Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/2/3133382e3230342e3232372e302f32342d3234203d3e20323633393135.roa
File:                     3133382e3230342e3232372e302f32342d3234203d3e20323633393135.roa (raw, json)
Hash identifier:          3ph/umUrCqXegSdu34P8NJ/uVXK51CqfyiNXoplOFfg=
Subject key identifier:   24:FE:B9:74:9E:B6:1F:29:99:DC:8A:91:A6:43:B6:D0:1F:C2:D6:E5
Certificate issuer:       /CN=D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643
Certificate serial:       1E1241D0B976C5592964DB63A7DA6E214715A787
Authority key identifier: D3:CB:04:EE:0B:E9:FF:3E:45:D2:10:20:E3:5A:20:C0:2C:DF:96:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/2/3133382e3230342e3232372e302f32342d3234203d3e20323633393135.roa
Signing time:             Mon 20 Jul 2026 14:56:23 +0000
ROA not before:           Mon 20 Jul 2026 14:51:23 +0000
ROA not after:            Mon 19 Jul 2027 14:56:23 +0000
asID:                     263915
IP address blocks:        138.204.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/2/D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643.crl
                          rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/2/D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 18:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:12:41:d0:b9:76:c5:59:29:64:db:63:a7:da:6e:21:47:15:a7:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643
        Validity
            Not Before: Jul 20 14:51:23 2026 GMT
            Not After : Jul 19 14:56:23 2027 GMT
        Subject: CN=24FEB9749EB61F2999DC8A91A643B6D01FC2D6E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:36:46:d3:33:ea:3c:80:0c:13:01:99:d3:d8:
                    78:77:b5:73:a1:2c:39:3f:5c:18:b1:4f:df:f8:0e:
                    fc:5e:1f:85:78:53:e6:2e:12:15:e4:a2:7b:a8:7e:
                    af:f2:90:ad:6d:22:27:9d:5a:43:3a:79:eb:62:09:
                    ed:cc:1d:76:b0:44:a1:d9:74:72:0a:3f:42:f3:41:
                    e2:73:f9:44:ae:62:c5:48:d3:d5:57:9f:01:c4:91:
                    c1:0c:a0:24:d8:b8:e3:5d:0f:0b:0a:70:b9:14:bf:
                    2b:42:d7:13:23:fb:7d:df:c8:26:df:9e:eb:b8:32:
                    38:1d:15:dd:5f:27:6a:e8:a2:15:f9:0c:bf:7c:7f:
                    87:26:b8:73:42:8e:a0:15:59:66:22:57:ee:ac:17:
                    fd:f2:fe:d3:0d:37:85:29:8a:ad:1e:dc:cf:4f:70:
                    83:20:14:a6:9e:12:ce:29:eb:b7:17:9f:2d:b1:a4:
                    4c:42:4c:01:05:e3:42:72:7b:9e:0d:da:ad:90:13:
                    0b:39:ee:ec:ef:3c:67:0d:03:71:dd:34:56:0f:6a:
                    1a:b4:14:37:98:9b:55:08:c2:59:f7:ff:0a:db:7c:
                    71:a6:22:c1:a0:d5:98:7f:15:97:3c:55:1c:39:e0:
                    cf:30:6c:82:9d:9d:f8:20:65:ac:c4:de:0b:2e:3b:
                    d8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:FE:B9:74:9E:B6:1F:29:99:DC:8A:91:A6:43:B6:D0:1F:C2:D6:E5
            X509v3 Authority Key Identifier:
                keyid:D3:CB:04:EE:0B:E9:FF:3E:45:D2:10:20:E3:5A:20:C0:2C:DF:96:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/2/D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/2/3133382e3230342e3232372e302f32342d3234203d3e20323633393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:27:f9:2d:2a:14:80:4e:4c:1b:07:ab:e9:89:7b:cc:7c:5a:
         a2:76:50:bf:84:0b:12:cc:fb:ea:be:30:5b:68:d2:04:f3:56:
         bd:c2:e4:43:fe:2c:e8:ca:32:2d:90:4d:ea:ed:c3:b8:f4:a4:
         a2:0c:5d:a2:1a:ec:0d:a5:30:01:bb:da:a0:60:c5:6e:29:1a:
         b8:54:16:29:7b:6e:73:81:b6:a8:1b:bf:15:33:ab:fa:4e:ca:
         28:94:d3:31:04:a3:da:9d:61:cb:8b:99:ca:0f:25:63:8f:71:
         64:a3:a9:94:12:61:d1:d0:c5:a4:2f:9e:9a:ed:05:96:63:b7:
         b8:95:db:cd:33:b2:6c:62:1a:95:51:78:e4:88:ad:dc:43:83:
         00:ef:16:d3:34:48:ed:b3:1c:d3:4c:86:f9:44:02:53:d8:88:
         47:bd:69:db:c5:bf:1a:34:34:5f:d5:8c:d2:81:a6:68:03:28:
         39:14:3c:49:3e:e4:44:60:99:98:e8:f9:31:0f:66:22:35:be:
         25:06:c1:7b:37:68:18:5f:82:53:ac:cd:b6:f0:5e:9c:da:df:
         62:10:a5:8c:0c:0b:0b:41:0a:c1:91:d6:ca:a9:1c:bc:56:61:
         e5:ee:47:52:ea:f4:c7:a4:59:87:df:a1:e6:60:ab:04:8a:ce:
         0b:86:e3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:52 2026 by rpki-client