Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6fmriehHxitokJ1WqQAsd661uy1cKcqztDY31TuYg99o/0/3133382e35392e35332e302f32342d3234203d3e20323634353934.roa
File:                     3133382e35392e35332e302f32342d3234203d3e20323634353934.roa (raw, json)
Hash identifier:          3tJujy117O4x13ZnXGY9/i7Ll7hOfRTyMYr4jQzs1iA=
Subject key identifier:   5B:69:70:50:45:82:E1:56:F0:BD:23:1B:CF:78:AA:BC:ED:B5:06:DE
Certificate issuer:       /CN=D46A4B5FD452DCA490EC000E4116B9928447608A
Certificate serial:       44E6B7D0397AF0C28638D55EF5BB03909DA3B5C4
Authority key identifier: D4:6A:4B:5F:D4:52:DC:A4:90:EC:00:0E:41:16:B9:92:84:47:60:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D46A4B5FD452DCA490EC000E4116B9928447608A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6fmriehHxitokJ1WqQAsd661uy1cKcqztDY31TuYg99o/0/3133382e35392e35332e302f32342d3234203d3e20323634353934.roa
Signing time:             Thu 27 Aug 2026 20:12:05 +0000
ROA not before:           Thu 27 Aug 2026 20:07:05 +0000
ROA not after:            Thu 26 Aug 2027 20:12:05 +0000
asID:                     264594
IP address blocks:        138.59.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6fmriehHxitokJ1WqQAsd661uy1cKcqztDY31TuYg99o/0/D46A4B5FD452DCA490EC000E4116B9928447608A.crl
                          rsync://rpki-repo.registro.br/repo/6fmriehHxitokJ1WqQAsd661uy1cKcqztDY31TuYg99o/0/D46A4B5FD452DCA490EC000E4116B9928447608A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D46A4B5FD452DCA490EC000E4116B9928447608A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Oct 2026 05:59:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:e6:b7:d0:39:7a:f0:c2:86:38:d5:5e:f5:bb:03:90:9d:a3:b5:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D46A4B5FD452DCA490EC000E4116B9928447608A
        Validity
            Not Before: Aug 27 20:07:05 2026 GMT
            Not After : Aug 26 20:12:05 2027 GMT
        Subject: CN=5B6970504582E156F0BD231BCF78AABCEDB506DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b4:41:a0:00:b1:73:ad:17:f1:f8:fe:f7:cd:
                    ac:ab:16:e9:1b:26:4f:bc:ce:be:45:17:09:be:59:
                    68:5b:7c:f2:0e:ed:9a:9a:95:47:35:84:5d:a8:8a:
                    3f:0f:f6:3e:c6:2c:79:80:44:ba:9a:75:b2:be:b8:
                    be:be:4a:a4:9a:d2:f8:5f:6b:ee:1e:db:2e:cd:33:
                    a9:02:75:3b:e4:5f:f1:74:3e:d1:c9:2d:67:4f:28:
                    35:a5:b2:9e:e4:3b:54:43:3a:a7:fa:cd:1b:c3:b9:
                    2d:7b:1c:f8:8b:3b:0e:9d:3f:76:41:11:3a:e0:93:
                    0e:99:39:fe:08:4c:d4:ab:79:78:96:81:74:53:78:
                    d0:af:7f:57:2c:ed:dd:51:3c:40:19:91:00:f5:25:
                    cd:e7:32:de:c9:30:87:db:35:e5:d5:6a:f0:3e:45:
                    aa:3a:1a:7c:81:37:c0:ca:1d:8e:0a:a9:aa:49:3c:
                    2c:e5:ba:88:fe:1b:21:ed:b9:dc:cd:b7:29:bc:a7:
                    ea:50:01:1d:fb:53:a3:70:a9:6e:72:fb:cf:81:c2:
                    54:41:08:c1:04:d9:3e:37:4b:e1:b9:69:14:e0:5b:
                    4f:fe:19:ca:20:16:7e:e4:2c:19:f7:50:6e:b1:20:
                    8b:21:39:6f:6b:72:f1:ec:0f:b1:23:c6:33:59:1c:
                    05:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:69:70:50:45:82:E1:56:F0:BD:23:1B:CF:78:AA:BC:ED:B5:06:DE
            X509v3 Authority Key Identifier:
                keyid:D4:6A:4B:5F:D4:52:DC:A4:90:EC:00:0E:41:16:B9:92:84:47:60:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6fmriehHxitokJ1WqQAsd661uy1cKcqztDY31TuYg99o/0/D46A4B5FD452DCA490EC000E4116B9928447608A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D46A4B5FD452DCA490EC000E4116B9928447608A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6fmriehHxitokJ1WqQAsd661uy1cKcqztDY31TuYg99o/0/3133382e35392e35332e302f32342d3234203d3e20323634353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:7e:cd:12:76:22:75:a0:1c:27:b6:97:b2:f7:73:da:f6:d7:
         92:8f:91:ee:13:86:80:81:67:f0:86:9f:6c:ba:92:56:d0:1f:
         d1:92:32:64:fc:e5:89:a5:1c:8f:f1:33:b1:21:73:26:4a:54:
         c4:30:cb:af:87:c9:8f:cc:88:11:27:56:63:00:91:ae:0e:90:
         87:18:35:e5:13:9b:3c:a1:0a:19:77:47:ed:30:19:3c:7b:4b:
         7b:cf:1a:8e:8d:ef:d4:70:f2:a2:78:73:e3:04:d5:79:7c:36:
         fa:cd:58:55:09:d0:84:f7:0a:66:dc:13:9a:13:32:27:91:02:
         ae:76:1a:4f:02:82:30:9c:59:03:6c:7e:49:32:5c:fc:8b:ff:
         a2:8d:84:49:65:ab:e2:6a:4b:ab:ce:18:c0:ef:b7:02:4c:17:
         c8:41:c2:4c:98:fc:4a:cc:b3:f8:9a:ba:d0:36:fe:c7:b5:7b:
         1b:90:ca:d6:2d:14:5e:00:75:30:e3:20:ad:a1:b3:f2:ed:7f:
         db:7c:87:51:0a:a8:ea:fc:72:26:c7:fc:2f:de:e7:62:bf:1b:
         10:63:4d:21:b4:23:ed:96:47:f9:f3:d9:2d:72:de:2d:53:9a:
         e8:f8:84:fd:c5:21:8c:09:33:a1:94:47:6c:b1:4e:19:7a:c9:
         8e:21:ed:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 21:52:52 2026 by rpki-client