Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/3133382e3131372e35352e302f32342d3234203d3e20323634323239.roa
File:                     3133382e3131372e35352e302f32342d3234203d3e20323634323239.roa (raw, json)
Hash identifier:          mxEoBlsIX4/OrrL8GahVzLZdgQDpUC1KMS4XtMsB5b8=
Subject key identifier:   F1:F3:45:60:55:1E:99:76:2F:C5:B9:62:DE:C0:B0:9F:7F:3D:7B:9C
Certificate issuer:       /CN=1FAB27DF0501A80D35F996602ED2081F3C7A6B63
Certificate serial:       7DF7026649F6DCF57CCC94583273450F7F66E362
Authority key identifier: 1F:AB:27:DF:05:01:A8:0D:35:F9:96:60:2E:D2:08:1F:3C:7A:6B:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FAB27DF0501A80D35F996602ED2081F3C7A6B63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/3133382e3131372e35352e302f32342d3234203d3e20323634323239.roa
Signing time:             Tue 14 Jul 2026 20:20:06 +0000
ROA not before:           Tue 14 Jul 2026 20:15:06 +0000
ROA not after:            Tue 13 Jul 2027 20:20:06 +0000
asID:                     264229
IP address blocks:        138.117.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/1FAB27DF0501A80D35F996602ED2081F3C7A6B63.crl
                          rsync://rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/1FAB27DF0501A80D35F996602ED2081F3C7A6B63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FAB27DF0501A80D35F996602ED2081F3C7A6B63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:38:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:f7:02:66:49:f6:dc:f5:7c:cc:94:58:32:73:45:0f:7f:66:e3:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FAB27DF0501A80D35F996602ED2081F3C7A6B63
        Validity
            Not Before: Jul 14 20:15:06 2026 GMT
            Not After : Jul 13 20:20:06 2027 GMT
        Subject: CN=F1F34560551E99762FC5B962DEC0B09F7F3D7B9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ec:91:75:57:63:b1:9a:12:bd:6e:23:4d:76:
                    3e:69:26:80:70:d2:22:f1:1a:17:77:a4:e3:df:1c:
                    d3:eb:91:82:29:0f:15:bd:09:66:cd:c3:eb:6b:98:
                    cd:87:c7:aa:7b:2b:da:bf:a8:98:b3:e1:ac:db:1e:
                    71:b0:57:33:54:e6:4f:b5:13:dc:46:3d:64:68:dc:
                    52:c9:b5:0e:d9:1d:93:47:41:8f:e5:e0:c1:5e:94:
                    e3:9e:38:11:c6:4c:d4:01:6a:34:2d:bc:38:96:e9:
                    25:90:d3:ab:a3:44:67:dd:cf:71:24:e6:24:18:c2:
                    d4:9e:5f:c3:62:70:fe:54:6b:47:f5:a2:23:83:52:
                    e1:86:84:22:41:9d:2d:88:ce:5a:0f:51:91:96:96:
                    a9:fa:94:5a:3f:8d:8b:a6:89:ce:f5:f5:54:d8:0a:
                    f7:cf:ff:0c:6f:41:d7:59:87:a1:f9:44:04:c2:0e:
                    b9:dc:2f:9b:e6:38:e2:28:f2:87:c1:68:2b:14:96:
                    d5:4e:6b:a8:93:10:93:fc:81:33:25:8d:6e:15:bb:
                    7e:69:59:e6:d2:ab:a8:34:b4:e9:08:c4:2f:70:ec:
                    03:72:e3:45:82:93:b1:5d:f7:e9:62:db:f3:8f:63:
                    f7:16:64:4f:68:5d:e3:ac:c3:b1:2e:c2:d3:5e:cf:
                    75:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F3:45:60:55:1E:99:76:2F:C5:B9:62:DE:C0:B0:9F:7F:3D:7B:9C
            X509v3 Authority Key Identifier:
                keyid:1F:AB:27:DF:05:01:A8:0D:35:F9:96:60:2E:D2:08:1F:3C:7A:6B:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/1FAB27DF0501A80D35F996602ED2081F3C7A6B63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FAB27DF0501A80D35F996602ED2081F3C7A6B63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/3133382e3131372e35352e302f32342d3234203d3e20323634323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:fc:92:63:87:8a:82:76:95:e6:1c:b4:6f:75:0a:ce:a9:6f:
         67:3c:f2:c7:80:15:8d:a6:a3:0f:7f:66:36:68:de:32:7c:65:
         1b:97:48:48:78:6a:1b:bb:dd:99:ed:ad:80:cf:47:2e:89:a1:
         3d:d6:0f:48:67:14:46:5c:9b:e6:87:25:db:3a:f6:d5:02:74:
         15:29:95:0e:ba:f6:2c:c4:b0:61:69:cf:6f:08:25:17:40:55:
         0c:fb:97:a6:a3:b1:6e:51:2d:83:0f:d9:41:b3:02:9f:19:e8:
         ec:af:76:7c:10:51:6e:91:09:41:5e:e5:76:8a:06:41:0f:e8:
         d4:4b:33:d7:80:dd:b1:cc:6d:66:75:9f:99:e9:38:e5:98:8b:
         5c:8e:1d:f0:70:56:23:22:34:0e:28:0c:29:f9:60:bf:4b:3d:
         e1:79:f7:45:84:03:c4:89:76:9d:02:e1:3c:4e:13:cb:43:dd:
         56:f4:e3:7f:cc:72:59:72:ba:d2:8d:c1:e1:d2:6f:04:db:0a:
         e2:b8:e5:eb:dc:5c:c1:76:97:94:3e:f2:86:b0:a2:1a:ef:2d:
         b7:20:38:bf:75:6c:b4:c8:4b:67:e1:88:93:fc:5e:38:d1:cd:
         44:37:e8:43:21:9a:85:13:5e:16:a2:d1:4b:bb:c7:6e:fe:c1:
         10:2b:9f:36
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUffcCZkn23PV8zJRYMnNFD39m42IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUZBQjI3REYwNTAxQTgwRDM1Rjk5NjYwMkVEMjA4MUYz
QzdBNkI2MzAeFw0yNjA3MTQyMDE1MDZaFw0yNzA3MTMyMDIwMDZaMDMxMTAvBgNV
BAMTKEYxRjM0NTYwNTUxRTk5NzYyRkM1Qjk2MkRFQzBCMDlGN0YzRDdCOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC27JF1V2OxmhK9biNNdj5pJoBw
0iLxGhd3pOPfHNPrkYIpDxW9CWbNw+trmM2Hx6p7K9q/qJiz4azbHnGwVzNU5k+1
E9xGPWRo3FLJtQ7ZHZNHQY/l4MFelOOeOBHGTNQBajQtvDiW6SWQ06ujRGfdz3Ek
5iQYwtSeX8NicP5Ua0f1oiODUuGGhCJBnS2IzloPUZGWlqn6lFo/jYumic719VTY
CvfP/wxvQddZh6H5RATCDrncL5vmOOIo8ofBaCsUltVOa6iTEJP8gTMljW4Vu35p
WebSq6g0tOkIxC9w7ANy40WCk7Fd9+li2/OPY/cWZE9oXeOsw7EuwtNez3XjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU8fNFYFUemXYvxbli3sCwn389e5wwHwYDVR0j
BBgwFoAUH6sn3wUBqA01+ZZgLtIIHzx6a2MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0ZVeWp4YlM2TTE4c0NjM3IyU0gzRDVzQkxHWGRISEY1dEF4Q2lCR0o1
NW8vMC8xRkFCMjdERjA1MDFBODBEMzVGOTk2NjAyRUQyMDgxRjNDN0E2QjYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGQUIyN0RGMDUwMUE4MEQz
NUY5OTY2MDJFRDIwODFGM0M3QTZCNjMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NGVXlqeGJTNk0xOHNDYzNyMlNIM0Q1c0JMR1hkSEhGNXRBeENpQkdKNTVvLzAv
MzEzMzM4MmUzMTMxMzcyZTM1MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzMjMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKdTcwDQYJKoZIhvcNAQELBQADggEBAJn8kmOH
ioJ2leYctG91Cs6pb2c88seAFY2mow9/ZjZo3jJ8ZRuXSEh4ahu73ZntrYDPRy6J
oT3WD0hnFEZcm+aHJds69tUCdBUplQ669izEsGFpz28IJRdAVQz7l6ajsW5RLYMP
2UGzAp8Z6OyvdnwQUW6RCUFe5XaKBkEP6NRLM9eA3bHMbWZ1n5npOOWYi1yOHfBw
ViMiNA4oDCn5YL9LPeF590WEA8SJdp0C4TxOE8tD3Vb043/McllyutKNweHSbwTb
CuK45evcXMF2l5Q+8oawohrvLbcgOL91bLTIS2fhiJP8XjjRzUQ36EMhmoUTXhai
0Uu7x27+wRArnzY=
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:19:56 2026 by rpki-client