Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/3133382e3138352e3233322e302f32322d3232203d3e203532383932.roa
File:                     3133382e3138352e3233322e302f32322d3232203d3e203532383932.roa (raw, json)
Hash identifier:          8s6Qt9jD9YnHcOgEWghJKII6kLkUYi/NugtTHA8rR0c=
Subject key identifier:   39:B8:2C:23:D4:10:AE:A5:4D:B5:90:28:BC:16:D4:74:FC:6E:24:62
Certificate issuer:       /CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
Certificate serial:       637C4AE4A0BFC937F6AC024BAAB940879B2C2D9A
Authority key identifier: 02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/3133382e3138352e3233322e302f32322d3232203d3e203532383932.roa
Signing time:             Tue 21 Apr 2026 04:38:05 +0000
ROA not before:           Tue 21 Apr 2026 04:33:05 +0000
ROA not after:            Tue 20 Apr 2027 04:38:05 +0000
asID:                     52892
IP address blocks:        138.185.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl
                          rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 18:36:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:7c:4a:e4:a0:bf:c9:37:f6:ac:02:4b:aa:b9:40:87:9b:2c:2d:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
        Validity
            Not Before: Apr 21 04:33:05 2026 GMT
            Not After : Apr 20 04:38:05 2027 GMT
        Subject: CN=39B82C23D410AEA54DB59028BC16D474FC6E2462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9d:8b:62:cb:9e:bb:0a:78:8c:86:eb:07:de:
                    5c:4e:d7:c6:fe:11:fe:0d:d3:37:70:e3:e9:3d:58:
                    55:fe:ad:bf:4c:d3:fa:91:7f:cb:ed:31:61:f9:fa:
                    e7:2e:f6:95:97:e8:06:16:20:a1:3e:6e:91:47:d8:
                    82:50:7f:ee:81:1f:72:7a:eb:df:f4:9a:87:8f:8c:
                    88:8c:70:72:0f:a9:cb:48:34:29:76:c8:73:c3:6c:
                    e4:8d:20:1a:29:c7:94:d3:4b:d0:dc:50:68:7e:64:
                    22:b0:20:bf:ed:76:7f:3c:05:5b:3e:d4:90:b2:60:
                    18:04:d9:53:f1:c3:93:76:24:c0:38:27:51:b3:dd:
                    03:55:d9:2c:46:61:8e:db:1a:20:6d:8c:a1:a0:04:
                    3c:38:d8:e9:80:7b:e5:44:4e:46:a0:44:df:ff:aa:
                    ab:6e:8a:5c:1f:3f:e8:64:78:01:a7:75:f9:9a:75:
                    13:6e:07:91:1a:3a:b9:f2:3e:fd:d8:7b:70:19:9e:
                    f4:fd:cc:50:0e:3f:06:d1:39:d7:a4:42:ae:39:47:
                    3d:75:06:17:b2:13:35:16:a3:66:56:11:db:67:82:
                    32:91:c8:84:99:7b:20:a1:9c:62:9c:cb:89:b1:67:
                    b1:26:df:f5:30:4f:04:44:8b:70:89:8e:ea:99:d2:
                    a4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B8:2C:23:D4:10:AE:A5:4D:B5:90:28:BC:16:D4:74:FC:6E:24:62
            X509v3 Authority Key Identifier:
                keyid:02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/3133382e3138352e3233322e302f32322d3232203d3e203532383932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:fd:a0:48:5f:25:5d:98:4e:70:ed:b5:e9:47:d8:da:b2:06:
         c8:69:69:ce:a1:41:80:cb:c4:62:44:a8:ba:66:11:09:ca:3f:
         9f:66:22:8f:bb:fa:79:37:5d:e2:7d:b6:30:16:78:74:15:a7:
         7e:ac:9a:b5:3a:15:fa:50:4c:4d:b5:84:33:92:6b:5b:98:d6:
         6a:dd:dd:85:2a:1b:b2:84:ac:ee:e9:fe:8f:b9:c0:d6:5b:7b:
         1a:73:3f:bd:90:ff:d8:71:e5:28:12:2e:c3:c4:f8:85:04:1b:
         65:2b:03:f4:8f:d3:44:bc:20:17:78:5e:22:5b:ab:9b:07:4c:
         d7:ca:50:c0:81:f2:60:c0:fc:e1:76:a6:59:cb:64:0c:f2:6c:
         3d:ba:13:fc:f8:77:1a:a0:6a:83:4e:d3:6a:cd:97:48:04:50:
         dc:ec:58:dd:e3:1c:9a:06:e6:48:2e:d6:01:dc:6d:84:e3:4e:
         d6:fe:87:93:c0:1f:ef:bc:c3:f9:05:7d:a0:6c:d1:f0:19:17:
         37:38:78:95:3e:97:63:1b:bd:c5:41:17:a8:85:23:4b:b1:89:
         75:3f:21:5a:24:43:2f:a9:0e:78:1d:28:63:cf:80:12:8f:ef:
         79:89:f4:42:bb:be:7f:e1:d7:f3:26:a7:fe:51:53:90:30:14:
         de:3e:5d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:16:53 2026 by rpki-client