Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3133382e39372e33322e302f32332d3233203d3e203631393030.roa
File:                     3133382e39372e33322e302f32332d3233203d3e203631393030.roa (raw, json)
Hash identifier:          J7lVVVWZ/jDYkT4q+ElRukDqKEpUBAWt/wiBK9TkFQA=
Subject key identifier:   6F:45:BB:8A:9C:B4:77:94:AB:F9:EE:2D:91:6A:AC:27:74:4A:79:28
Certificate issuer:       /CN=5DDDC0E6E01F3279E795CF35CD48AC94DD42E7B5
Certificate serial:       6D17EAA323BDDE3FDCD8361E015C8563A3436B50
Authority key identifier: 5D:DD:C0:E6:E0:1F:32:79:E7:95:CF:35:CD:48:AC:94:DD:42:E7:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DDDC0E6E01F3279E795CF35CD48AC94DD42E7B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3133382e39372e33322e302f32332d3233203d3e203631393030.roa
Signing time:             Tue 06 Oct 2026 23:14:01 +0000
ROA not before:           Tue 06 Oct 2026 23:09:01 +0000
ROA not after:            Tue 05 Oct 2027 23:14:01 +0000
asID:                     61900
IP address blocks:        138.97.32.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/5DDDC0E6E01F3279E795CF35CD48AC94DD42E7B5.crl
                          rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/5DDDC0E6E01F3279E795CF35CD48AC94DD42E7B5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DDDC0E6E01F3279E795CF35CD48AC94DD42E7B5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 02:19:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:17:ea:a3:23:bd:de:3f:dc:d8:36:1e:01:5c:85:63:a3:43:6b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DDDC0E6E01F3279E795CF35CD48AC94DD42E7B5
        Validity
            Not Before: Oct  6 23:09:01 2026 GMT
            Not After : Oct  5 23:14:01 2027 GMT
        Subject: CN=6F45BB8A9CB47794ABF9EE2D916AAC27744A7928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:41:24:6f:97:ce:ae:c8:28:f9:cc:cb:6b:c7:
                    5e:f8:c9:50:cc:52:5e:9d:a5:fc:75:81:88:27:15:
                    d8:3c:6e:cd:a8:a1:67:04:f0:7c:70:d4:aa:80:c2:
                    dc:fe:77:09:5a:fb:1c:39:10:95:ad:87:0c:65:b4:
                    01:04:de:e0:18:9f:97:79:c6:cd:22:5c:80:3a:c5:
                    e8:cf:4a:c1:a2:67:00:af:74:23:c6:96:ba:e7:e5:
                    61:d0:18:68:5c:6c:74:e5:5b:b7:f9:fe:b4:3d:ce:
                    1e:58:93:4d:70:ca:84:49:b9:b5:59:cf:f7:a6:a3:
                    68:d9:c9:06:c9:b6:2f:00:ce:90:65:0d:c3:6f:82:
                    3a:01:34:d8:be:8b:2a:f4:1a:fb:d7:09:0d:1f:a7:
                    47:28:db:b9:a2:d8:9e:08:23:87:3b:55:39:36:ce:
                    db:88:ae:b8:90:45:67:0d:2a:a9:29:2c:98:07:30:
                    74:bc:3c:c6:21:3a:b7:8f:b5:97:b5:55:32:43:dd:
                    48:c3:74:13:10:f0:bc:5b:d9:89:6d:1b:ee:d1:63:
                    5a:b7:a8:2e:cc:fe:16:cc:8a:fb:1d:a2:02:57:9b:
                    e5:f0:e6:0e:60:fc:5e:4a:f7:e5:90:ad:69:d3:a8:
                    7c:8a:bc:51:e3:16:43:72:26:f8:ab:05:d6:cd:07:
                    88:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:45:BB:8A:9C:B4:77:94:AB:F9:EE:2D:91:6A:AC:27:74:4A:79:28
            X509v3 Authority Key Identifier:
                keyid:5D:DD:C0:E6:E0:1F:32:79:E7:95:CF:35:CD:48:AC:94:DD:42:E7:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/5DDDC0E6E01F3279E795CF35CD48AC94DD42E7B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DDDC0E6E01F3279E795CF35CD48AC94DD42E7B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3133382e39372e33322e302f32332d3233203d3e203631393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:a9:db:a1:af:42:91:27:d2:4f:f8:8d:9b:64:e0:8a:ee:d4:
         0c:60:73:46:e8:3d:b4:c4:34:37:8f:14:9d:0f:82:d1:8d:78:
         e1:60:37:14:df:9a:58:3b:74:44:4e:07:c3:1a:4d:da:bf:20:
         4f:22:0a:cd:d0:78:d6:a3:2f:3e:74:00:79:ad:d8:13:76:47:
         90:1b:20:aa:7e:e8:9f:d5:ff:da:2e:ca:46:55:c5:bc:c9:0b:
         74:8e:90:03:7b:1d:9b:f3:16:7c:9d:e3:d5:39:7b:c5:89:bb:
         b0:05:d3:b7:fe:4b:7d:a5:76:57:9f:8f:bf:5b:36:3b:1d:dc:
         9a:c8:51:06:28:df:ff:a7:d8:d1:64:29:83:0f:23:e2:2e:3c:
         c9:8c:d3:4c:65:c0:69:98:aa:f7:90:ba:5c:d3:af:14:06:9f:
         62:3e:d6:41:8a:b4:65:f1:3d:dc:7d:68:46:9f:ff:56:ea:04:
         d1:59:97:84:17:99:25:02:55:33:9d:c9:87:fb:f2:b8:29:94:
         16:c4:d9:a3:07:16:d9:82:9d:82:3b:16:0c:9a:58:fd:c5:3c:
         25:48:8c:a8:2f:5f:5a:25:0b:1e:ad:d2:ad:34:6c:1e:0f:67:
         f0:ee:7d:2d:98:ce:07:2f:b5:92:2c:84:09:f8:a6:7d:5a:59:
         7f:6e:a6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 06:47:03 2026 by rpki-client