Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/3133382e3138352e3233322e302f32342d3234203d3e203532383932.roa
File:                     3133382e3138352e3233322e302f32342d3234203d3e203532383932.roa (raw, json)
Hash identifier:          ScRR/PTCUA2ulg5vF0Jiy9Ps5R4UBv4hGNkvJtGdjwY=
Subject key identifier:   8E:84:69:D7:5C:EF:BA:E5:0C:79:A8:64:1B:73:B7:9D:0E:F5:5D:24
Certificate issuer:       /CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
Certificate serial:       03C2362557E83583A44F9CF1592804744A105641
Authority key identifier: 02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/3133382e3138352e3233322e302f32342d3234203d3e203532383932.roa
Signing time:             Tue 21 Apr 2026 04:38:08 +0000
ROA not before:           Tue 21 Apr 2026 04:33:08 +0000
ROA not after:            Tue 20 Apr 2027 04:38:08 +0000
asID:                     52892
IP address blocks:        138.185.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl
                          rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 18:36:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:c2:36:25:57:e8:35:83:a4:4f:9c:f1:59:28:04:74:4a:10:56:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
        Validity
            Not Before: Apr 21 04:33:08 2026 GMT
            Not After : Apr 20 04:38:08 2027 GMT
        Subject: CN=8E8469D75CEFBAE50C79A8641B73B79D0EF55D24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1c:b6:e1:59:a0:91:65:55:77:2b:af:45:72:
                    a5:2c:86:f9:1a:c1:fc:f8:0d:fd:c2:ae:8b:e1:e5:
                    14:b3:6b:16:62:3f:2c:fd:c8:f0:e9:88:69:93:04:
                    14:d5:68:d9:68:78:45:c9:1a:c7:e5:bd:af:e8:9e:
                    c9:1c:b5:5c:5d:d1:88:87:ba:8c:6c:66:5a:b5:12:
                    1f:99:72:c2:d3:b4:5d:9c:31:37:13:d7:87:00:b6:
                    ae:1c:43:d0:73:30:fd:98:68:40:24:c6:03:7c:27:
                    da:90:cf:cd:8d:4a:cb:a3:33:b0:35:8e:b1:43:37:
                    ef:45:70:c6:79:3b:72:f4:99:3e:2b:75:ea:a4:f5:
                    72:69:1a:14:b0:48:db:45:88:77:0c:3b:c7:75:ee:
                    17:a9:d8:6d:18:2d:71:ea:aa:98:63:17:d2:f1:5c:
                    b0:dc:7e:9d:e1:16:41:bd:18:0a:fb:fe:dc:92:a2:
                    f2:dc:d9:c4:12:f3:41:1f:07:15:83:8f:1d:27:fe:
                    23:5e:3e:62:6b:ab:23:69:88:44:01:4f:fd:2f:1e:
                    08:24:ea:ae:5c:8e:02:2e:0f:79:7b:04:34:b5:bc:
                    34:55:6a:c9:d1:51:90:c8:53:48:df:00:6b:33:01:
                    7e:90:0c:d4:1d:8b:ee:18:8f:91:a2:cf:f1:12:fb:
                    3c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:84:69:D7:5C:EF:BA:E5:0C:79:A8:64:1B:73:B7:9D:0E:F5:5D:24
            X509v3 Authority Key Identifier:
                keyid:02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/3133382e3138352e3233322e302f32342d3234203d3e203532383932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:54:2f:00:8e:ab:d2:96:40:ca:80:6b:bb:a5:fb:5e:48:4a:
         eb:9a:3f:7e:4d:93:57:0f:17:0d:54:59:44:e1:c6:1d:65:c4:
         86:14:9c:5f:dc:ef:1e:ff:31:b1:b4:51:fa:90:32:cf:1d:85:
         99:2d:2a:5b:53:0f:ef:bf:9a:29:0c:9f:63:2c:37:f6:40:b4:
         eb:f4:6a:dc:19:06:83:08:79:5a:52:91:b3:dd:3d:6b:4b:14:
         90:be:3a:dc:65:0d:d2:ab:85:e5:40:76:67:71:f0:b6:54:ed:
         bb:a0:0b:2b:20:e4:58:c8:f9:f3:48:4e:6e:5e:46:d6:41:3e:
         db:5d:d7:b5:b4:d9:3e:11:e6:d7:1d:bf:df:c0:f0:71:1a:af:
         13:07:f1:0c:bb:89:69:fa:f4:65:00:f2:db:c9:a1:33:98:d4:
         d2:b7:02:96:8b:6f:1c:a7:49:90:2b:b7:30:85:de:95:65:83:
         db:7a:4c:6b:20:f3:be:4e:7e:24:9f:e3:5d:af:d5:56:bc:5c:
         6b:ab:30:04:f1:95:ce:7c:b5:1d:e2:29:75:e3:d1:8e:ce:43:
         74:e3:1e:55:8c:b3:67:2d:08:e1:53:63:76:0c:28:48:6a:a3:
         86:78:0a:41:52:fc:6e:02:7e:5b:5d:2f:2f:22:b6:00:2a:39:
         93:69:68:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:55:49 2026 by rpki-client