Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/3133382e3132322e34342e302f32322d3332203d3e20323634333135.roa
File:                     3133382e3132322e34342e302f32322d3332203d3e20323634333135.roa (raw, json)
Hash identifier:          KJgSC9sn8aIDtgnwTXVUdZj+LQ/kdlb6PBI3DVAkzfY=
Subject key identifier:   F7:B9:51:E5:93:BD:67:92:AE:02:29:56:48:E3:29:0A:B1:97:6B:1E
Certificate issuer:       /CN=66A56D870457AAEA1EED831D71D318FB7DA99B42
Certificate serial:       52CD1AFD48BD81EAAE87896EBF9CCD15DEABD8FE
Authority key identifier: 66:A5:6D:87:04:57:AA:EA:1E:ED:83:1D:71:D3:18:FB:7D:A9:9B:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66A56D870457AAEA1EED831D71D318FB7DA99B42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/3133382e3132322e34342e302f32322d3332203d3e20323634333135.roa
Signing time:             Fri 24 Jul 2026 02:42:11 +0000
ROA not before:           Fri 24 Jul 2026 02:37:11 +0000
ROA not after:            Fri 23 Jul 2027 02:42:11 +0000
asID:                     264315
IP address blocks:        138.122.44.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/66A56D870457AAEA1EED831D71D318FB7DA99B42.crl
                          rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/66A56D870457AAEA1EED831D71D318FB7DA99B42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66A56D870457AAEA1EED831D71D318FB7DA99B42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 23:26:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:cd:1a:fd:48:bd:81:ea:ae:87:89:6e:bf:9c:cd:15:de:ab:d8:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66A56D870457AAEA1EED831D71D318FB7DA99B42
        Validity
            Not Before: Jul 24 02:37:11 2026 GMT
            Not After : Jul 23 02:42:11 2027 GMT
        Subject: CN=F7B951E593BD6792AE02295648E3290AB1976B1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:6f:7f:20:af:0e:7f:5f:49:18:ff:6f:89:9b:
                    05:c3:68:b1:f2:82:bb:75:b7:e7:60:99:e7:f1:f3:
                    ed:b6:b7:b5:db:92:ef:c7:ab:86:0b:58:a7:8e:f5:
                    13:3c:59:77:93:86:36:d5:39:d5:a9:ed:6c:b0:8f:
                    1a:2f:4d:39:3e:38:34:47:5e:ce:27:ec:51:6f:c6:
                    27:d1:5c:cf:ee:59:f1:7a:cb:5e:f0:c8:9b:14:5d:
                    54:b8:4f:e8:86:80:4a:cc:2b:ee:f0:1f:32:52:03:
                    08:09:fe:72:84:3b:7c:52:04:68:a6:b8:c3:b8:21:
                    eb:22:7c:f0:25:ce:8e:7c:9a:c4:1a:92:49:1d:bf:
                    1b:75:7e:f3:ea:22:c8:c0:45:65:fd:56:3e:8a:1d:
                    50:94:0d:e9:48:34:0f:08:be:89:6f:29:06:3b:27:
                    d7:27:23:a8:9a:f6:99:2d:ae:42:f5:6e:6f:13:30:
                    0e:ac:e9:8b:ed:02:e5:c8:89:2b:1b:24:da:b4:1a:
                    3b:b3:48:1a:76:7e:cd:1d:91:cc:32:c7:3a:65:27:
                    ad:49:54:92:9d:7f:bc:a5:17:07:98:f9:ac:3c:48:
                    e5:65:d2:5b:04:0a:a9:64:dc:3f:ca:56:6a:51:d1:
                    8a:fe:d6:62:88:ea:b4:e3:c5:4e:4c:1e:b1:dd:ee:
                    2b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B9:51:E5:93:BD:67:92:AE:02:29:56:48:E3:29:0A:B1:97:6B:1E
            X509v3 Authority Key Identifier:
                keyid:66:A5:6D:87:04:57:AA:EA:1E:ED:83:1D:71:D3:18:FB:7D:A9:9B:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/66A56D870457AAEA1EED831D71D318FB7DA99B42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66A56D870457AAEA1EED831D71D318FB7DA99B42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/3133382e3132322e34342e302f32322d3332203d3e20323634333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:5c:40:4f:a9:e2:fc:29:fd:4a:ba:1f:69:40:5b:1e:29:d1:
         18:d1:ac:fc:1d:b3:c0:d5:6d:5d:2a:29:56:0a:54:46:67:60:
         49:b6:aa:a1:6f:97:4e:f2:db:57:76:6f:a1:00:28:43:e7:ca:
         76:b2:5c:d3:96:a4:2a:84:13:63:72:33:43:0a:1c:46:74:20:
         41:16:fe:8f:53:d4:76:40:e8:a1:ed:f0:35:61:a6:87:08:cc:
         63:28:6e:18:ae:35:fe:88:73:67:2b:8d:f8:67:6c:f3:29:0a:
         13:22:3a:af:ef:25:6e:46:e2:54:bd:6e:b7:40:32:44:72:e8:
         ab:56:69:4f:f9:25:76:9b:83:cb:e7:60:2f:df:50:86:b1:d2:
         53:d0:7e:32:9d:73:23:b8:45:db:a6:0c:39:d7:2f:eb:30:bd:
         f4:e3:2f:54:d5:ac:e8:54:8f:2b:ba:90:3d:f7:aa:dc:ad:0d:
         38:11:d4:44:8f:ee:3a:4b:52:f8:4d:2f:32:9c:d2:78:d0:b0:
         8a:f1:51:8d:2b:ce:fe:37:a3:fc:72:1b:20:b7:91:41:fe:25:
         f5:5e:b4:d5:88:5d:85:5f:13:f8:7f:ea:88:84:5a:9a:62:03:
         2d:6c:bb:e7:1f:cb:8a:a7:80:1e:67:49:f0:1c:dd:4e:d7:04:
         c9:ea:5f:3a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUs0a/Ui9gequh4luv5zNFd6r2P4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjZBNTZEODcwNDU3QUFFQTFFRUQ4MzFENzFEMzE4RkI3
REE5OUI0MjAeFw0yNjA3MjQwMjM3MTFaFw0yNzA3MjMwMjQyMTFaMDMxMTAvBgNV
BAMTKEY3Qjk1MUU1OTNCRDY3OTJBRTAyMjk1NjQ4RTMyOTBBQjE5NzZCMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdb38grw5/X0kY/2+JmwXDaLHy
grt1t+dgmefx8+22t7Xbku/Hq4YLWKeO9RM8WXeThjbVOdWp7WywjxovTTk+ODRH
Xs4n7FFvxifRXM/uWfF6y17wyJsUXVS4T+iGgErMK+7wHzJSAwgJ/nKEO3xSBGim
uMO4IesifPAlzo58msQakkkdvxt1fvPqIsjARWX9Vj6KHVCUDelINA8IvolvKQY7
J9cnI6ia9pktrkL1bm8TMA6s6YvtAuXIiSsbJNq0GjuzSBp2fs0dkcwyxzplJ61J
VJKdf7ylFweY+aw8SOVl0lsECqlk3D/KVmpR0Yr+1mKI6rTjxU5MHrHd7iudAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU97lR5ZO9Z5KuAilWSOMpCrGXax4wHwYDVR0j
BBgwFoAUZqVthwRXquoe7YMdcdMY+32pm0IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVJWQkIzeXg1WnVNaGJ6cTZ5Y0FSdmhFTlhQdzVMZEs1V2RzV2F0a2VO
bm0vMC82NkE1NkQ4NzA0NTdBQUVBMUVFRDgzMUQ3MUQzMThGQjdEQTk5QjQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY2QTU2RDg3MDQ1N0FBRUEx
RUVEODMxRDcxRDMxOEZCN0RBOTlCNDIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVSVkJCM3l4NVp1TWhienE2eWNBUnZoRU5YUHc1TGRLNVdkc1dhdGtlTm5tLzAv
MzEzMzM4MmUzMTMyMzIyZTM0MzQyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzQzMzMxMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKeiwwDQYJKoZIhvcNAQELBQADggEBAHNcQE+p
4vwp/Uq6H2lAWx4p0RjRrPwds8DVbV0qKVYKVEZnYEm2qqFvl07y21d2b6EAKEPn
ynayXNOWpCqEE2NyM0MKHEZ0IEEW/o9T1HZA6KHt8DVhpocIzGMobhiuNf6Ic2cr
jfhnbPMpChMiOq/vJW5G4lS9brdAMkRy6KtWaU/5JXabg8vnYC/fUIax0lPQfjKd
cyO4RdumDDnXL+swvfTjL1TVrOhUjyu6kD33qtytDTgR1ESP7jpLUvhNLzKc0njQ
sIrxUY0rzv43o/xyGyC3kUH+JfVetNWIXYVfE/h/6oiEWppiAy1su+cfy4qngB5n
SfAc3U7XBMnqXzo=
-----END CERTIFICATE-----
Generated at Sat Jul 25 03:38:58 2026 by rpki-client