Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/3133382e3131372e32342e302f32322d3234203d3e20323633333231.roa
File:                     3133382e3131372e32342e302f32322d3234203d3e20323633333231.roa (raw, json)
Hash identifier:          ZOGfyRIUXmaW/SkjC60y8YbeEPs4xjoMpUKfyEQkf3I=
Subject key identifier:   0E:5A:E0:41:0B:7D:A4:38:DB:B8:E3:45:B7:E8:42:53:4B:DC:F5:5E
Certificate issuer:       /CN=B8BF0367B559121777A21A84D953A717D6E82AEA
Certificate serial:       4AB54EE794B7D9F5284276B48AF6FB5A722B586A
Authority key identifier: B8:BF:03:67:B5:59:12:17:77:A2:1A:84:D9:53:A7:17:D6:E8:2A:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/3133382e3131372e32342e302f32322d3234203d3e20323633333231.roa
Signing time:             Tue 16 Jun 2026 12:52:48 +0000
ROA not before:           Tue 16 Jun 2026 12:47:48 +0000
ROA not after:            Tue 15 Jun 2027 12:52:48 +0000
asID:                     263321
IP address blocks:        138.117.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.crl
                          rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 15:54:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:b5:4e:e7:94:b7:d9:f5:28:42:76:b4:8a:f6:fb:5a:72:2b:58:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8BF0367B559121777A21A84D953A717D6E82AEA
        Validity
            Not Before: Jun 16 12:47:48 2026 GMT
            Not After : Jun 15 12:52:48 2027 GMT
        Subject: CN=0E5AE0410B7DA438DBB8E345B7E842534BDCF55E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:55:ce:90:4e:09:f3:08:07:f3:48:a2:ac:17:
                    c9:5f:4c:86:38:fb:0a:4d:b9:36:96:73:74:b3:a8:
                    c3:7a:68:e8:d6:b0:ff:e8:fb:f1:58:85:1b:8a:eb:
                    00:76:5d:cd:a9:65:60:d5:80:df:2f:d0:09:57:0d:
                    b1:40:7e:91:42:f7:0b:b2:5c:0d:98:7d:35:a4:da:
                    51:09:d0:3a:07:39:f8:ff:16:e5:81:24:68:92:03:
                    3e:21:b5:94:ad:49:6b:83:e4:c0:4d:0d:4b:76:72:
                    5d:ea:4e:9d:9b:3f:ea:30:1b:d2:ad:1b:27:07:bd:
                    61:1d:92:9b:fb:c2:df:8d:00:ca:02:d2:6a:25:32:
                    40:4d:00:f7:6e:fe:73:a3:68:88:8d:bd:9d:23:74:
                    80:47:99:b7:02:66:85:d6:b3:45:27:09:00:dc:b4:
                    88:7b:ea:4e:27:5a:01:ec:53:06:b4:2f:d5:65:c7:
                    02:83:fe:57:c9:80:cc:e3:96:2e:ad:57:94:7e:f6:
                    0f:a6:2c:8d:b6:74:51:2e:ac:74:b6:fe:ae:4b:62:
                    b4:1f:66:56:97:ee:a5:2b:0e:fd:7d:01:68:57:a0:
                    e2:8d:0a:f5:82:fd:1a:e2:e7:29:63:34:e2:52:fd:
                    82:dd:12:e3:19:cc:d5:f8:0d:5a:37:c9:01:37:16:
                    ec:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:5A:E0:41:0B:7D:A4:38:DB:B8:E3:45:B7:E8:42:53:4B:DC:F5:5E
            X509v3 Authority Key Identifier:
                keyid:B8:BF:03:67:B5:59:12:17:77:A2:1A:84:D9:53:A7:17:D6:E8:2A:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/3133382e3131372e32342e302f32322d3234203d3e20323633333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:ce:59:67:a0:8c:e7:cc:89:c3:63:48:ac:90:16:c8:9e:a4:
         4b:88:43:03:af:b5:38:7b:0a:f9:49:2a:3c:23:94:15:23:0a:
         41:d9:d8:4f:b9:69:1a:c6:33:b1:0e:9a:d7:e1:b1:8d:82:c2:
         12:c4:6c:c7:63:bf:3d:92:e5:91:67:4b:55:97:21:9f:a8:5f:
         3e:22:f0:1c:79:60:42:7b:84:32:d0:f2:c5:19:bf:64:b3:8d:
         8e:af:9d:fd:a0:36:7d:08:02:04:1f:4f:22:d4:3a:6e:3c:5f:
         4c:3b:fa:a2:b2:f6:88:b9:b0:a4:ae:38:7b:fd:94:34:5f:93:
         14:f0:e6:74:6d:64:98:a0:31:6f:67:6a:f2:26:f0:a1:72:82:
         6a:74:b9:23:64:46:d8:38:75:0d:a2:72:d7:9c:94:e0:a5:a6:
         f1:7c:a0:41:37:5a:ee:ce:88:c1:7e:4a:a2:1c:44:af:66:1a:
         c2:90:d6:e6:1a:f7:b9:f2:56:41:02:24:cd:f9:5a:a8:2b:eb:
         4b:35:7c:6d:22:55:f4:3d:bf:9f:5c:e6:6a:af:58:07:01:9d:
         01:d4:de:3c:e4:3e:fb:6d:f8:3e:4c:67:0e:cc:11:3d:83:ad:
         83:4a:b0:f5:bc:1a:fb:da:84:be:ff:c7:60:f2:9c:bd:ed:84:
         46:fb:f7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:34:39 2026 by rpki-client