Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/3133382e33362e38302e302f32322d3234203d3e20323634353731.roa
File:                     3133382e33362e38302e302f32322d3234203d3e20323634353731.roa (raw, json)
Hash identifier:          3bU8saPGNaxb8NlHC4Rgwr73pT+NeK7FEI3q8+Gm8KE=
Subject key identifier:   2F:71:87:D3:E7:B3:54:74:E3:D1:A7:B3:85:07:91:A5:98:06:BE:69
Certificate issuer:       /CN=84210C699884A23E38D45F40B27833D84A440F91
Certificate serial:       415DDAF73693AFD5EF6C79E09B28D4FFBEA78A2F
Authority key identifier: 84:21:0C:69:98:84:A2:3E:38:D4:5F:40:B2:78:33:D8:4A:44:0F:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84210C699884A23E38D45F40B27833D84A440F91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/3133382e33362e38302e302f32322d3234203d3e20323634353731.roa
Signing time:             Tue 16 Jun 2026 18:00:00 +0000
ROA not before:           Tue 16 Jun 2026 17:55:00 +0000
ROA not after:            Tue 15 Jun 2027 18:00:00 +0000
asID:                     264571
IP address blocks:        138.36.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.crl
                          rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84210C699884A23E38D45F40B27833D84A440F91.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 07:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:5d:da:f7:36:93:af:d5:ef:6c:79:e0:9b:28:d4:ff:be:a7:8a:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84210C699884A23E38D45F40B27833D84A440F91
        Validity
            Not Before: Jun 16 17:55:00 2026 GMT
            Not After : Jun 15 18:00:00 2027 GMT
        Subject: CN=2F7187D3E7B35474E3D1A7B3850791A59806BE69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4e:38:c6:70:67:86:9b:e5:d5:da:55:d9:38:
                    f1:c7:35:ae:e1:b5:62:f9:4a:d4:ac:75:a2:d7:1b:
                    90:58:f4:b2:40:a8:6b:0e:73:2d:2c:9a:36:1b:d7:
                    a0:1c:b0:24:7e:db:fc:b9:83:b2:e6:74:d4:59:a5:
                    f4:cc:a2:4b:1a:59:1a:79:62:29:b0:cd:c9:f9:fe:
                    1b:eb:ce:00:ab:1b:3d:6f:af:6c:fa:60:28:d9:ec:
                    33:21:d3:3d:09:32:46:00:c7:60:2e:ed:4d:d1:3a:
                    23:83:18:a6:53:5b:96:04:73:7c:6b:52:2d:ed:3b:
                    97:f5:90:78:b4:a7:12:a2:e0:36:d8:26:b8:81:9b:
                    4f:8b:c9:9b:bf:fe:a3:14:9c:50:01:ab:63:63:92:
                    d7:61:42:5e:81:b0:a3:e0:b0:11:c9:3f:3f:dc:8c:
                    9f:d7:a0:59:f5:41:88:3c:44:1f:55:af:33:c8:dd:
                    23:01:3a:83:ac:75:3a:e5:95:d3:6b:d9:0c:7c:f1:
                    0a:d8:09:9d:a8:42:3e:30:ba:ce:2c:43:8d:af:ef:
                    72:ea:a1:2b:f0:a9:a2:b2:35:7d:f9:93:27:37:d3:
                    f9:63:11:f0:6e:3d:43:c7:81:9c:ea:0e:7b:f4:6d:
                    cc:58:d6:37:67:77:bf:b2:00:da:9e:c1:46:c6:9a:
                    51:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:71:87:D3:E7:B3:54:74:E3:D1:A7:B3:85:07:91:A5:98:06:BE:69
            X509v3 Authority Key Identifier:
                keyid:84:21:0C:69:98:84:A2:3E:38:D4:5F:40:B2:78:33:D8:4A:44:0F:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84210C699884A23E38D45F40B27833D84A440F91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/3133382e33362e38302e302f32322d3234203d3e20323634353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:b1:48:b8:19:31:ec:e7:fc:e0:a7:68:ff:fd:5f:2f:12:1d:
         d0:20:87:24:27:41:1f:9e:ab:be:4f:bf:3f:86:c1:f6:b9:07:
         eb:5d:d5:b1:0a:9e:97:ae:ea:43:4e:40:b6:5c:48:70:6c:13:
         8c:8b:49:d2:05:6d:bb:bf:ce:62:de:7c:05:1a:84:e9:14:3a:
         00:f4:74:df:81:59:89:16:34:c9:d2:2b:5a:0e:c3:91:81:eb:
         8b:16:06:fe:1f:a7:36:42:16:1c:71:de:76:97:51:5b:2b:d2:
         54:ee:97:03:e3:35:b4:09:ac:22:7a:b5:b5:cf:95:c6:37:a7:
         a2:8f:7e:19:3a:15:b4:35:14:c5:48:fe:d7:01:c6:d4:02:b4:
         4d:32:98:9e:93:b1:f1:41:61:d6:a3:a1:93:45:72:b0:c0:3a:
         8b:4a:d5:3a:cb:1e:72:dc:c7:56:d5:cd:a3:bb:59:c5:d1:cf:
         7d:03:76:c0:1a:a4:28:6a:a3:b1:84:fb:0c:3f:1d:8e:1f:73:
         04:6b:b7:0a:bf:26:79:93:c1:1a:3d:e8:79:ce:f2:f8:9d:d0:
         21:80:01:86:cc:68:fc:3e:7b:cf:1b:60:93:9e:7d:d6:78:e7:
         20:51:96:10:d2:43:c3:6e:bb:ed:8e:55:d8:55:10:57:22:d9:
         d0:07:be:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:48:44 2026 by rpki-client