Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3133382e3230342e38382e302f32322d3332203d3e203238363439.roa
File:                     3133382e3230342e38382e302f32322d3332203d3e203238363439.roa (raw, json)
Hash identifier:          PJA1EF4YoYOz4j7u1Ad4fro4pnlTwkO9XJjZQSorykA=
Subject key identifier:   DE:92:5D:BE:55:12:B7:0D:B9:CB:8D:5C:EB:15:14:2F:40:12:D0:93
Certificate issuer:       /CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
Certificate serial:       6DF83A15D15F85E074C6ACB0FEBCFBAB90880C23
Authority key identifier: 01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3133382e3230342e38382e302f32322d3332203d3e203238363439.roa
Signing time:             Fri 17 Jul 2026 21:01:10 +0000
ROA not before:           Fri 17 Jul 2026 20:56:10 +0000
ROA not after:            Fri 16 Jul 2027 21:01:10 +0000
asID:                     28649
IP address blocks:        138.204.88.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 22:36:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:f8:3a:15:d1:5f:85:e0:74:c6:ac:b0:fe:bc:fb:ab:90:88:0c:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
        Validity
            Not Before: Jul 17 20:56:10 2026 GMT
            Not After : Jul 16 21:01:10 2027 GMT
        Subject: CN=DE925DBE5512B70DB9CB8D5CEB15142F4012D093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:89:62:18:da:74:d6:d0:eb:d3:42:fa:8b:08:
                    c2:2f:ae:61:4d:97:a7:27:4a:c9:8e:47:69:bd:d5:
                    fb:0e:f4:45:01:16:49:29:48:6b:82:77:c8:20:79:
                    6d:1a:7f:82:dd:73:4a:ca:9c:f2:ab:7e:3b:4c:ec:
                    1d:b1:ed:95:6b:e6:8d:ec:66:ad:e6:26:03:5f:ac:
                    07:70:5f:07:cc:0d:7c:52:d1:20:f7:a4:91:f3:ae:
                    b9:27:17:dd:c3:59:74:be:b7:fd:75:1f:b5:36:a7:
                    0d:62:50:a5:98:af:dd:9a:58:20:57:b9:4f:3c:4d:
                    b0:b5:43:30:af:77:1d:b0:bd:71:11:39:e9:20:c9:
                    90:35:71:a6:84:97:ee:41:99:53:eb:0c:7c:7c:e7:
                    c1:85:98:16:27:1f:26:c8:05:83:8d:aa:39:76:ee:
                    6e:4f:ca:37:ec:0a:47:5a:f4:a0:81:5e:32:21:b1:
                    17:eb:98:68:2a:40:74:23:f8:1d:a2:24:39:64:d9:
                    21:d8:9e:b2:a4:89:5a:88:3c:bb:43:39:28:05:63:
                    7a:e2:ff:f7:57:3d:66:bc:5b:61:16:9b:19:b4:02:
                    31:64:cd:12:87:12:7b:33:7d:d2:3f:74:70:4a:13:
                    e9:22:fc:96:8c:90:e1:a5:41:a0:fb:c9:2b:41:e6:
                    12:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:92:5D:BE:55:12:B7:0D:B9:CB:8D:5C:EB:15:14:2F:40:12:D0:93
            X509v3 Authority Key Identifier:
                keyid:01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3133382e3230342e38382e302f32322d3332203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:84:67:fa:1c:68:2f:2a:3d:aa:69:2a:7a:ad:f0:c2:ca:7e:
         77:d1:ce:dd:3e:93:a2:58:44:96:3e:29:8d:1a:b1:93:a9:e6:
         29:17:d6:0c:93:4d:da:54:91:b3:18:d6:27:50:81:f7:c3:58:
         b1:55:8c:22:f2:a6:82:ae:43:2a:4d:e1:45:3c:15:75:d4:cb:
         58:1f:ab:99:16:a8:04:24:6e:0f:39:2d:d5:dd:a6:db:e4:e0:
         9d:c0:45:9f:46:f5:f3:04:6f:ef:70:13:e6:e7:e6:c1:10:5c:
         43:ed:b4:bb:7b:d7:c8:94:31:05:d8:f7:33:01:ef:99:d5:82:
         bc:bd:54:87:de:8a:ec:19:9e:b7:dd:57:b2:3e:6b:15:b7:fa:
         52:9c:d2:d1:6a:25:6a:55:ca:5b:91:dc:dd:74:fc:7f:11:f1:
         63:90:99:67:fc:1e:1c:c0:ce:76:52:32:e9:ba:79:82:0a:73:
         17:fe:7b:d9:68:8e:05:25:a1:33:76:86:5e:90:3a:e3:77:df:
         ef:05:2e:2a:b5:50:1b:f0:9d:aa:bd:d4:1c:68:c0:cf:90:69:
         32:aa:30:7a:7f:a4:a1:46:7d:80:08:26:5a:a0:68:f4:8a:3f:
         ce:1a:a5:1a:d5:29:fa:0a:6c:05:2d:1b:58:e8:f5:75:9b:1b:
         ca:82:de:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:37:26 2026 by rpki-client