4:a0:05:5f:
                    aa:86:bb:d8:03:4c:fc:f8:7d:f7:88:21:8e:d8:46:
                    53:f6:99:89:d2:40:96:22:e4:09:0a:a0:25:2c:ff:
                    be:69:27:35:cd:25:56:79:f5:cb:8b:0f:7c:db:50:
                    2a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:8A:3F:9C:2D:3C:EE:34:CA:13:35:85:F1:62:C9:38:B6:01:BA:07
            X509v3 Authority Key Identifier:
                keyid:38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/3136342e3136332e32302e302f32332d3234203d3e20323635393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:69:4e:00:fa:4d:67:5a:9c:8a:a1:ba:e1:03:eb:97:13:9c:
         de:fa:62:87:2b:ed:08:b0:cd:c1:c7:7b:d2:e8:e6:8a:75:9e:
         7c:1b:65:a3:ed:dc:32:44:bb:fb:8a:6f:7c:9a:52:5d:0a:65:
         46:0e:51:13:4b:a9:56:a2:07:3c:5d:df:d4:65:6a:b8:16:e2:
         55:8a:3a:21:09:23:f1:87:42:4c:6c:6b:e7:0d:b3:a2:95:6e:
         8e:47:0c:cf:79:aa:53:9a:a5:74:0b:22:78:b3:62:62:62:af:
         3d:3b:46:f6:b4:00:cc:e0:69:a5:fc:55:2c:51:8e:57:d0:e8:
         84:1f:f0:52:06:31:ea:56:20:44:56:92:04:cb:42:19:5b:ab:
         be:f8:6e:af:21:36:6b:46:9e:68:c9:90:7d:a6:19:d5:7c:fb:
         ff:de:61:b1:18:34:08:be:7b:54:7d:b7:0a:c5:99:a6:44:bc:
         d4:41:17:e3:54:c0:e7:29:d5:43:82:9f:b3:54:c7:7d:a2:cf:
         03:e3:c4:d0:5d:fd:fc:a0:8c:ec:58:f9:33:8d:39:31:90:da:
         27:9f:de:de:fa:b9:f6:8d:83:58:dc:8b:91:df:7f:57:b6:55:
         7b:64:65:d8:44:28:a9:fd:1e:ec:b6:c6:28:bb:de:21:aa:82:
         44:f5:2d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:41:07 2026 by rpki-client