Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/2/3133382e3230342e3232342e302f32322d3232203d3e20323633393135.roa
File:                     3133382e3230342e3232342e302f32322d3232203d3e20323633393135.roa (raw, json)
Hash identifier:          1YCw4oBLpMiP7E0X4iuobxPFqrvYGepn9yyi3wfuizk=
Subject key identifier:   21:6E:34:62:91:A3:BD:4D:D1:37:FC:DC:7A:E0:07:16:B0:53:D1:AD
Certificate issuer:       /CN=D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643
Certificate serial:       2751C4A8982CDDA2F7CAA607B8FDD5B00E82CC06
Authority key identifier: D3:CB:04:EE:0B:E9:FF:3E:45:D2:10:20:E3:5A:20:C0:2C:DF:96:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/2/3133382e3230342e3232342e302f32322d3232203d3e20323633393135.roa
Signing time:             Mon 20 Jul 2026 14:44:05 +0000
ROA not before:           Mon 20 Jul 2026 14:39:05 +0000
ROA not after:            Mon 19 Jul 2027 14:44:05 +0000
asID:                     263915
IP address blocks:        138.204.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/2/D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643.crl
                          rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/2/D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 18:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:51:c4:a8:98:2c:dd:a2:f7:ca:a6:07:b8:fd:d5:b0:0e:82:cc:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643
        Validity
            Not Before: Jul 20 14:39:05 2026 GMT
            Not After : Jul 19 14:44:05 2027 GMT
        Subject: CN=216E346291A3BD4DD137FCDC7AE00716B053D1AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ad:98:dc:f6:68:62:7d:18:37:80:01:eb:25:
                    de:20:53:77:ef:d7:e5:00:41:96:96:0f:ef:63:37:
                    a2:c7:e4:ad:3a:d4:d2:ee:66:c8:25:eb:24:67:7f:
                    d8:aa:ca:47:61:1e:13:26:3f:e4:ac:66:af:d1:7c:
                    f7:29:f5:9b:12:9f:f8:b1:9c:d4:b1:aa:26:23:44:
                    39:2d:be:5f:e3:d6:b7:3b:2c:f2:ab:dd:bc:c4:a3:
                    26:7d:4e:6c:d1:e5:87:38:86:b4:89:12:30:a6:cd:
                    ec:b7:30:0f:75:9d:5a:9f:c8:d7:3c:fb:dc:0e:5c:
                    6d:cd:1e:39:f6:b4:11:59:0a:df:81:b9:ee:89:37:
                    cd:32:c8:8c:48:b1:56:46:66:f1:67:af:fe:9b:dd:
                    c7:8a:f5:c4:03:3b:f7:d9:67:e2:e1:b9:76:eb:ca:
                    bc:6a:8b:ef:18:92:f8:20:2c:93:88:81:de:f7:61:
                    79:cf:0b:1a:56:53:78:54:2c:4f:25:e8:5d:bd:1b:
                    a2:f2:29:70:16:c2:9f:a5:a8:c4:ce:e5:59:ea:47:
                    48:50:96:02:a1:4c:c9:ff:1e:6b:04:ef:42:25:93:
                    be:10:0c:18:28:e8:f4:ab:12:38:32:0c:a9:f1:55:
                    92:f8:8c:16:fc:87:c7:b4:91:42:f7:be:23:00:af:
                    4f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:6E:34:62:91:A3:BD:4D:D1:37:FC:DC:7A:E0:07:16:B0:53:D1:AD
            X509v3 Authority Key Identifier:
                keyid:D3:CB:04:EE:0B:E9:FF:3E:45:D2:10:20:E3:5A:20:C0:2C:DF:96:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/2/D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/2/3133382e3230342e3232342e302f32322d3232203d3e20323633393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:5d:17:1a:57:ab:65:a2:ca:11:b7:bf:69:1b:5c:20:bf:9c:
         d8:2c:7f:25:00:c1:82:e2:29:56:96:83:86:43:87:c8:f4:10:
         25:62:34:10:0d:78:f7:c7:0f:b7:69:d5:f1:e8:20:f5:f0:35:
         6f:e5:93:4d:2e:1d:6c:22:39:5e:21:8b:f4:df:fe:9f:be:7c:
         80:5d:8e:4f:e3:05:d8:79:06:3f:61:aa:65:02:20:ea:88:12:
         45:3f:24:b8:2f:7a:f6:fc:7a:01:a5:68:ac:db:8e:d6:9b:06:
         34:b5:8d:d1:d6:61:e1:07:0f:28:76:7c:99:af:b3:c2:0b:ac:
         01:0e:81:48:52:e1:b3:67:eb:0a:1c:3d:59:42:21:5c:a5:a6:
         ab:31:d1:a5:db:e2:29:b0:db:20:7f:d5:20:5f:64:06:a9:a1:
         1a:4f:b8:38:8e:d0:f7:5b:29:6c:8c:0d:0a:c3:13:f6:96:ff:
         c7:45:e1:3d:a2:b6:6a:dc:42:68:58:1c:da:94:12:f7:c3:3c:
         5c:67:7c:a7:66:d7:a6:f7:9c:56:d8:51:74:fc:8b:46:1d:5a:
         ae:1a:6b:5a:10:36:55:1f:45:23:bc:2e:32:1c:b5:f7:00:8c:
         58:8a:1c:fd:1f:14:95:c1:f8:fd:dd:f6:79:15:c5:67:80:e3:
         af:65:d9:07
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUJ1HEqJgs3aL3yqYHuP3VsA6CzAYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDNDQjA0RUUwQkU5RkYzRTQ1RDIxMDIwRTM1QTIwQzAy
Q0RGOTY0MzAeFw0yNjA3MjAxNDM5MDVaFw0yNzA3MTkxNDQ0MDVaMDMxMTAvBgNV
BAMTKDIxNkUzNDYyOTFBM0JENEREMTM3RkNEQzdBRTAwNzE2QjA1M0QxQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCprZjc9mhifRg3gAHrJd4gU3fv
1+UAQZaWD+9jN6LH5K061NLuZsgl6yRnf9iqykdhHhMmP+SsZq/RfPcp9ZsSn/ix
nNSxqiYjRDktvl/j1rc7LPKr3bzEoyZ9TmzR5Yc4hrSJEjCmzey3MA91nVqfyNc8
+9wOXG3NHjn2tBFZCt+Bue6JN80yyIxIsVZGZvFnr/6b3ceK9cQDO/fZZ+LhuXbr
yrxqi+8YkvggLJOIgd73YXnPCxpWU3hULE8l6F29G6LyKXAWwp+lqMTO5VnqR0hQ
lgKhTMn/HmsE70Ilk74QDBgo6PSrEjgyDKnxVZL4jBb8h8e0kUL3viMAr0/ZAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUIW40YpGjvU3RN/zceuAHFrBT0a0wHwYDVR0j
BBgwFoAU08sE7gvp/z5F0hAg41ogwCzflkMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2J0aXdGWmNhbXg4enJBbXlxVWVwaDZ4ZERWWnVIWHN4ZTY4dVFMZnhF
R3gvMi9EM0NCMDRFRTBCRTlGRjNFNDVEMjEwMjBFMzVBMjBDMDJDREY5NjQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzQ0IwNEVFMEJFOUZGM0U0
NUQyMTAyMEUzNUEyMEMwMkNERjk2NDMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNidGl3RlpjYW14OHpyQW15cVVlcGg2eGREVlp1SFhzeGU2OHVRTGZ4RUd4LzIv
MzEzMzM4MmUzMjMwMzQyZTMyMzIzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMzM5MzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAorM4DANBgkqhkiG9w0BAQsFAAOCAQEAN10X
GlerZaLKEbe/aRtcIL+c2Cx/JQDBguIpVpaDhkOHyPQQJWI0EA1498cPt2nV8egg
9fA1b+WTTS4dbCI5XiGL9N/+n758gF2OT+MF2HkGP2GqZQIg6ogSRT8kuC969vx6
AaVorNuO1psGNLWN0dZh4QcPKHZ8ma+zwgusAQ6BSFLhs2frChw9WUIhXKWmqzHR
pdviKbDbIH/VIF9kBqmhGk+4OI7Q91spbIwNCsMT9pb/x0XhPaK2atxCaFgc2pQS
98M8XGd8p2bXpvecVthRdPyLRh1arhprWhA2VR9FI7wuMhy19wCMWIoc/R8UlcH4
/d32eRXFZ4Djr2XZBw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:56 2026 by rpki-client