Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/3133382e3131372e38382e302f32322d3234203d3e20323634323336.roa
File:                     3133382e3131372e38382e302f32322d3234203d3e20323634323336.roa (raw, json)
Hash identifier:          jRl6uCp1lXSdBu+elav8qJ1k4MyeTiN66tGuXLXGYMY=
Subject key identifier:   46:3F:F0:0C:EF:01:50:ED:C3:51:85:B2:10:E7:3C:C7:7B:CE:79:19
Certificate issuer:       /CN=A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A
Certificate serial:       354CBC282DC7C914057B9C47F2EA347F7F18C524
Authority key identifier: A9:48:AB:96:F6:BB:7D:AC:2C:16:76:EF:BE:E8:D6:10:99:C6:1E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/3133382e3131372e38382e302f32322d3234203d3e20323634323336.roa
Signing time:             Wed 06 May 2026 15:09:18 +0000
ROA not before:           Wed 06 May 2026 15:04:18 +0000
ROA not after:            Wed 05 May 2027 15:09:18 +0000
asID:                     264236
IP address blocks:        138.117.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.crl
                          rsync://rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 10:33:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:4c:bc:28:2d:c7:c9:14:05:7b:9c:47:f2:ea:34:7f:7f:18:c5:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A
        Validity
            Not Before: May  6 15:04:18 2026 GMT
            Not After : May  5 15:09:18 2027 GMT
        Subject: CN=463FF00CEF0150EDC35185B210E73CC77BCE7919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8e:fa:03:2e:16:37:50:aa:11:de:07:df:4a:
                    be:63:c9:69:35:32:86:34:07:64:e7:67:72:0f:50:
                    16:aa:71:53:f5:59:c9:89:5a:0d:5b:ca:83:32:38:
                    a6:a4:9c:4e:bc:d5:b8:70:d3:43:fd:f0:80:f0:c6:
                    3d:b4:73:58:07:f0:0f:e2:d8:74:c4:c5:ad:cb:63:
                    e3:67:22:19:f3:b3:19:e5:bc:13:12:66:0b:d6:5a:
                    71:c0:f8:b7:e0:cf:b6:0c:25:d7:71:24:ff:8e:85:
                    cb:d9:f0:d9:59:d4:6a:5c:80:3c:62:1a:9f:bc:13:
                    da:c1:4b:44:0d:03:11:fb:14:a9:ac:3d:da:cb:c6:
                    02:39:86:1b:c7:77:78:e8:d4:24:26:a2:5e:cd:b5:
                    09:6b:60:dc:e0:31:62:9f:fe:c4:cc:eb:e7:51:69:
                    9e:30:38:66:0f:3a:c8:74:8a:8b:ae:c5:c6:35:59:
                    93:d3:04:04:14:81:a9:44:cb:04:7d:13:fa:54:d7:
                    30:0c:ab:3d:c2:5f:8c:2a:f8:a5:a9:ed:c1:9f:39:
                    cc:fc:3f:1b:fb:78:a8:aa:67:db:4f:5f:0d:05:07:
                    13:2d:2a:4f:c6:ba:41:cf:e4:46:40:41:0c:de:24:
                    e3:6d:ac:bc:66:25:9c:24:aa:1f:4f:47:a6:a2:94:
                    9d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:3F:F0:0C:EF:01:50:ED:C3:51:85:B2:10:E7:3C:C7:7B:CE:79:19
            X509v3 Authority Key Identifier:
                keyid:A9:48:AB:96:F6:BB:7D:AC:2C:16:76:EF:BE:E8:D6:10:99:C6:1E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/3133382e3131372e38382e302f32322d3234203d3e20323634323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c0:f0:c4:d9:d1:f6:eb:49:42:f8:a5:fb:61:6e:80:01:e3:00:
         e9:c6:bf:6c:50:2e:88:f9:20:b0:48:e3:73:bb:64:e9:6e:14:
         6d:76:63:5d:0c:ba:2b:5f:b1:84:66:0a:2a:23:20:90:12:72:
         f3:26:02:5c:be:de:2b:02:cd:1c:b8:fe:e6:93:c9:d3:33:1c:
         1b:92:28:22:6a:ce:90:87:a5:1b:37:9b:01:e0:a0:26:59:00:
         cf:2a:43:35:4b:75:83:5e:5f:ce:b1:a9:3b:9a:47:16:aa:f0:
         94:19:c0:a7:bb:ca:d5:5a:59:19:4c:2d:ee:43:c0:43:ad:ef:
         50:9b:af:25:bb:56:f3:90:e3:a1:f5:a3:67:7b:cd:6c:78:1e:
         3b:ac:c7:55:0e:91:83:37:4c:e8:86:e3:38:f3:1d:6a:cc:35:
         1d:21:6a:38:22:b9:af:86:ae:e6:16:53:a0:45:fb:17:49:1f:
         f4:2f:87:c0:f6:db:60:a3:42:37:ec:2c:34:bd:78:17:02:02:
         9b:c6:4c:df:36:84:ea:21:d9:41:3b:f1:06:00:ed:1f:c2:1e:
         2a:c8:8d:9f:40:05:ef:03:83:c8:c6:8f:2b:b5:d8:58:44:f1:
         93:11:1e:c7:c1:45:42:6b:63:89:31:b1:69:5c:e5:53:9b:d9:
         c9:c0:e3:dc
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNUy8KC3HyRQFe5xH8uo0f38YxSQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTk0OEFCOTZGNkJCN0RBQzJDMTY3NkVGQkVFOEQ2MTA5
OUM2MUUwQTAeFw0yNjA1MDYxNTA0MThaFw0yNzA1MDUxNTA5MThaMDMxMTAvBgNV
BAMTKDQ2M0ZGMDBDRUYwMTUwRURDMzUxODVCMjEwRTczQ0M3N0JDRTc5MTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWjvoDLhY3UKoR3gffSr5jyWk1
MoY0B2TnZ3IPUBaqcVP1WcmJWg1byoMyOKaknE681bhw00P98IDwxj20c1gH8A/i
2HTExa3LY+NnIhnzsxnlvBMSZgvWWnHA+Lfgz7YMJddxJP+OhcvZ8NlZ1GpcgDxi
Gp+8E9rBS0QNAxH7FKmsPdrLxgI5hhvHd3jo1CQmol7NtQlrYNzgMWKf/sTM6+dR
aZ4wOGYPOsh0iouuxcY1WZPTBAQUgalEywR9E/pU1zAMqz3CX4wq+KWp7cGfOcz8
Pxv7eKiqZ9tPXw0FBxMtKk/GukHP5EZAQQzeJONtrLxmJZwkqh9PR6ailJ1PAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQURj/wDO8BUO3DUYWyEOc8x3vOeRkwHwYDVR0j
BBgwFoAUqUirlva7fawsFnbvvujWEJnGHgowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUFYYUI5S2JhZEhDU2oyTE10cEJSUW9IVUVKZG5yMjl3Z2R2dFoyTWZ2
RUovMC9BOTQ4QUI5NkY2QkI3REFDMkMxNjc2RUZCRUU4RDYxMDk5QzYxRTBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E5NDhBQjk2RjZCQjdEQUMy
QzE2NzZFRkJFRThENjEwOTlDNjFFMEEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVBWGFCOUtiYWRIQ1NqMkxNdHBCUlFvSFVFSmRucjI5d2dkdnRaMk1mdkVKLzAv
MzEzMzM4MmUzMTMxMzcyZTM4MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzQzMjMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKdVgwDQYJKoZIhvcNAQELBQADggEBAMDwxNnR
9utJQvil+2FugAHjAOnGv2xQLoj5ILBI43O7ZOluFG12Y10MuitfsYRmCiojIJAS
cvMmAly+3isCzRy4/uaTydMzHBuSKCJqzpCHpRs3mwHgoCZZAM8qQzVLdYNeX86x
qTuaRxaq8JQZwKe7ytVaWRlMLe5DwEOt71CbryW7VvOQ46H1o2d7zWx4Hjusx1UO
kYM3TOiG4zjzHWrMNR0hajgiua+GruYWU6BF+xdJH/Qvh8D222CjQjfsLDS9eBcC
ApvGTN82hOoh2UE78QYA7R/CHirIjZ9ABe8Dg8jGjyu12FhE8ZMRHsfBRUJrY4kx
sWlc5VOb2cnA49w=
-----END CERTIFICATE-----
Generated at Wed May 13 18:29:28 2026 by rpki-client