Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/3133382e35392e3135322e302f32322d3234203d3e20323638313531.roa
File:                     3133382e35392e3135322e302f32322d3234203d3e20323638313531.roa (raw, json)
Hash identifier:          nLEPx2tOTOOPPzhtCLUZ6BwAfW6zPTYc2MuxdBcfDvM=
Subject key identifier:   59:03:03:FB:DF:A1:ED:8F:C8:7A:7D:D1:F4:7B:32:D1:71:72:95:48
Certificate issuer:       /CN=CDE3443CDA9AEB85777986244DC0A57E03CAF670
Certificate serial:       141C984E5E740C7D690EF036C810E924FF326480
Authority key identifier: CD:E3:44:3C:DA:9A:EB:85:77:79:86:24:4D:C0:A5:7E:03:CA:F6:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDE3443CDA9AEB85777986244DC0A57E03CAF670.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/3133382e35392e3135322e302f32322d3234203d3e20323638313531.roa
Signing time:             Thu 09 Jul 2026 15:13:29 +0000
ROA not before:           Thu 09 Jul 2026 15:08:29 +0000
ROA not after:            Thu 08 Jul 2027 15:13:29 +0000
asID:                     268151
IP address blocks:        138.59.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/CDE3443CDA9AEB85777986244DC0A57E03CAF670.crl
                          rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/CDE3443CDA9AEB85777986244DC0A57E03CAF670.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDE3443CDA9AEB85777986244DC0A57E03CAF670.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 14:28:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:1c:98:4e:5e:74:0c:7d:69:0e:f0:36:c8:10:e9:24:ff:32:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDE3443CDA9AEB85777986244DC0A57E03CAF670
        Validity
            Not Before: Jul  9 15:08:29 2026 GMT
            Not After : Jul  8 15:13:29 2027 GMT
        Subject: CN=590303FBDFA1ED8FC87A7DD1F47B32D171729548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4a:02:bb:7b:1a:0c:bc:bc:f5:9a:17:df:35:
                    40:42:62:db:3b:e7:7e:6c:98:59:dc:c0:6b:a6:34:
                    c7:db:e6:05:e4:4c:ea:34:ad:1e:d2:6e:6b:fa:06:
                    83:75:5e:01:e4:99:97:aa:4f:b7:9d:12:0b:cb:5a:
                    6d:e6:8e:a7:d3:fc:88:e8:6b:34:db:9a:b4:bc:37:
                    df:11:e2:d3:44:8b:93:8f:6c:34:3b:12:79:89:48:
                    6e:d7:db:44:3e:ca:d1:d4:d8:7f:39:77:73:0c:15:
                    5d:61:92:d2:98:f5:8e:d5:b7:72:40:7c:84:7b:5f:
                    b3:e0:d9:89:63:0d:8c:24:59:45:59:54:9e:9c:97:
                    ec:f6:04:ed:5d:ce:c7:08:6c:26:26:8f:04:41:52:
                    7a:3e:40:d9:ba:18:1c:4e:80:6b:eb:98:79:7a:f7:
                    a5:6d:b8:f3:12:f7:c3:6c:2a:ea:a2:08:9e:c4:55:
                    4b:25:d2:9d:62:9e:67:45:da:05:fb:e2:1b:3d:e9:
                    f6:44:c4:6f:5d:ba:66:16:e0:2b:dc:d4:0a:d1:98:
                    84:82:8e:6d:1d:b9:23:f3:ed:2e:5c:4e:cf:db:a3:
                    86:b5:c7:42:2e:1e:c6:aa:ac:e2:55:91:d0:a2:0d:
                    d9:b7:28:81:39:c7:8a:d4:8d:91:dd:d4:ba:37:93:
                    50:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:03:03:FB:DF:A1:ED:8F:C8:7A:7D:D1:F4:7B:32:D1:71:72:95:48
            X509v3 Authority Key Identifier:
                keyid:CD:E3:44:3C:DA:9A:EB:85:77:79:86:24:4D:C0:A5:7E:03:CA:F6:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/CDE3443CDA9AEB85777986244DC0A57E03CAF670.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDE3443CDA9AEB85777986244DC0A57E03CAF670.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/3133382e35392e3135322e302f32322d3234203d3e20323638313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:44:22:1e:a8:c6:6e:d9:e8:6c:13:71:0d:72:75:e7:fa:9b:
         7d:6a:60:7e:ec:ae:c8:fa:2b:43:3a:29:11:6e:d1:f2:c8:62:
         44:3c:bd:07:bc:09:21:16:13:bf:b2:6a:8f:db:02:61:be:21:
         37:ad:78:33:b7:81:14:c5:13:db:f1:07:27:ac:53:5a:34:38:
         04:6b:d8:4d:14:79:3a:c0:90:8f:dd:1e:c7:05:a8:11:82:96:
         1f:27:20:b3:61:00:6d:16:72:bb:65:ac:f0:34:2d:6d:9f:43:
         b0:10:33:a4:c9:79:79:3a:bd:7c:0a:3d:f8:5e:c8:25:e4:82:
         e8:a2:2a:e7:d6:9d:ce:ff:9f:30:bf:19:24:4b:ca:52:94:d1:
         9b:19:98:24:c0:78:0a:e9:5c:ab:98:8b:4f:87:84:b6:72:61:
         c3:7d:c4:a7:95:22:aa:31:64:b5:6b:e3:a7:9f:f0:ab:75:ef:
         0c:b1:33:47:1d:e2:5c:b0:e0:1b:ae:d0:48:de:f0:74:81:a9:
         6e:95:16:e5:06:d3:e0:2c:9b:cc:de:1a:5e:8d:e8:3c:f4:6e:
         51:2f:68:a4:bc:4f:5c:97:7f:4c:e3:be:c4:de:27:f0:4d:42:
         ea:90:37:aa:17:8f:35:fd:13:72:11:27:91:1f:80:03:c7:a4:
         7b:87:22:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:33:40 2026 by rpki-client