Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3133382e3131372e3139322e302f32322d3234203d3e20323632333136.roa
File:                     3133382e3131372e3139322e302f32322d3234203d3e20323632333136.roa (raw, json)
Hash identifier:          Qajh9SgmhOLwen8Do03xNwlcQDXX+9U0uvI6DViyQAE=
Subject key identifier:   F2:48:FF:51:2D:CC:AD:F9:BC:74:F5:77:9B:17:88:EB:64:F3:AF:D7
Certificate issuer:       /CN=CB9260C7ABCD7C89119B0F61C609E31389DEB1DE
Certificate serial:       10A1A6A91A49714D5AF78C5138F0E72B61CBBF4C
Authority key identifier: CB:92:60:C7:AB:CD:7C:89:11:9B:0F:61:C6:09:E3:13:89:DE:B1:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3133382e3131372e3139322e302f32322d3234203d3e20323632333136.roa
Signing time:             Wed 18 Mar 2026 14:33:07 +0000
ROA not before:           Wed 18 Mar 2026 14:28:07 +0000
ROA not after:            Wed 17 Mar 2027 14:33:07 +0000
asID:                     262316
IP address blocks:        138.117.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.crl
                          rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 22:42:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:a1:a6:a9:1a:49:71:4d:5a:f7:8c:51:38:f0:e7:2b:61:cb:bf:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB9260C7ABCD7C89119B0F61C609E31389DEB1DE
        Validity
            Not Before: Mar 18 14:28:07 2026 GMT
            Not After : Mar 17 14:33:07 2027 GMT
        Subject: CN=F248FF512DCCADF9BC74F5779B1788EB64F3AFD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:29:eb:62:58:7d:7a:62:7f:88:f6:2a:69:09:
                    ed:ab:ef:78:f0:6f:12:86:8c:83:e1:77:f6:21:96:
                    0a:ee:04:c8:a0:2e:9a:3a:5f:20:fb:36:cc:40:22:
                    22:94:f8:e4:4f:dc:3f:24:3b:21:c6:e8:39:8a:87:
                    0d:f9:ce:dd:14:58:24:a1:d9:3a:18:07:1b:9a:3c:
                    16:b4:96:df:5e:5b:8e:13:2e:41:4f:ae:5d:3f:08:
                    00:ec:a1:66:e0:9f:6c:2c:da:27:10:18:58:9e:d5:
                    02:9b:7c:20:47:73:70:f3:b9:f5:7f:5b:7c:ab:3f:
                    33:00:1e:92:91:58:e8:31:79:08:13:03:cf:04:b8:
                    42:ec:c2:7d:fc:0f:7f:61:b3:ff:c6:75:93:6a:74:
                    cf:2a:bb:56:06:37:d8:db:de:ef:ab:41:5c:ed:88:
                    24:7b:22:54:03:f4:72:29:74:e6:90:d9:d8:c4:24:
                    91:2b:3f:bb:6c:dc:51:93:c8:c9:77:a9:4e:83:91:
                    82:44:e7:40:20:e9:e2:c3:53:d2:00:08:63:77:ec:
                    b2:72:e2:fa:86:eb:e3:5a:34:d9:2e:fe:b5:07:91:
                    58:22:4d:bf:7c:b8:87:0a:50:a2:6b:c5:c5:1c:c8:
                    30:8a:6e:eb:64:e1:7f:3b:34:d7:e7:cc:be:21:6b:
                    5b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:48:FF:51:2D:CC:AD:F9:BC:74:F5:77:9B:17:88:EB:64:F3:AF:D7
            X509v3 Authority Key Identifier:
                keyid:CB:92:60:C7:AB:CD:7C:89:11:9B:0F:61:C6:09:E3:13:89:DE:B1:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3133382e3131372e3139322e302f32322d3234203d3e20323632333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:84:12:f8:84:9a:4f:e5:1c:f5:23:9f:a9:4e:bf:d0:0a:94:
         fa:be:72:72:a9:57:0e:57:5c:1f:91:96:23:37:f0:aa:a9:88:
         38:b8:0c:21:54:fe:c5:56:cb:5b:ce:f5:48:99:d4:3c:ce:2f:
         2d:5a:3a:ff:e9:d6:c8:d7:c1:62:3a:e7:16:ec:f4:78:cd:39:
         a7:3b:a7:ee:24:b6:4a:02:c8:d9:8c:46:51:fa:b6:a8:31:7a:
         73:dd:e2:d9:0d:4d:2b:98:72:d1:b0:b6:56:e0:19:cb:86:84:
         32:04:85:80:5e:29:1e:63:76:c1:52:d7:e8:9f:1f:82:dc:80:
         72:f6:8a:ce:22:61:36:93:84:36:e2:43:66:4b:15:fd:96:a5:
         c0:ec:5d:64:80:b7:48:a6:60:51:ee:c1:7b:7b:25:66:74:85:
         cd:5b:76:71:ed:2e:e4:3c:01:64:27:67:72:e0:44:87:36:cd:
         74:20:cb:4e:21:2b:34:3f:31:10:b8:0c:b9:dc:83:87:25:57:
         86:8f:2b:25:f8:76:05:e4:09:55:82:25:5a:01:5b:9b:a8:14:
         98:88:f9:61:73:a3:9a:05:63:34:6b:57:84:51:b6:22:f9:0f:
         db:6d:12:b5:2e:e3:8e:41:9f:8b:9e:c8:8b:79:3d:6c:7d:47:
         3a:44:3d:ab
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUEKGmqRpJcU1a94xROPDnK2HLv0wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0I5MjYwQzdBQkNEN0M4OTExOUIwRjYxQzYwOUUzMTM4
OURFQjFERTAeFw0yNjAzMTgxNDI4MDdaFw0yNzAzMTcxNDMzMDdaMDMxMTAvBgNV
BAMTKEYyNDhGRjUxMkRDQ0FERjlCQzc0RjU3NzlCMTc4OEVCNjRGM0FGRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNKetiWH16Yn+I9ippCe2r73jw
bxKGjIPhd/YhlgruBMigLpo6XyD7NsxAIiKU+ORP3D8kOyHG6DmKhw35zt0UWCSh
2ToYBxuaPBa0lt9eW44TLkFPrl0/CADsoWbgn2ws2icQGFie1QKbfCBHc3DzufV/
W3yrPzMAHpKRWOgxeQgTA88EuELswn38D39hs//GdZNqdM8qu1YGN9jb3u+rQVzt
iCR7IlQD9HIpdOaQ2djEJJErP7ts3FGTyMl3qU6DkYJE50Ag6eLDU9IACGN37LJy
4vqG6+NaNNku/rUHkVgiTb98uIcKUKJrxcUcyDCKbutk4X87NNfnzL4ha1u7AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU8kj/US3Mrfm8dPV3mxeI62Tzr9cwHwYDVR0j
BBgwFoAUy5Jgx6vNfIkRmw9hxgnjE4nesd4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODhTcjZrNWc1bnkxdndkaXdoOHlmTURTMkVlclc0NXBaZERob1h1VXQy
S2EvMC9DQjkyNjBDN0FCQ0Q3Qzg5MTE5QjBGNjFDNjA5RTMxMzg5REVCMURFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCOTI2MEM3QUJDRDdDODkx
MTlCMEY2MUM2MDlFMzEzODlERUIxREUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg4U3I2azVnNW55MXZ3ZGl3aDh5Zk1EUzJFZXJXNDVwWmREaG9YdVV0MkthLzAv
MzEzMzM4MmUzMTMxMzcyZTMxMzkzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMjMzMzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAop1wDANBgkqhkiG9w0BAQsFAAOCAQEASoQS
+ISaT+Uc9SOfqU6/0AqU+r5ycqlXDldcH5GWIzfwqqmIOLgMIVT+xVbLW871SJnU
PM4vLVo6/+nWyNfBYjrnFuz0eM05pzun7iS2SgLI2YxGUfq2qDF6c93i2Q1NK5hy
0bC2VuAZy4aEMgSFgF4pHmN2wVLX6J8fgtyAcvaKziJhNpOENuJDZksV/ZalwOxd
ZIC3SKZgUe7Be3slZnSFzVt2ce0u5DwBZCdncuBEhzbNdCDLTiErND8xELgMudyD
hyVXho8rJfh2BeQJVYIlWgFbm6gUmIj5YXOjmgVjNGtXhFG2IvkP220StS7jjkGf
i57Ii3k9bH1HOkQ9qw==
-----END CERTIFICATE-----
Generated at Fri Mar 27 06:53:55 2026 by rpki-client