Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3133382e35392e32302e302f32322d3234203d3e203238323031.roa
File:                     3133382e35392e32302e302f32322d3234203d3e203238323031.roa (raw, json)
Hash identifier:          XHpAgDVXWmm3dvtSUNMBo9Vygmzy2O+ENv8zwtJBrI0=
Subject key identifier:   1F:CE:62:53:3E:D3:BC:E0:6E:30:95:90:88:4F:59:38:2F:8F:8F:7F
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       216D63EA3B1C4213AB31565065FA8C2783020A2D
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3133382e35392e32302e302f32322d3234203d3e203238323031.roa
Signing time:             Sat 04 Jul 2026 13:44:00 +0000
ROA not before:           Sat 04 Jul 2026 13:39:00 +0000
ROA not after:            Sat 03 Jul 2027 13:44:00 +0000
asID:                     28201
IP address blocks:        138.59.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 22:40:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:6d:63:ea:3b:1c:42:13:ab:31:56:50:65:fa:8c:27:83:02:0a:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Jul  4 13:39:00 2026 GMT
            Not After : Jul  3 13:44:00 2027 GMT
        Subject: CN=1FCE62533ED3BCE06E309590884F59382F8F8F7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:57:23:3c:61:f1:42:ed:f4:58:1e:f2:1f:13:
                    a7:ac:b0:9e:45:ed:15:60:2a:e5:65:a0:3a:a9:ce:
                    d0:a9:e5:df:d3:24:49:93:98:e4:3c:ac:39:a3:c9:
                    27:b9:45:03:1a:c5:2b:28:16:e3:42:1b:e8:50:f1:
                    b2:b4:a2:58:d9:e3:78:11:ab:b6:82:1f:d0:1a:e3:
                    06:43:d6:76:43:89:43:4d:de:78:d2:4e:dc:ee:7f:
                    3e:82:74:23:ba:ba:bf:0c:0d:29:89:b8:0e:7d:3d:
                    6b:98:2d:37:9c:24:75:69:e5:d5:a9:77:b5:29:7f:
                    a4:fe:b5:f8:6a:4f:77:ca:8b:bc:c7:56:9d:b5:14:
                    04:60:54:3d:16:d7:f5:b2:b4:16:ba:b9:87:96:ab:
                    fb:e0:0c:bc:12:b7:ad:02:24:52:3f:b2:d2:ae:bd:
                    01:38:2f:bb:af:d1:41:f5:47:e4:b3:22:06:ee:78:
                    2a:9a:6f:07:b4:92:42:13:56:98:f8:dd:07:20:06:
                    1e:f2:dc:f0:4b:f8:63:9b:8e:50:0e:d5:69:e7:02:
                    9f:9e:56:96:bf:45:9f:76:6c:ab:20:4c:c1:48:eb:
                    07:30:6e:f9:c1:3b:7c:5d:30:35:ee:24:6f:b6:dd:
                    54:73:4b:36:9d:6b:ce:6a:8a:9b:d0:c7:41:71:0e:
                    9e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:CE:62:53:3E:D3:BC:E0:6E:30:95:90:88:4F:59:38:2F:8F:8F:7F
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3133382e35392e32302e302f32322d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:a4:8c:94:6a:a6:07:b0:84:a6:80:82:10:37:8b:2c:68:ea:
         bc:54:0d:ee:21:15:df:f5:1c:17:10:d8:09:2c:74:73:b2:53:
         0e:d5:f2:ea:a3:25:ba:5f:95:c1:e4:89:68:e1:c5:b8:fc:74:
         f0:4b:9b:2a:56:f4:51:26:52:2f:e0:bd:93:66:82:e5:28:ba:
         d9:61:f5:0e:04:76:c5:7c:86:82:80:88:70:a6:99:fb:6d:01:
         ae:eb:18:bf:c3:b9:86:67:10:41:9c:f2:89:47:be:ac:4c:e4:
         6a:91:3c:73:e2:3f:59:65:51:36:23:91:91:24:dd:41:4c:90:
         bc:d3:45:80:ac:0d:ea:de:81:01:59:9d:99:36:27:b9:be:3c:
         85:8e:e8:a1:ef:6f:9a:27:69:57:98:79:0b:cd:65:c0:5e:7b:
         94:c2:ea:ac:a0:ae:6a:d1:6f:35:16:d9:e8:04:36:32:e3:5d:
         99:27:54:15:39:d8:98:ab:a0:99:4a:c8:08:5d:e0:c2:79:b7:
         0d:9a:bd:00:cd:99:ea:de:f2:a5:94:e5:bf:53:7f:c2:f1:c9:
         bb:d5:5e:93:86:46:b5:f7:bb:12:8d:90:db:63:b7:a7:4a:aa:
         f3:ce:5e:d2:21:89:1c:c3:7c:85:64:77:8f:7f:1b:38:49:a9:
         63:44:25:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:47:19 2026 by rpki-client