Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/3133382e3131372e35342e302f32342d3234203d3e20323634323239.roa
File:                     3133382e3131372e35342e302f32342d3234203d3e20323634323239.roa (raw, json)
Hash identifier:          o1LonPpcgxESN2Q8k7BZ8uxmWOdZ0+6om1trxBXMtrQ=
Subject key identifier:   8A:17:31:99:49:1D:E2:6B:A4:25:E2:2F:70:29:E6:43:86:A4:6E:DE
Certificate issuer:       /CN=1FAB27DF0501A80D35F996602ED2081F3C7A6B63
Certificate serial:       50A15D76F96C170409080FC645AAE34D36EFCB02
Authority key identifier: 1F:AB:27:DF:05:01:A8:0D:35:F9:96:60:2E:D2:08:1F:3C:7A:6B:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FAB27DF0501A80D35F996602ED2081F3C7A6B63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/3133382e3131372e35342e302f32342d3234203d3e20323634323239.roa
Signing time:             Tue 14 Jul 2026 20:19:59 +0000
ROA not before:           Tue 14 Jul 2026 20:14:59 +0000
ROA not after:            Tue 13 Jul 2027 20:19:59 +0000
asID:                     264229
IP address blocks:        138.117.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/1FAB27DF0501A80D35F996602ED2081F3C7A6B63.crl
                          rsync://rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/1FAB27DF0501A80D35F996602ED2081F3C7A6B63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FAB27DF0501A80D35F996602ED2081F3C7A6B63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:38:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:a1:5d:76:f9:6c:17:04:09:08:0f:c6:45:aa:e3:4d:36:ef:cb:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FAB27DF0501A80D35F996602ED2081F3C7A6B63
        Validity
            Not Before: Jul 14 20:14:59 2026 GMT
            Not After : Jul 13 20:19:59 2027 GMT
        Subject: CN=8A173199491DE26BA425E22F7029E64386A46EDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ad:3d:fa:ce:51:5e:d4:93:6b:6f:2a:ad:3e:
                    df:b1:80:80:1e:d0:38:aa:5c:8b:39:e3:8a:0a:22:
                    c2:0b:74:2b:ee:89:73:52:63:9b:48:7a:46:77:62:
                    95:d1:f7:c3:9d:eb:58:6d:12:4c:eb:f2:92:0e:3e:
                    eb:46:eb:c7:00:25:d7:2a:60:a3:28:8f:79:58:d6:
                    0f:44:47:50:95:38:a2:10:db:75:df:76:ce:42:75:
                    84:a0:e6:6d:34:69:53:11:0c:a3:e9:8f:82:a9:2e:
                    4e:dd:b1:b8:cb:ef:46:98:8e:74:83:15:41:fb:90:
                    56:70:1d:88:3d:c7:db:4f:d9:c7:8c:7c:f9:6c:2a:
                    a3:c4:c9:17:51:df:c7:eb:b0:4a:7b:cb:c1:80:8e:
                    84:ac:b5:ed:9d:de:f3:36:db:ee:b0:c4:22:92:db:
                    2e:15:b1:f1:f7:00:09:7c:47:75:c7:23:33:6f:af:
                    04:a7:82:81:dc:d5:e7:b9:5f:8e:a6:b7:c6:24:e4:
                    81:89:5a:eb:48:41:31:ae:27:66:22:0a:58:95:c3:
                    73:57:d4:bc:4e:c8:89:33:56:7a:9b:6f:4c:97:0c:
                    b0:6e:d8:b5:07:f1:66:0c:e7:14:bb:6d:f8:20:bb:
                    34:d3:11:a4:2b:74:1f:d1:36:08:0a:50:37:a3:77:
                    b8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:17:31:99:49:1D:E2:6B:A4:25:E2:2F:70:29:E6:43:86:A4:6E:DE
            X509v3 Authority Key Identifier:
                keyid:1F:AB:27:DF:05:01:A8:0D:35:F9:96:60:2E:D2:08:1F:3C:7A:6B:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/1FAB27DF0501A80D35F996602ED2081F3C7A6B63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FAB27DF0501A80D35F996602ED2081F3C7A6B63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/3133382e3131372e35342e302f32342d3234203d3e20323634323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:fb:c6:41:16:5d:6f:a8:2e:7c:d4:f2:9a:67:a4:f4:d5:98:
         ce:3c:45:e0:1c:9d:b3:30:b4:e9:a1:3a:3a:ca:dc:e7:db:bd:
         fd:58:c5:c8:d3:ca:ea:fb:7f:16:8c:ca:b1:fc:e6:bd:6c:32:
         fe:12:44:73:a8:f4:1c:8d:aa:e3:c2:40:7f:93:f3:3f:dc:f0:
         6a:70:a4:c4:4b:6a:2e:1a:f7:91:dc:79:f3:4e:b7:b3:47:56:
         84:15:05:b4:25:4a:42:fb:b1:f3:33:1e:74:46:fd:d0:37:c9:
         cd:3f:0e:38:4c:d3:8f:07:d8:5f:7f:4f:5a:3a:fb:e1:ed:30:
         dd:9e:53:29:62:3c:f4:d4:45:bd:b4:14:45:99:7d:6e:23:82:
         d1:e1:32:86:7a:13:32:d3:31:69:e2:7b:43:49:38:92:8b:d1:
         22:86:99:82:6a:18:13:f7:a6:6d:9c:a1:5c:eb:1a:bb:72:e7:
         ca:89:b2:f7:d0:2d:f2:38:c4:f6:0e:42:9c:02:f7:2e:b1:45:
         88:f0:42:fe:4d:01:2f:07:4c:f2:03:54:73:af:a9:8e:18:26:
         0a:4d:56:aa:15:57:c4:f3:24:22:85:76:af:0f:13:18:44:c2:
         56:4d:e8:8c:40:e1:32:cd:5c:f5:10:b9:0d:d2:40:49:9b:45:
         0b:0c:66:22
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUKFddvlsFwQJCA/GRarjTTbvywIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUZBQjI3REYwNTAxQTgwRDM1Rjk5NjYwMkVEMjA4MUYz
QzdBNkI2MzAeFw0yNjA3MTQyMDE0NTlaFw0yNzA3MTMyMDE5NTlaMDMxMTAvBgNV
BAMTKDhBMTczMTk5NDkxREUyNkJBNDI1RTIyRjcwMjlFNjQzODZBNDZFREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/rT36zlFe1JNrbyqtPt+xgIAe
0DiqXIs544oKIsILdCvuiXNSY5tIekZ3YpXR98Od61htEkzr8pIOPutG68cAJdcq
YKMoj3lY1g9ER1CVOKIQ23Xfds5CdYSg5m00aVMRDKPpj4KpLk7dsbjL70aYjnSD
FUH7kFZwHYg9x9tP2ceMfPlsKqPEyRdR38frsEp7y8GAjoSste2d3vM22+6wxCKS
2y4VsfH3AAl8R3XHIzNvrwSngoHc1ee5X46mt8Yk5IGJWutIQTGuJ2YiCliVw3NX
1LxOyIkzVnqbb0yXDLBu2LUH8WYM5xS7bfgguzTTEaQrdB/RNggKUDejd7gNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUihcxmUkd4mukJeIvcCnmQ4akbt4wHwYDVR0j
BBgwFoAUH6sn3wUBqA01+ZZgLtIIHzx6a2MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0ZVeWp4YlM2TTE4c0NjM3IyU0gzRDVzQkxHWGRISEY1dEF4Q2lCR0o1
NW8vMC8xRkFCMjdERjA1MDFBODBEMzVGOTk2NjAyRUQyMDgxRjNDN0E2QjYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGQUIyN0RGMDUwMUE4MEQz
NUY5OTY2MDJFRDIwODFGM0M3QTZCNjMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NGVXlqeGJTNk0xOHNDYzNyMlNIM0Q1c0JMR1hkSEhGNXRBeENpQkdKNTVvLzAv
MzEzMzM4MmUzMTMxMzcyZTM1MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzMjMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKdTYwDQYJKoZIhvcNAQELBQADggEBAFL7xkEW
XW+oLnzU8ppnpPTVmM48ReAcnbMwtOmhOjrK3Ofbvf1YxcjTyur7fxaMyrH85r1s
Mv4SRHOo9ByNquPCQH+T8z/c8GpwpMRLai4a95HcefNOt7NHVoQVBbQlSkL7sfMz
HnRG/dA3yc0/DjhM048H2F9/T1o6++HtMN2eUyliPPTURb20FEWZfW4jgtHhMoZ6
EzLTMWnie0NJOJKL0SKGmYJqGBP3pm2coVzrGrty58qJsvfQLfI4xPYOQpwC9y6x
RYjwQv5NAS8HTPIDVHOvqY4YJgpNVqoVV8TzJCKFdq8PExhEwlZN6IxA4TLNXPUQ
uQ3SQEmbRQsMZiI=
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:19:58 2026 by rpki-client