Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/3133382e302e39322e302f32322d3234203d3e20323632343037.roa
File:                     3133382e302e39322e302f32322d3234203d3e20323632343037.roa (raw, json)
Hash identifier:          5N1EUOrT5V9OUxbrmDMA/wGxvzINXUVECQwo9SBz024=
Subject key identifier:   A5:2A:92:C3:28:E3:42:F8:FA:FB:B6:67:EB:39:09:4B:1A:CD:80:AD
Certificate issuer:       /CN=6D31497D50F2E7BCADD55F9BBCC79046B5989FD9
Certificate serial:       610B520DD014A21862E56A288F1B9F8131F06FE3
Authority key identifier: 6D:31:49:7D:50:F2:E7:BC:AD:D5:5F:9B:BC:C7:90:46:B5:98:9F:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D31497D50F2E7BCADD55F9BBCC79046B5989FD9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/3133382e302e39322e302f32322d3234203d3e20323632343037.roa
Signing time:             Tue 24 Mar 2026 12:35:21 +0000
ROA not before:           Tue 24 Mar 2026 12:30:21 +0000
ROA not after:            Tue 23 Mar 2027 12:35:21 +0000
asID:                     262407
IP address blocks:        138.0.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/6D31497D50F2E7BCADD55F9BBCC79046B5989FD9.crl
                          rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/6D31497D50F2E7BCADD55F9BBCC79046B5989FD9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D31497D50F2E7BCADD55F9BBCC79046B5989FD9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 02:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:0b:52:0d:d0:14:a2:18:62:e5:6a:28:8f:1b:9f:81:31:f0:6f:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D31497D50F2E7BCADD55F9BBCC79046B5989FD9
        Validity
            Not Before: Mar 24 12:30:21 2026 GMT
            Not After : Mar 23 12:35:21 2027 GMT
        Subject: CN=A52A92C328E342F8FAFBB667EB39094B1ACD80AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:bc:8e:9e:c0:89:1a:43:b8:f9:aa:06:7c:a5:
                    df:ca:77:7d:63:49:66:e3:23:23:fe:f2:88:ec:a2:
                    4a:d0:dc:cb:7e:f0:75:33:54:00:9b:02:00:80:fc:
                    5b:49:1e:c0:cf:90:6f:2a:c2:76:b0:72:8f:b3:18:
                    f5:02:55:36:28:be:37:e7:cb:a1:75:2d:38:08:55:
                    88:47:32:fa:91:4a:61:0e:73:f4:99:de:d1:a8:b4:
                    7c:11:b2:8e:14:51:1b:ca:fe:b5:43:1a:c3:e6:49:
                    67:b5:bf:1a:d0:19:16:00:62:25:29:0f:86:d5:62:
                    47:41:d1:da:b4:21:3c:40:6e:2f:37:8a:3a:ab:e5:
                    01:10:db:5d:f2:dd:0e:df:8a:e7:a3:b3:cc:1d:dd:
                    60:7e:f2:fa:43:30:98:e9:91:93:f9:99:1d:2e:72:
                    21:59:f2:9e:f9:ab:c8:3d:e3:8a:64:e8:e5:b5:da:
                    8f:09:60:48:e7:6b:3c:73:15:6e:7f:57:ce:56:36:
                    85:b5:ad:26:55:d2:aa:e9:2f:f7:3a:ff:c3:7a:aa:
                    c7:47:2d:d3:74:ea:05:9c:e2:67:5f:b0:26:1c:38:
                    60:2b:f8:af:de:2b:43:44:bf:03:9c:3d:7e:a6:40:
                    53:cd:a5:4d:d5:c0:ed:d9:a5:e0:e6:ab:83:6c:f2:
                    0d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:2A:92:C3:28:E3:42:F8:FA:FB:B6:67:EB:39:09:4B:1A:CD:80:AD
            X509v3 Authority Key Identifier:
                keyid:6D:31:49:7D:50:F2:E7:BC:AD:D5:5F:9B:BC:C7:90:46:B5:98:9F:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/6D31497D50F2E7BCADD55F9BBCC79046B5989FD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D31497D50F2E7BCADD55F9BBCC79046B5989FD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/3133382e302e39322e302f32322d3234203d3e20323632343037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:a2:4d:e5:59:93:d4:76:7b:1c:71:ab:41:9b:73:b8:5b:2a:
         6a:43:3a:30:ca:d6:5e:75:d5:81:98:61:f4:78:94:41:90:17:
         f7:da:9f:b4:d2:c8:14:1a:61:30:f8:fa:56:e8:90:a4:cb:58:
         f4:f7:3c:94:e4:8d:e1:e8:89:35:a2:51:af:98:3c:3f:95:08:
         7e:a3:cb:c0:1b:70:f8:cb:28:50:68:19:1b:a5:51:20:89:47:
         92:7f:7a:b7:fb:99:c6:f2:59:a3:d2:b0:06:02:93:e8:9f:ca:
         c5:ca:d7:ed:3b:b8:9d:e2:51:d3:11:0b:ab:39:6b:18:26:db:
         3a:61:9e:87:f4:c0:7a:08:7c:f6:f9:30:27:f9:2c:5b:50:b0:
         c2:b4:fa:1a:1b:4b:49:7d:24:80:da:bc:ec:c4:c2:a4:e2:d7:
         ba:d7:33:58:87:e4:26:0f:a5:44:e4:67:f9:35:88:ac:5a:44:
         85:59:db:53:e9:84:02:06:0d:2e:2a:ae:06:c5:f0:86:a2:be:
         df:db:33:05:4e:a3:8b:a6:d2:28:5d:c8:6c:b4:25:4c:fb:c4:
         95:e9:f6:51:50:5b:ac:5f:2b:a0:a5:e5:5f:e5:fe:61:0d:90:
         b4:a8:ab:9b:71:86:bd:3a:f9:cf:90:b1:8d:ed:66:3b:b0:4f:
         56:c1:36:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:47:51 2026 by rpki-client