Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6MD1Rx1bdVgYkFeVLYcupPpz2LdUqtfYA1yd1beiFkx2/0/3133382e3138362e37322e302f32322d3332203d3e20323633383533.roa
File:                     3133382e3138362e37322e302f32322d3332203d3e20323633383533.roa (raw, json)
Hash identifier:          +LDjwbrhCYXLAk8tRDblE91nbB2hF6cu3Tr7Wxg1a+M=
Subject key identifier:   9D:8C:79:75:0F:C6:BF:3A:7F:C0:DE:7C:EE:17:CB:14:99:B8:3F:3B
Certificate issuer:       /CN=5CB6F0FBBAF94DBD11BE24EE6942953CD6C92E31
Certificate serial:       16B1665C8BEFFB8F720DA521027D715F33036960
Authority key identifier: 5C:B6:F0:FB:BA:F9:4D:BD:11:BE:24:EE:69:42:95:3C:D6:C9:2E:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CB6F0FBBAF94DBD11BE24EE6942953CD6C92E31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6MD1Rx1bdVgYkFeVLYcupPpz2LdUqtfYA1yd1beiFkx2/0/3133382e3138362e37322e302f32322d3332203d3e20323633383533.roa
Signing time:             Fri 17 Apr 2026 14:21:40 +0000
ROA not before:           Fri 17 Apr 2026 14:16:40 +0000
ROA not after:            Fri 16 Apr 2027 14:21:40 +0000
asID:                     263853
IP address blocks:        138.186.72.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6MD1Rx1bdVgYkFeVLYcupPpz2LdUqtfYA1yd1beiFkx2/0/5CB6F0FBBAF94DBD11BE24EE6942953CD6C92E31.crl
                          rsync://rpki-repo.registro.br/repo/6MD1Rx1bdVgYkFeVLYcupPpz2LdUqtfYA1yd1beiFkx2/0/5CB6F0FBBAF94DBD11BE24EE6942953CD6C92E31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CB6F0FBBAF94DBD11BE24EE6942953CD6C92E31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 09:57:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b1:66:5c:8b:ef:fb:8f:72:0d:a5:21:02:7d:71:5f:33:03:69:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CB6F0FBBAF94DBD11BE24EE6942953CD6C92E31
        Validity
            Not Before: Apr 17 14:16:40 2026 GMT
            Not After : Apr 16 14:21:40 2027 GMT
        Subject: CN=9D8C79750FC6BF3A7FC0DE7CEE17CB1499B83F3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4b:5f:c8:11:26:4b:ff:d7:a8:ae:8a:87:33:
                    ec:a5:e0:5b:70:52:62:ab:b7:bc:09:8a:f2:34:41:
                    7f:fe:09:de:33:2a:f5:1c:b0:ab:33:30:0f:c1:01:
                    20:3e:64:83:8f:0d:1c:98:bd:9e:f7:fa:2f:0e:61:
                    bc:35:ce:fa:90:21:f0:aa:18:ae:92:08:54:cf:ba:
                    c3:3e:1a:6d:0f:e2:84:48:24:9a:ca:a5:89:24:e2:
                    f2:bd:53:c2:c6:dd:24:47:0b:b9:f8:30:67:e7:b5:
                    38:6a:cc:64:4e:0d:24:dd:a4:5f:9a:82:03:7c:d7:
                    7e:bd:42:b4:f1:ce:08:b3:10:ae:9d:83:42:89:9d:
                    59:5f:ce:9f:75:12:58:72:76:fa:42:52:65:b2:67:
                    32:1f:68:f2:79:73:31:28:be:14:74:9e:f2:58:d6:
                    a8:8e:73:0f:95:31:6f:4d:4b:b7:d7:9d:32:31:6c:
                    56:08:86:25:78:93:ac:af:fb:00:b4:02:4e:54:5d:
                    dd:23:9f:30:9f:72:e7:33:03:6b:5f:5e:a7:a6:e6:
                    97:91:7f:c4:62:b1:18:12:0c:28:b9:05:24:28:89:
                    d3:9e:2c:31:42:24:e5:f7:35:68:f2:49:29:36:4d:
                    08:b3:4c:c3:f6:e5:8a:eb:75:cb:7b:a1:4d:e1:19:
                    f3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:8C:79:75:0F:C6:BF:3A:7F:C0:DE:7C:EE:17:CB:14:99:B8:3F:3B
            X509v3 Authority Key Identifier:
                keyid:5C:B6:F0:FB:BA:F9:4D:BD:11:BE:24:EE:69:42:95:3C:D6:C9:2E:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6MD1Rx1bdVgYkFeVLYcupPpz2LdUqtfYA1yd1beiFkx2/0/5CB6F0FBBAF94DBD11BE24EE6942953CD6C92E31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CB6F0FBBAF94DBD11BE24EE6942953CD6C92E31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6MD1Rx1bdVgYkFeVLYcupPpz2LdUqtfYA1yd1beiFkx2/0/3133382e3138362e37322e302f32322d3332203d3e20323633383533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:8a:fa:56:68:7c:ea:10:27:0e:b1:b6:9a:58:27:51:2b:fa:
         06:85:55:a9:be:10:8e:cd:f3:e4:2d:12:62:47:71:f7:a0:82:
         dd:82:9a:36:34:db:6c:04:9c:e3:48:1e:45:12:ae:71:e3:ca:
         f2:59:7d:2f:0f:00:d4:3c:9b:fd:28:76:2f:73:3e:06:65:1f:
         5d:ad:1f:f3:53:69:62:40:77:5f:9e:6e:34:61:29:12:31:00:
         55:3b:6a:3d:f4:a2:da:29:05:7f:1d:1b:24:a8:cc:59:27:f7:
         22:6a:3f:c7:ac:73:45:84:f1:27:02:d5:ae:c6:6c:b5:36:11:
         48:ca:5c:e9:23:6a:2b:74:1f:53:1b:24:1e:01:cd:7b:2a:be:
         08:e5:fc:d0:d5:95:73:0d:3d:bc:be:18:c2:74:51:80:90:b1:
         26:52:93:46:93:78:31:d8:2f:da:45:8b:0c:a1:44:07:e0:38:
         60:1f:aa:a7:79:8c:6d:47:d4:69:3d:11:c5:82:44:81:42:6f:
         ea:87:20:3d:3b:59:8f:b8:4a:91:cc:3c:8b:63:37:b0:fb:1a:
         41:b5:74:43:a7:5d:2d:1f:69:d2:b4:b2:fb:2c:84:e4:9e:f9:
         de:6b:45:03:aa:34:9a:00:26:a5:84:cc:0b:3c:98:75:0b:89:
         82:c1:3f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:36:45 2026 by rpki-client