Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/2/3133382e3230342e3232362e302f32342d3234203d3e20323633393135.roa
File:                     3133382e3230342e3232362e302f32342d3234203d3e20323633393135.roa (raw, json)
Hash identifier:          vMjIuYvc93D5O8I81gaBoWPUMymesjqQjpqzIXCnQiI=
Subject key identifier:   72:B5:AE:AC:F2:2F:F8:0F:8A:D5:0F:F5:1A:2A:66:BF:3B:21:F5:10
Certificate issuer:       /CN=D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643
Certificate serial:       2E12DB68378EBB145E44902B8671E6210612015F
Authority key identifier: D3:CB:04:EE:0B:E9:FF:3E:45:D2:10:20:E3:5A:20:C0:2C:DF:96:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/2/3133382e3230342e3232362e302f32342d3234203d3e20323633393135.roa
Signing time:             Mon 20 Jul 2026 14:56:18 +0000
ROA not before:           Mon 20 Jul 2026 14:51:18 +0000
ROA not after:            Mon 19 Jul 2027 14:56:18 +0000
asID:                     263915
IP address blocks:        138.204.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/2/D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643.crl
                          rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/2/D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 18:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:12:db:68:37:8e:bb:14:5e:44:90:2b:86:71:e6:21:06:12:01:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643
        Validity
            Not Before: Jul 20 14:51:18 2026 GMT
            Not After : Jul 19 14:56:18 2027 GMT
        Subject: CN=72B5AEACF22FF80F8AD50FF51A2A66BF3B21F510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:17:08:c7:5b:5f:60:5b:16:1b:0a:3a:7a:86:
                    0d:26:3b:34:02:7b:cb:5d:d7:82:94:d9:1f:51:96:
                    e1:44:c2:b5:06:67:ec:f7:91:68:74:52:43:32:78:
                    67:db:77:b6:24:7d:c0:74:41:78:03:1a:0c:fa:82:
                    34:01:b8:76:a0:c0:d3:2b:b8:3c:21:ee:81:b6:18:
                    79:24:91:cb:30:8d:67:e1:2a:10:42:b4:f2:38:32:
                    7b:1b:a8:20:fc:6f:92:d3:60:59:cb:18:d5:df:1d:
                    a8:e3:40:c6:93:6b:2b:98:aa:49:0c:8b:86:76:a2:
                    6c:6e:19:bc:2c:84:7c:66:75:48:60:46:41:24:e7:
                    79:cb:29:c2:43:f5:24:84:eb:0b:92:5c:f6:fa:6a:
                    fb:07:8d:d6:75:b9:6a:89:63:7c:a9:d1:31:29:0e:
                    09:6b:0b:0a:a7:80:69:cb:a8:d8:93:d4:4d:cb:e7:
                    23:3a:a1:94:0c:53:a2:8d:29:82:6f:63:62:59:6a:
                    4a:14:be:bc:fb:90:96:fe:e7:e1:2f:f6:46:c8:e3:
                    be:10:e7:fa:03:3d:0b:5a:f2:ef:8f:14:df:ad:0e:
                    38:7f:ed:59:26:2c:fe:3e:f0:13:21:14:8b:f8:3a:
                    d6:0f:2d:47:a5:4b:69:65:23:73:7e:b9:12:8d:c8:
                    b9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B5:AE:AC:F2:2F:F8:0F:8A:D5:0F:F5:1A:2A:66:BF:3B:21:F5:10
            X509v3 Authority Key Identifier:
                keyid:D3:CB:04:EE:0B:E9:FF:3E:45:D2:10:20:E3:5A:20:C0:2C:DF:96:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/2/D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/2/3133382e3230342e3232362e302f32342d3234203d3e20323633393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:04:c0:45:0b:58:f7:5f:0c:db:a8:82:e2:72:92:78:da:ea:
         30:27:4d:f5:9d:1e:01:3a:d1:a3:6c:56:a8:c7:08:36:36:cb:
         d8:a8:c7:33:79:d2:4f:bc:4b:c6:9c:ff:b1:c4:ce:59:22:87:
         09:63:75:03:b4:d4:21:eb:54:d4:58:03:25:a2:52:35:bc:fe:
         54:d1:fa:eb:93:26:0e:f0:9e:f2:cb:3f:19:df:c3:30:f3:07:
         9b:ba:c8:f8:d6:86:96:b9:3e:b9:5e:25:42:fb:44:a1:6b:33:
         d5:92:8e:0b:35:c3:66:6b:9c:c6:86:8b:f0:ca:a9:e2:90:98:
         f2:09:2d:19:2e:17:f0:c7:ac:53:eb:52:23:c9:22:e5:a0:ac:
         e1:d5:c6:b4:4d:df:81:e1:55:31:33:1f:d3:f8:a5:7d:04:d8:
         ba:aa:f4:76:a1:ef:66:c0:a9:ec:8b:f1:ae:9a:f1:24:16:ae:
         cb:d6:4f:92:35:fa:9a:4a:cf:cf:76:01:46:1b:16:58:a5:ea:
         60:7a:da:91:e4:19:27:5d:64:f3:3b:9f:31:8f:ab:f5:d7:8e:
         ac:65:8e:85:1b:17:67:f6:8a:23:4f:ee:ce:14:e0:57:fc:f3:
         e8:45:22:ac:cd:ad:f9:8e:f6:3a:e3:bf:da:43:64:92:f2:36:
         2c:42:47:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:52 2026 by rpki-client