Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/3133382e3138362e31362e302f32322d3234203d3e203631363233.roa
File:                     3133382e3138362e31362e302f32322d3234203d3e203631363233.roa (raw, json)
Hash identifier:          JWwJnqFVLfb7s0xn8ymrfclHa6+SS+4LbQrsuCJSidU=
Subject key identifier:   2A:A8:9A:79:7B:15:5B:BD:3F:78:BB:80:C6:23:EB:BA:01:92:17:79
Certificate issuer:       /CN=BA57D239D2DC0AC257373A7BBAD51886AA5D4C46
Certificate serial:       2F964027C79EE51FD2E97F09B79F111CC6303087
Authority key identifier: BA:57:D2:39:D2:DC:0A:C2:57:37:3A:7B:BA:D5:18:86:AA:5D:4C:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/3133382e3138362e31362e302f32322d3234203d3e203631363233.roa
Signing time:             Fri 20 Mar 2026 20:34:52 +0000
ROA not before:           Fri 20 Mar 2026 20:29:52 +0000
ROA not after:            Fri 19 Mar 2027 20:34:52 +0000
asID:                     61623
IP address blocks:        138.186.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.crl
                          rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 22:19:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:96:40:27:c7:9e:e5:1f:d2:e9:7f:09:b7:9f:11:1c:c6:30:30:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA57D239D2DC0AC257373A7BBAD51886AA5D4C46
        Validity
            Not Before: Mar 20 20:29:52 2026 GMT
            Not After : Mar 19 20:34:52 2027 GMT
        Subject: CN=2AA89A797B155BBD3F78BB80C623EBBA01921779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6e:d9:3a:d1:2b:da:85:e3:16:4e:7f:3a:0e:
                    f6:9d:09:35:b9:88:8a:98:21:a6:40:36:00:6f:b9:
                    2e:ac:8f:31:d7:77:bf:89:d8:72:5f:fe:76:dd:98:
                    29:90:85:96:e5:0f:c8:c2:a1:31:bd:1c:d9:07:11:
                    39:4c:89:62:f9:6a:9c:04:55:a2:15:42:68:a6:16:
                    cc:71:83:5f:46:41:c8:1d:35:02:5b:c0:40:10:83:
                    60:69:55:84:67:83:ff:0d:16:8c:64:89:0b:d9:9e:
                    53:8c:2b:5e:bb:93:b4:ec:f3:0e:06:e5:60:ad:bd:
                    c3:99:d5:36:51:43:72:6c:d4:37:59:f1:5f:e9:2c:
                    e1:b1:3e:12:ac:5f:7e:18:ee:56:bb:6c:e9:4a:6c:
                    18:20:68:86:7b:00:9e:3d:66:ea:fc:a8:84:a7:25:
                    db:da:13:cd:e1:74:b3:70:c0:89:b0:a8:aa:b6:73:
                    b0:c9:ba:05:c6:b8:a1:63:e8:ba:c4:08:30:49:31:
                    73:e0:ce:32:ab:8e:c1:41:08:5b:22:9e:46:a0:fa:
                    e0:86:be:43:17:9f:a0:26:90:9d:11:50:b6:39:62:
                    af:27:06:aa:c9:a5:de:cc:f0:42:5b:d4:83:39:00:
                    ec:1d:eb:e9:db:3b:66:92:fc:10:2b:0a:2c:be:da:
                    77:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A8:9A:79:7B:15:5B:BD:3F:78:BB:80:C6:23:EB:BA:01:92:17:79
            X509v3 Authority Key Identifier:
                keyid:BA:57:D2:39:D2:DC:0A:C2:57:37:3A:7B:BA:D5:18:86:AA:5D:4C:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/3133382e3138362e31362e302f32322d3234203d3e203631363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:79:67:3c:63:2f:47:3b:58:00:db:ac:46:52:48:31:5b:71:
         c6:17:12:fd:f5:c7:f4:17:4e:9e:54:f7:82:82:9a:ec:28:ec:
         9d:4c:09:f9:53:24:8f:35:dc:f0:e6:9d:6e:50:ba:7d:09:36:
         20:e1:4e:4b:4e:d9:91:b1:27:84:d7:62:1e:7d:99:57:48:1f:
         91:7e:26:f3:02:95:7f:23:ee:ed:72:7b:fa:bd:1c:71:4b:49:
         40:1c:31:85:ca:ce:b3:34:26:9a:54:21:1c:c4:87:e8:9d:c8:
         73:06:cb:4a:85:c9:86:d1:e0:0f:dc:92:22:71:52:fe:35:5a:
         e2:6a:fd:11:ea:3f:2d:aa:eb:ef:88:cf:9d:0d:af:56:8c:e9:
         4d:b1:c6:46:a3:d6:f5:db:5d:c1:33:a7:82:68:5f:01:37:d1:
         d3:5d:e6:f5:60:00:30:53:45:46:aa:9f:81:88:0e:5a:ad:91:
         26:49:ed:27:2c:89:71:e3:d0:62:56:52:af:82:30:75:d8:1e:
         99:e8:48:05:1d:eb:50:53:b0:74:0e:cb:ae:aa:51:e9:ae:fe:
         80:0d:01:94:3e:d7:4a:7e:40:8c:63:04:18:e0:34:e7:97:a9:
         7d:68:70:8f:4e:7c:52:6f:6c:a5:46:b0:22:83:f3:c6:ec:4f:
         a2:57:b5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:20:07 2026 by rpki-client