Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3133382e3138352e342e302f32322d3234203d3e20323636343333.roa
File:                     3133382e3138352e342e302f32322d3234203d3e20323636343333.roa (raw, json)
Hash identifier:          ptb2uVcA3iYjMDILxe60YKzNw6s9LKRQgMe1MXHtgLE=
Subject key identifier:   38:D2:69:15:62:51:9D:81:35:70:6C:01:CA:30:A4:BD:57:65:03:4B
Certificate issuer:       /CN=E4B0FA124B3B7D199E6A099F05777631A9F2C102
Certificate serial:       31AF06ADD2CFE9C755BAE4699DD27FBDFC13C686
Authority key identifier: E4:B0:FA:12:4B:3B:7D:19:9E:6A:09:9F:05:77:76:31:A9:F2:C1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3133382e3138352e342e302f32322d3234203d3e20323636343333.roa
Signing time:             Mon 11 May 2026 19:49:44 +0000
ROA not before:           Mon 11 May 2026 19:44:44 +0000
ROA not after:            Mon 10 May 2027 19:49:44 +0000
asID:                     266433
IP address blocks:        138.185.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.crl
                          rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 07:47:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:af:06:ad:d2:cf:e9:c7:55:ba:e4:69:9d:d2:7f:bd:fc:13:c6:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4B0FA124B3B7D199E6A099F05777631A9F2C102
        Validity
            Not Before: May 11 19:44:44 2026 GMT
            Not After : May 10 19:49:44 2027 GMT
        Subject: CN=38D2691562519D8135706C01CA30A4BD5765034B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1e:2c:f8:be:26:ad:41:71:f8:7d:2c:c4:da:
                    07:46:61:05:9f:67:a5:68:6e:78:1f:7a:2a:62:aa:
                    5d:be:d7:eb:e5:aa:50:04:a9:e1:b6:fd:ed:a4:c7:
                    8e:16:76:85:b6:94:0e:83:8d:97:4e:7e:c3:57:ec:
                    54:d1:56:9a:dd:05:17:a3:3f:88:48:ae:4f:d3:3a:
                    97:ea:54:e5:62:fe:cb:f9:7c:5e:32:60:30:f5:bc:
                    28:55:92:e9:83:eb:98:7d:33:15:f0:24:72:d4:6e:
                    98:49:62:bd:87:aa:3f:11:86:c1:df:8f:5a:ba:67:
                    8c:7d:6b:6c:de:51:b5:be:b1:a0:60:23:28:97:f5:
                    0b:bb:cc:b6:20:b9:66:78:d5:3d:61:df:e1:85:e6:
                    0e:3f:9a:44:2c:8d:fb:e1:f7:b4:ed:0d:87:81:ff:
                    83:ad:76:2c:aa:34:68:40:fe:96:81:84:d2:f6:f3:
                    ab:dd:09:5b:f7:5e:7d:20:1a:db:2b:50:15:1b:fd:
                    95:67:f1:59:64:05:df:d7:d0:85:14:ba:91:83:e1:
                    35:a5:09:30:d7:be:0e:05:c7:88:eb:c2:d2:a8:b8:
                    65:d4:9b:42:6f:fc:75:dc:f8:6c:53:91:f9:05:4f:
                    69:0b:8e:b9:b6:77:f6:21:01:7b:d5:de:4d:96:ac:
                    4b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D2:69:15:62:51:9D:81:35:70:6C:01:CA:30:A4:BD:57:65:03:4B
            X509v3 Authority Key Identifier:
                keyid:E4:B0:FA:12:4B:3B:7D:19:9E:6A:09:9F:05:77:76:31:A9:F2:C1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3133382e3138352e342e302f32322d3234203d3e20323636343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:a5:03:19:97:4a:ac:6b:32:fc:2b:6a:e2:82:08:f0:49:03:
         4f:f9:1f:ad:57:cb:db:d5:28:12:8c:67:77:df:c9:ed:d1:75:
         e6:fd:fd:2a:a6:21:96:b8:f4:c6:16:09:6c:bb:9b:09:24:29:
         e7:a2:eb:ab:1e:35:b1:b9:70:e6:da:ba:dc:4c:79:b2:4b:69:
         6d:24:d6:48:94:aa:91:31:2c:15:c6:2a:84:b5:f3:d4:73:24:
         2b:fc:18:19:56:73:37:c4:47:e0:6e:71:6c:bc:45:b6:78:e5:
         56:8e:09:f4:3a:21:b9:5e:72:05:67:20:18:72:88:e8:e8:22:
         15:9d:15:d3:dd:15:7c:56:0c:b6:d9:1f:66:b9:5f:f1:1e:41:
         c5:75:9f:f4:04:84:85:a3:a6:7e:65:d1:74:26:57:f3:38:d6:
         38:35:4e:db:53:8a:33:57:ed:26:6d:d3:01:77:3c:87:c0:99:
         7f:75:c3:9b:4f:65:50:b5:30:c5:d8:28:56:84:ff:57:f6:07:
         8b:dc:26:75:36:f2:6d:21:bb:c4:bd:42:57:e7:8c:2a:b3:07:
         64:3e:71:48:27:c1:92:4b:08:50:59:c6:45:99:dd:07:97:c0:
         c4:c2:ca:b7:74:ac:ea:d6:e8:19:7b:c3:3c:ac:2e:d9:9e:11:
         5d:21:9d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:16:41 2026 by rpki-client