Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/779C2nUJVYJTwyULZGoom993UEFGCCxcTz8T4EWgK3a4/0/3133382e3132322e3131362e302f32322d3234203d3e20323634333139.roa
File:                     3133382e3132322e3131362e302f32322d3234203d3e20323634333139.roa (raw, json)
Hash identifier:          GqaZG60eu0U82TAYM9qwbGskJLCQqIbKmn0G0REKpog=
Subject key identifier:   3D:8A:9C:EA:69:2F:0F:46:BB:0E:B6:9F:79:51:AF:EE:D5:C1:80:29
Certificate issuer:       /CN=A7D30C6719D97773C371949D508EC2D8197F352F
Certificate serial:       72D6BF15A45AE938B9291F6FEA3616FDBB7D45F9
Authority key identifier: A7:D3:0C:67:19:D9:77:73:C3:71:94:9D:50:8E:C2:D8:19:7F:35:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7D30C6719D97773C371949D508EC2D8197F352F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/779C2nUJVYJTwyULZGoom993UEFGCCxcTz8T4EWgK3a4/0/3133382e3132322e3131362e302f32322d3234203d3e20323634333139.roa
Signing time:             Mon 14 Sep 2026 18:49:11 +0000
ROA not before:           Mon 14 Sep 2026 18:44:11 +0000
ROA not after:            Mon 13 Sep 2027 18:49:11 +0000
asID:                     264319
IP address blocks:        138.122.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/779C2nUJVYJTwyULZGoom993UEFGCCxcTz8T4EWgK3a4/0/A7D30C6719D97773C371949D508EC2D8197F352F.crl
                          rsync://rpki-repo.registro.br/repo/779C2nUJVYJTwyULZGoom993UEFGCCxcTz8T4EWgK3a4/0/A7D30C6719D97773C371949D508EC2D8197F352F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7D30C6719D97773C371949D508EC2D8197F352F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 Oct 2026 23:34:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:d6:bf:15:a4:5a:e9:38:b9:29:1f:6f:ea:36:16:fd:bb:7d:45:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7D30C6719D97773C371949D508EC2D8197F352F
        Validity
            Not Before: Sep 14 18:44:11 2026 GMT
            Not After : Sep 13 18:49:11 2027 GMT
        Subject: CN=3D8A9CEA692F0F46BB0EB69F7951AFEED5C18029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:48:1a:b8:4f:9f:fa:17:66:30:0c:80:08:b7:
                    7b:34:71:94:a6:ed:7f:90:db:3d:69:c4:6c:0b:47:
                    18:34:76:1c:79:8a:20:91:9d:92:8c:b0:dd:4c:99:
                    5b:05:e1:59:24:9e:5f:34:3a:2c:20:e8:46:d7:03:
                    c6:94:dd:23:6b:37:0d:a3:30:30:83:2d:6d:e5:77:
                    25:c5:8f:d4:4d:ce:c2:9c:35:32:41:9a:b5:da:75:
                    89:e5:26:44:d0:58:06:51:00:62:ee:fd:a6:58:96:
                    0f:ae:4e:b0:56:36:a9:c9:b1:39:ea:3a:32:2d:3b:
                    e8:38:e7:85:96:3f:7e:ee:97:7b:a1:04:02:65:5e:
                    65:6e:e7:9d:05:54:5b:97:4d:86:53:d2:29:a8:8c:
                    20:b1:b6:c9:ff:af:d1:c6:53:50:87:65:cd:e6:aa:
                    89:5a:a9:0e:31:b8:cb:d7:3e:92:29:85:bd:91:ea:
                    a5:98:ab:09:ac:68:57:af:42:23:90:ac:8d:f3:97:
                    29:52:84:71:a3:8a:d1:d0:bf:4e:4e:d3:3d:9e:c8:
                    81:65:aa:bb:e5:0e:9b:7a:7c:45:25:70:41:ab:94:
                    6f:1b:1c:ea:01:90:10:a5:eb:06:fa:7c:64:f6:cb:
                    d0:3e:15:5a:30:08:eb:b6:40:43:a2:80:0b:51:1c:
                    4c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:8A:9C:EA:69:2F:0F:46:BB:0E:B6:9F:79:51:AF:EE:D5:C1:80:29
            X509v3 Authority Key Identifier:
                keyid:A7:D3:0C:67:19:D9:77:73:C3:71:94:9D:50:8E:C2:D8:19:7F:35:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/779C2nUJVYJTwyULZGoom993UEFGCCxcTz8T4EWgK3a4/0/A7D30C6719D97773C371949D508EC2D8197F352F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7D30C6719D97773C371949D508EC2D8197F352F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/779C2nUJVYJTwyULZGoom993UEFGCCxcTz8T4EWgK3a4/0/3133382e3132322e3131362e302f32322d3234203d3e20323634333139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d5:b6:eb:2e:f1:88:ad:c4:ae:75:d1:50:01:1e:58:86:3d:b7:
         50:3b:a7:0c:7c:d6:e8:cd:d5:48:39:84:3b:4c:fa:ea:1b:90:
         1f:e3:09:77:92:16:3e:53:d6:2b:ed:73:40:db:2f:69:54:8c:
         61:b4:ab:12:6e:e3:3c:e9:f9:a2:f1:73:0b:61:4a:4a:ac:5c:
         39:d8:fe:a6:f6:f1:b2:be:d8:a7:ac:5f:35:4f:d7:98:98:bd:
         28:b1:a7:2d:1e:30:32:fc:76:04:57:b3:4f:02:89:d6:3c:93:
         39:db:84:55:9c:cd:b5:f0:ad:e1:e4:b5:6b:97:e1:b4:ff:d6:
         cb:7e:5e:ad:fb:d8:51:f2:a4:e7:28:c9:e2:45:be:74:fc:a5:
         61:4b:b8:33:20:42:c4:03:f2:4e:18:5b:e9:5a:b6:86:40:68:
         92:27:3a:e7:b8:9d:75:84:90:50:68:87:a2:db:33:46:80:93:
         0b:a0:74:9d:a9:07:25:a2:18:b6:1e:cf:74:8f:a5:59:ff:1d:
         49:be:ec:f2:60:8a:d1:1a:32:8c:98:c0:86:1b:8c:0d:ea:ea:
         ad:9c:ad:35:a5:3e:d4:1e:d7:90:c8:9c:fa:bb:8d:c0:e5:56:
         e8:69:19:7b:db:d6:94:1f:27:58:f1:06:44:c5:eb:1e:aa:d2:
         eb:25:f8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 02:38:24 2026 by rpki-client