Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8RMLyTVrEYM6ApsrZ8ptQBU9MawmF2vt5gMKgnNVEZg9/0/3133382e35392e32392e302f32342d3234203d3e20323634363033.roa
File:                     3133382e35392e32392e302f32342d3234203d3e20323634363033.roa (raw, json)
Hash identifier:          lfNfEaznnfnn/qFDI/WXK9u6V/EVXvXZKEZBfA1Nx0k=
Subject key identifier:   0F:49:0A:FC:5D:34:B8:73:AF:38:FC:A3:25:56:02:23:9D:06:50:76
Certificate issuer:       /CN=1B566DFF8C097E0D02DC6307B903C92FF225DFB5
Certificate serial:       2ADE520C035B600BC565263F51A3BE263831E80F
Authority key identifier: 1B:56:6D:FF:8C:09:7E:0D:02:DC:63:07:B9:03:C9:2F:F2:25:DF:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B566DFF8C097E0D02DC6307B903C92FF225DFB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8RMLyTVrEYM6ApsrZ8ptQBU9MawmF2vt5gMKgnNVEZg9/0/3133382e35392e32392e302f32342d3234203d3e20323634363033.roa
Signing time:             Mon 05 Oct 2026 13:34:44 +0000
ROA not before:           Mon 05 Oct 2026 13:29:44 +0000
ROA not after:            Mon 04 Oct 2027 13:34:44 +0000
asID:                     264603
IP address blocks:        138.59.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8RMLyTVrEYM6ApsrZ8ptQBU9MawmF2vt5gMKgnNVEZg9/0/1B566DFF8C097E0D02DC6307B903C92FF225DFB5.crl
                          rsync://rpki-repo.registro.br/repo/8RMLyTVrEYM6ApsrZ8ptQBU9MawmF2vt5gMKgnNVEZg9/0/1B566DFF8C097E0D02DC6307B903C92FF225DFB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B566DFF8C097E0D02DC6307B903C92FF225DFB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 19:58:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:de:52:0c:03:5b:60:0b:c5:65:26:3f:51:a3:be:26:38:31:e8:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B566DFF8C097E0D02DC6307B903C92FF225DFB5
        Validity
            Not Before: Oct  5 13:29:44 2026 GMT
            Not After : Oct  4 13:34:44 2027 GMT
        Subject: CN=0F490AFC5D34B873AF38FCA3255602239D065076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:dd:6c:d9:28:cf:98:74:94:8b:81:a4:6e:8d:
                    a1:1a:51:ca:a9:b3:3d:7b:06:a9:ce:8f:e9:d1:91:
                    bd:66:24:2a:5a:b3:fe:ab:c5:96:a8:f2:ec:49:02:
                    fe:01:b9:1e:48:cc:b5:dd:1a:46:9b:dd:a2:f8:bd:
                    37:4f:ce:63:ba:e9:3f:cb:17:7c:d7:3b:61:8c:45:
                    b2:11:64:6b:04:a0:d8:9a:ee:e4:ad:06:0a:c9:29:
                    5d:c3:72:92:07:06:50:2b:59:d9:39:68:34:b0:26:
                    79:8a:20:33:4c:0f:36:59:5c:74:7a:c5:4d:a1:d8:
                    c4:f1:02:37:34:33:94:a9:dd:95:f9:5a:86:b6:05:
                    71:13:bc:e8:1a:b2:32:f9:0d:59:df:78:f1:b4:d6:
                    54:8b:8f:87:bf:3d:e0:db:da:fa:c3:b7:b1:96:f4:
                    2b:27:8d:f3:ad:08:74:5a:e1:31:0a:ad:cf:c2:e0:
                    c5:1b:fa:70:68:89:5c:23:e2:43:0c:ea:25:16:47:
                    e7:fb:e2:3f:e0:46:2c:38:c6:89:b2:25:aa:d9:c6:
                    b0:35:f6:7d:39:3d:c6:f6:ed:4c:8d:9e:b5:d5:f8:
                    af:67:2b:22:81:cc:aa:9c:51:b2:99:3a:65:09:b3:
                    81:5c:f4:9d:76:34:c9:d4:7b:8f:e4:c1:e9:51:15:
                    0d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:49:0A:FC:5D:34:B8:73:AF:38:FC:A3:25:56:02:23:9D:06:50:76
            X509v3 Authority Key Identifier:
                keyid:1B:56:6D:FF:8C:09:7E:0D:02:DC:63:07:B9:03:C9:2F:F2:25:DF:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8RMLyTVrEYM6ApsrZ8ptQBU9MawmF2vt5gMKgnNVEZg9/0/1B566DFF8C097E0D02DC6307B903C92FF225DFB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B566DFF8C097E0D02DC6307B903C92FF225DFB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8RMLyTVrEYM6ApsrZ8ptQBU9MawmF2vt5gMKgnNVEZg9/0/3133382e35392e32392e302f32342d3234203d3e20323634363033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:2b:e0:7c:bf:ab:df:60:dc:c5:25:75:4c:b8:89:40:fc:c3:
         41:42:fb:fc:00:cc:68:a4:4f:11:d6:ee:02:89:ec:00:85:bc:
         32:f7:1a:4e:4b:9d:ac:d2:3b:b3:b6:e3:46:fc:d8:5f:db:31:
         f8:cd:3d:39:33:ac:c0:2d:57:c4:0c:c9:70:28:63:03:7f:7f:
         81:de:56:6b:9c:9f:01:fe:19:64:84:fb:26:30:7e:28:05:4d:
         c2:e4:f4:7e:a6:2b:5e:ce:28:6a:2f:d2:e3:c2:a5:ef:3d:e8:
         0c:45:94:bd:55:0a:ee:42:9b:e8:50:b8:ab:af:ef:9e:5f:8f:
         e0:6e:5d:37:d3:4d:b4:33:e1:d3:54:22:f7:1d:0d:94:e7:39:
         84:5f:94:f1:8f:1d:f3:20:4a:86:56:97:6a:d7:82:63:ee:85:
         40:c3:4d:af:40:25:4d:fd:08:01:93:6c:82:c9:b1:63:07:3f:
         80:09:3b:64:54:13:6b:c3:47:77:d0:66:f8:d8:e5:33:41:7b:
         b7:af:32:c1:94:90:b1:54:53:23:d7:3d:56:e2:99:4a:68:1d:
         59:78:40:db:cb:99:ee:d7:03:13:c0:1f:1a:a3:ba:e9:05:54:
         d0:ee:55:c1:08:b7:6c:3c:b2:2c:b6:6e:f1:ad:1c:16:1d:77:
         8d:de:68:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:44:16 2026 by rpki-client