Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3133382e3138362e34352e302f32342d3234203d3e203532373731.roa
File:                     3133382e3138362e34352e302f32342d3234203d3e203532373731.roa (raw, json)
Hash identifier:          0gxXrsYO0kG1HUofDdqZqu7vJpCVNf+JdhAc98JtEOI=
Subject key identifier:   9C:C9:4C:13:CB:D3:6F:E8:A8:94:D9:64:D4:89:C8:68:37:26:27:0B
Certificate issuer:       /CN=3929491D59EC78DBDEC7423B04D06034C1A59303
Certificate serial:       3A6680A932E355CC94C46DEE84B53785B3667074
Authority key identifier: 39:29:49:1D:59:EC:78:DB:DE:C7:42:3B:04:D0:60:34:C1:A5:93:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3133382e3138362e34352e302f32342d3234203d3e203532373731.roa
Signing time:             Mon 27 Apr 2026 21:30:01 +0000
ROA not before:           Mon 27 Apr 2026 21:25:01 +0000
ROA not after:            Mon 26 Apr 2027 21:30:01 +0000
asID:                     52771
IP address blocks:        138.186.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.crl
                          rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 12:48:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:66:80:a9:32:e3:55:cc:94:c4:6d:ee:84:b5:37:85:b3:66:70:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3929491D59EC78DBDEC7423B04D06034C1A59303
        Validity
            Not Before: Apr 27 21:25:01 2026 GMT
            Not After : Apr 26 21:30:01 2027 GMT
        Subject: CN=9CC94C13CBD36FE8A894D964D489C8683726270B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a5:c8:27:56:7e:24:10:2f:4e:04:cb:1a:15:
                    d3:90:dd:c7:c6:12:65:9f:58:32:06:b4:5b:07:81:
                    05:60:c2:e6:54:89:a8:cd:8c:e1:ee:de:a2:0d:e2:
                    77:80:6d:fa:f0:44:62:97:a8:23:ce:24:85:87:29:
                    2f:8a:9e:25:5f:67:e0:fb:a8:01:a8:9a:4f:29:e0:
                    57:92:f3:e3:91:88:79:63:b7:e1:8b:9c:1b:ec:08:
                    06:a1:b3:8b:f5:74:db:f3:65:fb:e9:a3:f4:b8:66:
                    fe:df:93:18:25:39:7b:67:11:db:e9:81:d1:51:7e:
                    51:18:54:f3:d6:7f:56:c1:ad:95:82:d2:8b:a9:4b:
                    d5:80:ea:bd:c2:9a:4d:8b:3a:3e:45:33:8c:40:de:
                    c1:4f:02:a2:23:76:02:3c:c7:dd:c8:51:ce:4a:e1:
                    75:32:3f:b7:62:3d:2a:e5:cc:18:0d:d5:95:d9:c8:
                    49:b1:37:93:8a:57:dd:3f:8f:b4:5e:24:b8:5e:98:
                    eb:a5:3a:77:47:33:20:7d:95:dc:b0:13:54:2d:da:
                    35:d6:32:c7:8e:51:c2:3d:05:d4:9a:ed:d6:33:aa:
                    33:b3:92:6d:92:57:f1:e0:fc:81:eb:cf:74:53:7a:
                    ab:5a:f3:3e:51:0d:3a:98:3a:bb:3f:b8:9a:ee:a3:
                    da:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C9:4C:13:CB:D3:6F:E8:A8:94:D9:64:D4:89:C8:68:37:26:27:0B
            X509v3 Authority Key Identifier:
                keyid:39:29:49:1D:59:EC:78:DB:DE:C7:42:3B:04:D0:60:34:C1:A5:93:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3133382e3138362e34352e302f32342d3234203d3e203532373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:41:00:ef:d0:9d:62:54:7e:a7:ad:55:45:e9:92:2e:03:2b:
         d7:7a:f0:97:2c:af:f4:36:80:16:50:ab:e6:96:9c:7c:b3:31:
         e4:48:5e:46:10:7a:f0:2c:18:d4:6a:60:47:65:22:a6:f8:c9:
         4b:3b:47:88:ce:66:b2:b8:de:3e:55:9f:96:7b:30:ab:4c:e6:
         fd:fb:61:ba:39:b4:1e:af:74:eb:25:42:9b:6d:06:10:81:0f:
         d4:13:87:60:3b:9d:40:44:26:0d:47:25:35:92:24:c0:d2:8f:
         81:c6:3b:71:2d:8a:33:0c:ab:c2:39:a9:75:85:72:0a:54:28:
         81:83:08:a0:27:4f:58:7b:8d:39:61:35:97:99:bc:17:b0:16:
         4f:f0:6b:8a:30:1a:9e:95:b1:ae:9e:c0:f7:6c:69:8a:8d:ce:
         9b:22:0d:37:64:b2:db:6b:ce:69:5e:83:3e:08:75:33:26:6b:
         32:2b:6e:5e:45:ba:ba:54:bc:72:e3:51:69:63:dc:91:67:50:
         88:81:f8:15:4e:78:45:5b:e4:79:58:0a:49:6e:52:b3:ea:e8:
         35:62:36:44:5f:6e:a4:38:51:b7:5d:6b:e5:07:88:48:1b:4f:
         1e:fa:91:13:fe:6e:66:87:15:c0:87:69:45:0f:0c:c1:44:ea:
         d0:03:eb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:48:03 2026 by rpki-client