Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3133382e3132322e3130302e302f32322d3332203d3e20323633363532.roa
File:                     3133382e3132322e3130302e302f32322d3332203d3e20323633363532.roa (raw, json)
Hash identifier:          r2hp55mY/MQp/5QcQNbjVZPYDhPo20nhaMbJms5Oz5o=
Subject key identifier:   15:A5:62:23:17:9E:8B:15:BC:5F:67:BB:BC:25:EA:07:9C:BA:0E:94
Certificate issuer:       /CN=8B64D30A485BA9F9439554D27B82CAA509DB56C1
Certificate serial:       158D9C3A8962CF3F5F16E2F4462851B1E2E9E354
Authority key identifier: 8B:64:D3:0A:48:5B:A9:F9:43:95:54:D2:7B:82:CA:A5:09:DB:56:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B64D30A485BA9F9439554D27B82CAA509DB56C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3133382e3132322e3130302e302f32322d3332203d3e20323633363532.roa
Signing time:             Thu 12 Mar 2026 17:20:38 +0000
ROA not before:           Thu 12 Mar 2026 17:15:38 +0000
ROA not after:            Thu 11 Mar 2027 17:20:38 +0000
asID:                     263652
IP address blocks:        138.122.100.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/8B64D30A485BA9F9439554D27B82CAA509DB56C1.crl
                          rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/8B64D30A485BA9F9439554D27B82CAA509DB56C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B64D30A485BA9F9439554D27B82CAA509DB56C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Mar 2026 00:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:8d:9c:3a:89:62:cf:3f:5f:16:e2:f4:46:28:51:b1:e2:e9:e3:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B64D30A485BA9F9439554D27B82CAA509DB56C1
        Validity
            Not Before: Mar 12 17:15:38 2026 GMT
            Not After : Mar 11 17:20:38 2027 GMT
        Subject: CN=15A56223179E8B15BC5F67BBBC25EA079CBA0E94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:50:0f:04:c8:9e:58:da:74:79:89:8a:d5:fc:
                    9a:98:33:98:33:39:bc:aa:c0:3d:a4:99:b1:8e:2b:
                    d4:14:2a:f2:4b:d7:8a:e0:55:9f:84:87:00:40:2d:
                    59:46:9b:bd:46:b5:3f:90:7d:07:b3:3a:12:dd:48:
                    e8:f6:cd:10:48:e2:06:eb:f3:ee:43:94:cc:2f:84:
                    ff:30:0b:93:39:b4:ac:f1:d2:e9:7f:c7:8d:b6:7c:
                    8b:df:55:97:49:41:f2:20:1c:e0:5d:3a:f5:c5:c6:
                    3b:be:a6:31:5d:74:6b:7c:50:86:e2:1d:e5:3c:80:
                    9e:ca:f8:ef:b4:44:5c:82:c4:31:49:d9:6b:d3:61:
                    78:3e:1e:14:31:19:82:00:96:44:44:33:6a:3c:f8:
                    6f:e5:06:5b:8f:34:2e:b1:45:eb:d9:40:1b:8a:51:
                    e6:44:12:9d:a9:07:78:65:05:da:cd:62:9e:89:01:
                    56:00:dd:a8:7a:20:84:1b:5a:12:24:0b:92:ce:1a:
                    60:70:88:c7:15:3a:a7:0c:53:e5:31:36:a0:ad:a3:
                    73:0b:5a:8f:d5:c1:eb:2e:66:77:45:70:2c:34:1a:
                    da:ff:0e:aa:03:45:86:9e:46:c3:f4:ac:4b:19:7d:
                    4f:61:f3:6a:27:0a:c4:fa:60:7d:cb:3e:7f:a0:f0:
                    47:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:A5:62:23:17:9E:8B:15:BC:5F:67:BB:BC:25:EA:07:9C:BA:0E:94
            X509v3 Authority Key Identifier:
                keyid:8B:64:D3:0A:48:5B:A9:F9:43:95:54:D2:7B:82:CA:A5:09:DB:56:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/8B64D30A485BA9F9439554D27B82CAA509DB56C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B64D30A485BA9F9439554D27B82CAA509DB56C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3133382e3132322e3130302e302f32322d3332203d3e20323633363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:5e:92:9a:0d:e0:14:5d:91:ee:e0:62:ec:d9:db:d0:8d:e3:
         f2:48:d6:20:a9:9d:0b:b1:9c:70:f5:9b:59:c0:e8:49:9c:17:
         b3:0b:8f:89:6a:27:50:ad:21:12:40:4c:34:7c:ca:a3:0d:70:
         2d:37:17:b6:51:25:9d:1d:62:de:56:28:25:06:85:3e:8b:65:
         30:3c:ee:4d:17:0c:c6:28:7d:11:b3:a4:57:61:97:32:2f:9d:
         e6:71:fa:f3:a4:ed:fb:4e:bc:bc:19:b4:68:4c:14:b6:7b:73:
         ec:c0:39:80:f3:53:ca:f5:70:c3:16:44:27:77:75:83:67:99:
         11:0f:79:2f:51:97:eb:6d:08:ca:8b:b7:ee:ca:22:22:d8:d3:
         5e:58:5d:09:80:16:a6:8d:00:07:72:50:fb:e9:ae:71:7e:b2:
         e2:b9:69:55:cb:9a:b1:ec:17:cb:24:d4:b5:d1:f7:2d:43:43:
         c2:a3:48:7d:ee:c8:3c:c6:f9:3c:7b:61:6c:59:37:4d:5f:2f:
         72:97:b5:e3:5b:15:ac:44:f9:81:49:91:7c:ca:ec:24:43:4c:
         f9:bf:f3:51:44:3a:eb:98:ae:d3:23:68:a0:44:4c:a9:d0:9f:
         c6:3c:b9:2c:31:a0:a2:49:c5:c9:2d:17:ba:ce:3a:b0:bf:9b:
         d8:7a:51:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:05:47 2026 by rpki-client