Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/3133382e3138362e3230342e302f32322d3332203d3e203533323138.roa
File:                     3133382e3138362e3230342e302f32322d3332203d3e203533323138.roa (raw, json)
Hash identifier:          4Fbve+UwbgeUI6ca5uR09Eyf6sZ8PDDD5/ZPNxmaCzg=
Subject key identifier:   3A:89:BF:B6:8A:76:4E:B8:12:38:64:FD:2E:76:1D:B3:A0:65:9B:81
Certificate issuer:       /CN=2942F22000F3A7315703CF3B13100D76386FCAD1
Certificate serial:       109BD60877D99BD7ED193F5AA66F8991073CF961
Authority key identifier: 29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/3133382e3138362e3230342e302f32322d3332203d3e203533323138.roa
Signing time:             Mon 20 Jul 2026 20:18:13 +0000
ROA not before:           Mon 20 Jul 2026 20:13:13 +0000
ROA not after:            Mon 19 Jul 2027 20:18:13 +0000
asID:                     53218
IP address blocks:        138.186.204.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl
                          rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:9b:d6:08:77:d9:9b:d7:ed:19:3f:5a:a6:6f:89:91:07:3c:f9:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2942F22000F3A7315703CF3B13100D76386FCAD1
        Validity
            Not Before: Jul 20 20:13:13 2026 GMT
            Not After : Jul 19 20:18:13 2027 GMT
        Subject: CN=3A89BFB68A764EB8123864FD2E761DB3A0659B81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:60:89:a2:b1:95:98:11:d8:8d:fc:32:34:0d:
                    09:cf:01:ab:51:7e:26:3d:bf:c4:63:15:78:e3:19:
                    9b:d0:08:b6:0d:b9:71:6d:7d:08:49:d3:6c:8c:65:
                    48:db:52:df:8d:60:af:22:a4:02:e0:98:13:e0:31:
                    35:76:df:bf:b8:ee:ee:13:a2:1c:31:2d:f4:dc:92:
                    58:2a:c8:cd:37:d0:d5:6a:37:29:df:8f:2b:c5:59:
                    7f:68:d2:ac:9c:84:d9:6a:57:d6:7c:a1:fd:18:d5:
                    32:e6:eb:6f:ff:06:2d:2e:a1:f0:10:7c:54:66:7a:
                    1d:6c:de:95:0b:be:e9:13:09:8a:73:8c:8b:06:54:
                    f0:55:b7:4b:77:e6:d3:13:f2:54:1c:92:99:21:97:
                    92:93:be:7e:57:14:2f:c7:96:ef:87:02:10:67:64:
                    1d:8f:bd:92:57:6a:c4:c1:b3:41:c4:e3:9b:84:76:
                    04:f8:d7:9a:c0:82:12:17:ab:8d:f6:6f:0e:ee:3f:
                    5a:24:02:8b:5c:d8:1c:3f:85:f8:fd:3e:54:44:c1:
                    16:a2:a8:50:87:c2:ca:73:a6:cb:2b:bf:c6:2c:78:
                    9f:ef:50:7e:c5:a3:35:81:3e:d1:73:52:09:b4:a0:
                    29:4c:5d:cd:3e:e4:fe:50:48:94:05:ea:d1:18:f2:
                    c3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:89:BF:B6:8A:76:4E:B8:12:38:64:FD:2E:76:1D:B3:A0:65:9B:81
            X509v3 Authority Key Identifier:
                keyid:29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/3133382e3138362e3230342e302f32322d3332203d3e203533323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:de:fb:a1:43:62:f4:08:0d:e0:dc:72:c5:4a:1b:21:72:00:
         d4:df:dd:81:0f:15:6f:4c:67:8c:3a:ee:d1:20:6e:b1:3a:90:
         98:49:e5:7e:2e:60:dc:33:c7:e4:bb:e6:71:06:e6:02:ab:b8:
         90:f6:7d:d4:45:f1:ca:8c:f4:98:8f:46:69:17:90:a2:a6:e7:
         96:21:05:61:2e:76:d5:bc:11:eb:2c:4e:f3:71:31:94:5a:9a:
         69:8e:71:e9:94:ae:bd:e5:e6:9b:74:ac:b2:ee:c7:24:6a:bb:
         be:50:ee:a7:78:28:df:8b:c6:2a:67:e7:15:cb:de:f2:66:46:
         44:1c:7b:76:85:3d:ac:78:42:e2:2e:2b:64:50:57:3d:60:35:
         af:60:f4:44:1e:20:66:cd:d6:94:5f:3c:a3:6f:69:c7:00:93:
         27:95:a0:b5:6f:25:fd:57:6f:22:5a:ba:1d:ca:8c:cc:57:07:
         f0:d5:f0:d8:43:58:fe:dc:f9:5b:b5:3e:04:2b:56:77:ea:98:
         5a:8e:5b:31:04:c4:a9:67:3b:9d:4a:15:dd:ea:2b:56:af:08:
         e5:01:2e:cf:86:94:cf:6a:4d:57:f5:d5:d1:3a:95:9d:c3:ad:
         99:3c:f0:a4:41:50:9d:2e:f9:29:d0:73:cc:cd:44:b1:66:d4:
         a3:6d:4a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:51:47 2026 by rpki-client