Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/3133382e3132312e3133362e302f32322d3234203d3e20323634323937.roa
File:                     3133382e3132312e3133362e302f32322d3234203d3e20323634323937.roa (raw, json)
Hash identifier:          sbsNL26BBvxsuk1OSCUciuToS2+FTTV4gC6sgeTANXM=
Subject key identifier:   AB:73:31:EC:9A:F4:29:77:DC:89:60:A4:B0:2B:62:27:AA:09:61:BA
Certificate issuer:       /CN=BB630F032807A55E781DAE033958D10E9EA54D5B
Certificate serial:       257295F37656B8D3B6F4D663C3FE338F971B1945
Authority key identifier: BB:63:0F:03:28:07:A5:5E:78:1D:AE:03:39:58:D1:0E:9E:A5:4D:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB630F032807A55E781DAE033958D10E9EA54D5B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/3133382e3132312e3133362e302f32322d3234203d3e20323634323937.roa
Signing time:             Thu 23 Jul 2026 14:17:28 +0000
ROA not before:           Thu 23 Jul 2026 14:12:28 +0000
ROA not after:            Thu 22 Jul 2027 14:17:28 +0000
asID:                     264297
IP address blocks:        138.121.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/BB630F032807A55E781DAE033958D10E9EA54D5B.crl
                          rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/BB630F032807A55E781DAE033958D10E9EA54D5B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB630F032807A55E781DAE033958D10E9EA54D5B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 11:58:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:72:95:f3:76:56:b8:d3:b6:f4:d6:63:c3:fe:33:8f:97:1b:19:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB630F032807A55E781DAE033958D10E9EA54D5B
        Validity
            Not Before: Jul 23 14:12:28 2026 GMT
            Not After : Jul 22 14:17:28 2027 GMT
        Subject: CN=AB7331EC9AF42977DC8960A4B02B6227AA0961BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:71:7b:a6:89:78:47:b2:b5:b7:d3:0e:d0:a8:
                    b7:7a:cb:95:af:22:1d:13:66:45:2b:42:8c:25:80:
                    df:c2:b3:11:2d:8b:01:60:88:3f:a7:53:7c:59:c4:
                    47:72:55:7c:a0:58:f4:d7:d2:15:9c:7e:80:20:f8:
                    56:31:7d:8d:b0:f2:23:e5:8c:ab:ac:9f:3b:77:b9:
                    a4:ca:79:e9:90:33:81:75:ad:7f:4f:2c:86:2a:7f:
                    66:1f:b7:12:49:98:71:46:1b:3d:81:8f:04:f7:7e:
                    59:d4:23:85:6d:db:da:76:c5:fd:84:76:4a:d6:c2:
                    d8:08:65:29:ba:55:05:55:08:6d:1a:2a:4c:86:e8:
                    84:c3:67:fe:1b:3f:d2:81:6f:17:03:c3:5e:a4:cb:
                    fb:a6:51:ec:58:ba:a8:f8:11:eb:16:27:b6:f3:8b:
                    d0:56:35:7a:0f:6e:b6:fa:27:98:12:f3:9c:48:2e:
                    b3:7d:b8:87:6b:b0:66:98:f7:65:63:67:15:73:4e:
                    5e:81:a9:88:94:cd:d4:ca:fc:7f:0f:fe:e8:8b:ed:
                    be:05:e7:3e:7e:ff:04:1f:28:98:81:b9:bb:5b:da:
                    eb:9b:4e:63:10:75:cb:a0:47:30:f6:db:2e:92:f1:
                    a6:ba:86:7c:aa:f2:64:00:29:ab:42:88:e2:5a:13:
                    1d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:73:31:EC:9A:F4:29:77:DC:89:60:A4:B0:2B:62:27:AA:09:61:BA
            X509v3 Authority Key Identifier:
                keyid:BB:63:0F:03:28:07:A5:5E:78:1D:AE:03:39:58:D1:0E:9E:A5:4D:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/BB630F032807A55E781DAE033958D10E9EA54D5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB630F032807A55E781DAE033958D10E9EA54D5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/3133382e3132312e3133362e302f32322d3234203d3e20323634323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:c6:f7:7a:12:b3:3d:66:d0:c7:8e:15:73:66:7a:35:a8:cb:
         d2:b1:b6:db:14:52:18:af:87:cf:4c:07:a3:1d:cb:2c:a2:46:
         94:46:70:0f:ec:d6:c7:cc:10:79:10:e8:a4:9c:1d:37:ee:6f:
         50:0a:32:80:e6:44:30:e2:6a:bf:64:1e:d6:4a:2e:78:a4:11:
         e9:a0:54:7a:df:c3:ce:fc:a0:7f:60:13:1a:52:0e:15:32:be:
         00:7e:73:5a:9c:60:c8:03:1f:9a:ad:fe:db:3a:7d:d4:5a:32:
         fd:27:ed:21:20:db:37:1d:8f:ea:8c:a1:cd:17:a6:66:3c:25:
         ef:4c:8c:b8:7e:fd:10:af:19:66:50:d1:9e:6e:59:ef:de:92:
         21:fb:5f:69:6f:3a:38:31:6b:c1:81:ae:66:28:e5:6f:32:26:
         97:e0:8f:c2:ec:24:32:b3:7f:1b:8b:f9:c0:71:1f:10:64:1d:
         91:75:41:09:47:5c:91:41:65:88:68:3d:d3:cc:1d:2b:12:a5:
         94:1d:40:2d:2c:83:a1:55:3b:78:b2:b2:e8:cf:5f:12:a1:80:
         98:21:22:6a:0e:b5:0a:1e:d4:94:9d:34:4e:4c:7b:cc:d3:fb:
         ad:00:3c:dd:3f:95:b0:f2:a3:f4:b0:73:d6:70:6a:05:68:96:
         54:9c:b2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:17:45 2026 by rpki-client