Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3133382e3138362e34342e302f32342d3234203d3e203532373731.roa
File:                     3133382e3138362e34342e302f32342d3234203d3e203532373731.roa (raw, json)
Hash identifier:          H1CAtPqoi98qfBZ8Qhf+bclD0A+AK0qBuAwXopZ4ngQ=
Subject key identifier:   D4:CA:67:DC:64:0A:82:59:A2:73:32:F2:1E:F9:8D:48:CD:DF:25:6E
Certificate issuer:       /CN=3929491D59EC78DBDEC7423B04D06034C1A59303
Certificate serial:       2B27D844EA320AADB7E5A539A28515E2ECEB1A45
Authority key identifier: 39:29:49:1D:59:EC:78:DB:DE:C7:42:3B:04:D0:60:34:C1:A5:93:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3133382e3138362e34342e302f32342d3234203d3e203532373731.roa
Signing time:             Tue 12 May 2026 18:30:01 +0000
ROA not before:           Tue 12 May 2026 18:25:01 +0000
ROA not after:            Tue 11 May 2027 18:30:01 +0000
asID:                     52771
IP address blocks:        138.186.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.crl
                          rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 12:48:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:27:d8:44:ea:32:0a:ad:b7:e5:a5:39:a2:85:15:e2:ec:eb:1a:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3929491D59EC78DBDEC7423B04D06034C1A59303
        Validity
            Not Before: May 12 18:25:01 2026 GMT
            Not After : May 11 18:30:01 2027 GMT
        Subject: CN=D4CA67DC640A8259A27332F21EF98D48CDDF256E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b2:f2:14:13:bd:8f:4b:09:cb:ab:12:0e:45:
                    07:ec:3b:a8:86:53:7f:e8:5c:c3:41:57:b4:24:13:
                    68:74:ec:6a:79:f7:6c:33:91:9d:ed:a7:a0:3d:77:
                    0d:08:61:1b:16:58:73:d2:c6:98:2a:b3:27:47:84:
                    aa:21:cc:35:c4:5c:74:d3:c4:7b:e4:0b:c2:fc:07:
                    d5:b4:fc:d9:f0:6b:9d:ad:82:0e:4c:99:05:31:a0:
                    e7:44:d9:31:ca:79:f3:55:b0:eb:22:40:a5:b1:7a:
                    43:7f:7a:e7:97:f5:b4:f2:9f:9d:75:ab:52:f2:ce:
                    16:c2:69:9b:88:36:d0:08:54:02:57:7c:85:f3:9d:
                    a9:cb:b5:c8:23:73:30:86:56:1e:38:fd:47:be:9e:
                    90:cc:36:7e:ff:66:89:2b:22:5d:c3:f5:86:21:c5:
                    21:13:1a:cb:df:98:f4:22:32:af:3b:df:e3:46:c4:
                    b4:c1:64:59:bb:84:0d:dd:9e:ef:e2:42:e9:88:e5:
                    ce:4c:29:a8:9e:d6:38:0a:87:58:ab:a5:44:13:7e:
                    6a:7b:06:55:5f:ab:5f:ec:d9:6c:9c:15:ca:98:22:
                    d7:da:39:9d:6e:6d:8f:a6:21:71:29:77:31:2b:a5:
                    12:7c:63:2e:16:c2:05:b0:29:bc:d3:0a:48:ba:40:
                    db:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:CA:67:DC:64:0A:82:59:A2:73:32:F2:1E:F9:8D:48:CD:DF:25:6E
            X509v3 Authority Key Identifier:
                keyid:39:29:49:1D:59:EC:78:DB:DE:C7:42:3B:04:D0:60:34:C1:A5:93:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3133382e3138362e34342e302f32342d3234203d3e203532373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:7f:fc:66:1d:d8:07:76:6a:38:7a:72:89:45:18:af:06:5f:
         f4:1c:4c:1f:52:99:be:62:fe:0d:27:01:c1:3d:2d:75:fe:e6:
         67:56:62:41:3e:e9:e5:27:4e:2c:42:71:d7:9d:d3:fa:2e:fd:
         4d:48:84:58:ea:2a:7f:7f:be:43:44:f4:1e:bc:c0:96:5f:ec:
         20:94:1e:d1:e9:b1:3e:22:ec:98:ff:38:b4:5e:31:a3:a8:19:
         49:66:bc:86:7b:bc:c5:22:cc:8c:9a:76:18:80:5a:4f:97:31:
         92:e3:18:4d:f8:13:ca:c9:e4:d1:30:38:ac:b4:1d:f0:05:46:
         60:d9:3d:60:fc:b1:5f:fd:4c:96:ae:4c:c2:06:e7:7f:82:49:
         36:25:55:a8:e0:13:f6:73:ae:c9:3d:d5:32:95:6c:e1:b1:5e:
         33:14:f6:27:07:dc:6e:73:13:e4:ad:83:ca:bf:06:e0:0b:af:
         0c:56:fc:40:e1:b9:3a:44:13:0d:fe:6b:73:fc:5b:33:5f:ca:
         76:71:12:56:e3:be:c9:38:45:14:c8:cd:e3:32:1e:ca:ef:65:
         6c:31:16:59:f9:eb:f3:1b:6a:50:3d:ef:b9:47:b0:e0:6e:cf:
         a6:9b:55:3b:3f:57:35:e2:0f:1c:fa:e9:77:43:cc:bd:27:bc:
         c7:dc:bf:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:09:33 2026 by rpki-client