Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CDscfHe9XzMiRYEHBD3iYfj1QGunHhkHLHAAZacvPbaj/0/3133382e39372e39322e302f32322d3332203d3e20323634313538.roa
File:                     3133382e39372e39322e302f32322d3332203d3e20323634313538.roa (raw, json)
Hash identifier:          /WhRgSUdG+GBU+4DONGgpJvYxIHeRBMwbf+x3mD+3cQ=
Subject key identifier:   71:D6:49:0C:ED:8A:FE:30:1F:B3:AA:48:73:1A:2C:70:70:AC:90:C4
Certificate issuer:       /CN=8D8103C50E13594487EBCABC153A71DA39AC6E49
Certificate serial:       4E08AC56CACB4FCF45375F6ADD928EACF72B6F58
Authority key identifier: 8D:81:03:C5:0E:13:59:44:87:EB:CA:BC:15:3A:71:DA:39:AC:6E:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D8103C50E13594487EBCABC153A71DA39AC6E49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CDscfHe9XzMiRYEHBD3iYfj1QGunHhkHLHAAZacvPbaj/0/3133382e39372e39322e302f32322d3332203d3e20323634313538.roa
Signing time:             Sun 26 Apr 2026 03:12:15 +0000
ROA not before:           Sun 26 Apr 2026 03:07:15 +0000
ROA not after:            Sun 25 Apr 2027 03:12:15 +0000
asID:                     264158
IP address blocks:        138.97.92.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CDscfHe9XzMiRYEHBD3iYfj1QGunHhkHLHAAZacvPbaj/0/8D8103C50E13594487EBCABC153A71DA39AC6E49.crl
                          rsync://rpki-repo.registro.br/repo/CDscfHe9XzMiRYEHBD3iYfj1QGunHhkHLHAAZacvPbaj/0/8D8103C50E13594487EBCABC153A71DA39AC6E49.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D8103C50E13594487EBCABC153A71DA39AC6E49.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 13:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:08:ac:56:ca:cb:4f:cf:45:37:5f:6a:dd:92:8e:ac:f7:2b:6f:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D8103C50E13594487EBCABC153A71DA39AC6E49
        Validity
            Not Before: Apr 26 03:07:15 2026 GMT
            Not After : Apr 25 03:12:15 2027 GMT
        Subject: CN=71D6490CED8AFE301FB3AA48731A2C7070AC90C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:30:a1:9e:2d:91:e5:8d:81:95:eb:15:0e:ec:
                    bd:01:3a:4c:00:7e:fa:20:d0:77:fa:7b:66:b0:07:
                    8d:8c:f8:c6:35:27:5a:b5:8b:b2:7d:e1:f9:b8:c3:
                    1f:64:b1:ad:5e:b3:18:16:3d:8d:41:10:c0:ea:ee:
                    a6:c3:72:4b:5d:b8:e2:14:18:6b:4a:1f:19:e2:d3:
                    9c:67:1e:7b:bc:af:4d:f6:ec:a3:5a:05:be:11:1a:
                    8c:9a:b8:87:29:1d:72:bf:e3:ff:16:f3:fa:b7:49:
                    5b:12:95:06:4a:52:fa:6f:1d:0f:c5:a8:dc:ac:56:
                    9b:b4:a5:4d:fe:de:da:31:9a:96:0f:79:81:a8:ef:
                    53:88:41:65:ea:9e:ae:53:b1:01:13:7f:f0:d0:a5:
                    fa:31:c1:91:8e:cf:15:28:d7:ad:55:98:3c:72:91:
                    da:a3:7b:f4:73:db:64:7f:2b:3b:e1:6d:22:ca:78:
                    5c:6d:c5:70:f7:4d:11:64:2b:00:1c:91:55:41:a7:
                    bc:38:a8:8f:f3:1e:ae:ab:58:03:96:a3:af:4e:4a:
                    34:1f:6a:c5:7a:fe:47:9b:f2:ff:47:7d:fd:d5:94:
                    df:37:f4:a8:cc:11:90:b3:d2:30:ab:5e:2c:b4:37:
                    64:d5:b2:f3:19:66:10:65:7b:19:0a:59:bc:76:ca:
                    03:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D6:49:0C:ED:8A:FE:30:1F:B3:AA:48:73:1A:2C:70:70:AC:90:C4
            X509v3 Authority Key Identifier:
                keyid:8D:81:03:C5:0E:13:59:44:87:EB:CA:BC:15:3A:71:DA:39:AC:6E:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CDscfHe9XzMiRYEHBD3iYfj1QGunHhkHLHAAZacvPbaj/0/8D8103C50E13594487EBCABC153A71DA39AC6E49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D8103C50E13594487EBCABC153A71DA39AC6E49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CDscfHe9XzMiRYEHBD3iYfj1QGunHhkHLHAAZacvPbaj/0/3133382e39372e39322e302f32322d3332203d3e20323634313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:80:19:06:1b:36:e5:65:05:9a:77:84:29:68:83:01:e5:58:
         f9:a4:d9:5b:7b:9a:a8:d4:d0:45:17:de:10:36:e9:95:42:9e:
         6f:02:be:2e:cb:ab:f3:f0:e5:e0:d9:8f:87:b0:76:a3:19:09:
         d8:68:71:05:bb:79:5a:ac:2a:64:77:9c:42:c8:d7:8a:2c:9e:
         66:10:f0:a5:87:0b:8e:17:21:3b:d1:ba:f1:f8:e3:62:86:50:
         91:49:ad:26:30:0b:47:f2:f9:0c:7d:3c:aa:9a:83:62:64:c3:
         7b:c0:7f:af:ab:af:be:61:f2:37:30:8f:a1:f1:aa:62:c7:3c:
         a5:7a:dd:ed:a7:24:6e:13:55:53:2e:1a:7f:67:49:b8:f7:73:
         d6:48:bd:4e:9c:6c:de:29:7d:aa:31:e0:34:d1:b8:0e:23:f2:
         8c:64:d3:d8:9d:4c:a0:33:0b:f8:52:7a:c2:de:83:a7:25:dd:
         d3:d7:7b:92:60:dd:b2:f0:9d:a6:d8:18:6f:18:d9:41:9e:79:
         1b:9c:4d:1c:32:11:18:a7:5c:58:68:87:9d:36:5a:41:2a:05:
         a2:e2:f2:7c:5b:62:68:2d:76:99:29:e9:b8:b7:9b:30:5f:2c:
         ec:89:eb:95:9a:3a:d2:28:a2:9b:b6:31:c6:b7:ca:eb:5b:c9:
         1b:5a:b1:ef
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTgisVsrLT89FN19q3ZKOrPcrb1gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEQ4MTAzQzUwRTEzNTk0NDg3RUJDQUJDMTUzQTcxREEz
OUFDNkU0OTAeFw0yNjA0MjYwMzA3MTVaFw0yNzA0MjUwMzEyMTVaMDMxMTAvBgNV
BAMTKDcxRDY0OTBDRUQ4QUZFMzAxRkIzQUE0ODczMUEyQzcwNzBBQzkwQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuMKGeLZHljYGV6xUO7L0BOkwA
fvog0Hf6e2awB42M+MY1J1q1i7J94fm4wx9ksa1esxgWPY1BEMDq7qbDcktduOIU
GGtKHxni05xnHnu8r0327KNaBb4RGoyauIcpHXK/4/8W8/q3SVsSlQZKUvpvHQ/F
qNysVpu0pU3+3toxmpYPeYGo71OIQWXqnq5TsQETf/DQpfoxwZGOzxUo161VmDxy
kdqje/Rz22R/KzvhbSLKeFxtxXD3TRFkKwAckVVBp7w4qI/zHq6rWAOWo69OSjQf
asV6/keb8v9Hff3VlN839KjMEZCz0jCrXiy0N2TVsvMZZhBlexkKWbx2ygNbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUcdZJDO2K/jAfs6pIcxoscHCskMQwHwYDVR0j
BBgwFoAUjYEDxQ4TWUSH68q8FTpx2jmsbkkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0RzY2ZIZTlYek1pUllFSEJEM2lZZmoxUUd1bkhoa0hMSEFBWmFjdlBi
YWovMC84RDgxMDNDNTBFMTM1OTQ0ODdFQkNBQkMxNTNBNzFEQTM5QUM2RTQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhEODEwM0M1MEUxMzU5NDQ4
N0VCQ0FCQzE1M0E3MURBMzlBQzZFNDkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NEc2NmSGU5WHpNaVJZRUhCRDNpWWZqMVFHdW5IaGtITEhBQVphY3ZQYmFqLzAv
MzEzMzM4MmUzOTM3MmUzOTMyMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzEzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCimFcMA0GCSqGSIb3DQEBCwUAA4IBAQBcgBkGGzbl
ZQWad4QpaIMB5Vj5pNlbe5qo1NBFF94QNumVQp5vAr4uy6vz8OXg2Y+HsHajGQnY
aHEFu3larCpkd5xCyNeKLJ5mEPClhwuOFyE70brx+ONihlCRSa0mMAtH8vkMfTyq
moNiZMN7wH+vq6++YfI3MI+h8apixzylet3tpyRuE1VTLhp/Z0m493PWSL1OnGze
KX2qMeA00bgOI/KMZNPYnUygMwv4UnrC3oOnJd3T13uSYN2y8J2m2BhvGNlBnnkb
nE0cMhEYp1xYaIedNlpBKgWi4vJ8W2JoLXaZKem4t5swXyzsieuVmjrSKKKbtjHG
t8rrW8kbWrHv
-----END CERTIFICATE-----
Generated at Wed May 13 17:11:40 2026 by rpki-client