Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3133382e3138362e3138342e302f32322d3332203d3e203631373834.roa
File:                     3133382e3138362e3138342e302f32322d3332203d3e203631373834.roa (raw, json)
Hash identifier:          JczwydLDkdNzKk6Cnq/rkI8Jh7uMVayXhsixOY3NYF8=
Subject key identifier:   83:68:7F:28:B1:A1:D0:91:22:E8:78:09:0B:8F:8E:86:A6:8A:DB:BE
Certificate issuer:       /CN=340AD042C748E444BC9CE7CC90AE14015B6E3BAE
Certificate serial:       2749F782D570FCF1F61EED47EABC1EEFDA6507FF
Authority key identifier: 34:0A:D0:42:C7:48:E4:44:BC:9C:E7:CC:90:AE:14:01:5B:6E:3B:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/340AD042C748E444BC9CE7CC90AE14015B6E3BAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3133382e3138362e3138342e302f32322d3332203d3e203631373834.roa
Signing time:             Fri 04 Sep 2026 11:57:00 +0000
ROA not before:           Fri 04 Sep 2026 11:52:00 +0000
ROA not after:            Fri 03 Sep 2027 11:57:00 +0000
asID:                     61784
IP address blocks:        138.186.184.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/340AD042C748E444BC9CE7CC90AE14015B6E3BAE.crl
                          rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/340AD042C748E444BC9CE7CC90AE14015B6E3BAE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/340AD042C748E444BC9CE7CC90AE14015B6E3BAE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 03:15:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:49:f7:82:d5:70:fc:f1:f6:1e:ed:47:ea:bc:1e:ef:da:65:07:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=340AD042C748E444BC9CE7CC90AE14015B6E3BAE
        Validity
            Not Before: Sep  4 11:52:00 2026 GMT
            Not After : Sep  3 11:57:00 2027 GMT
        Subject: CN=83687F28B1A1D09122E878090B8F8E86A68ADBBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:53:9a:44:a6:e6:cd:bd:99:3e:b5:18:1b:d9:
                    1f:12:d9:61:eb:17:aa:8a:63:11:f8:bf:92:47:f2:
                    bf:94:2a:c3:7f:4e:7b:ba:cf:09:67:00:26:f9:cc:
                    02:59:3b:40:de:91:27:36:91:24:e0:4f:1a:a1:e9:
                    ad:62:88:dd:fc:9c:d7:1c:fa:03:27:d9:29:a1:b7:
                    31:e5:73:d9:9b:d3:55:d5:fc:39:bf:b3:c1:8d:47:
                    09:14:dc:18:28:43:5d:c2:7f:3b:6a:c8:93:e3:ef:
                    74:74:46:d2:d8:52:42:b7:9b:4a:bb:81:07:d2:f9:
                    03:75:22:80:d6:8a:52:83:bb:df:0c:5b:d5:39:f7:
                    31:7b:1f:bf:fc:98:8e:39:44:18:6b:b6:b1:b7:24:
                    5c:7b:24:84:cc:07:31:d4:fa:75:ad:47:b1:13:7d:
                    e3:cf:91:22:0b:86:63:68:5d:56:b2:8f:03:48:d8:
                    27:8a:92:7c:49:a4:c5:c3:d6:35:23:dc:aa:76:ce:
                    35:89:13:e4:3c:b8:05:13:df:fe:aa:c2:1e:79:a1:
                    b6:18:bf:fe:7e:1e:b7:7b:30:97:a3:7d:bd:ac:46:
                    e8:d5:2a:07:91:d3:5a:a7:d1:32:f2:29:3c:cf:f1:
                    c9:d4:79:12:47:aa:a6:15:6d:4b:fa:b6:09:ca:96:
                    ab:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:68:7F:28:B1:A1:D0:91:22:E8:78:09:0B:8F:8E:86:A6:8A:DB:BE
            X509v3 Authority Key Identifier:
                keyid:34:0A:D0:42:C7:48:E4:44:BC:9C:E7:CC:90:AE:14:01:5B:6E:3B:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/340AD042C748E444BC9CE7CC90AE14015B6E3BAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/340AD042C748E444BC9CE7CC90AE14015B6E3BAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3133382e3138362e3138342e302f32322d3332203d3e203631373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:e5:f4:80:d4:0a:24:58:90:58:d2:0c:31:14:e9:5a:2f:2c:
         56:7c:19:96:7d:58:1b:c1:75:8c:86:40:da:c0:35:53:17:0f:
         15:e7:dd:79:a5:31:bf:b7:6e:8e:ca:93:2a:bc:24:78:e5:1c:
         e4:25:d3:ab:4a:6a:40:3a:9d:66:e1:c4:90:35:36:6b:59:33:
         88:1b:d1:4c:0b:a7:9b:4a:e9:e6:e9:ad:c3:32:40:59:d2:47:
         54:76:66:a6:8a:17:0b:0d:e1:14:e9:84:70:1c:b2:f7:a8:83:
         b4:91:ed:83:d8:01:ef:e3:3a:ca:38:c2:1d:5c:5e:ae:61:cd:
         d4:84:78:3e:1f:3c:b4:9f:18:be:80:c1:ff:2c:74:fd:9a:24:
         ef:1e:6a:d2:cc:8b:f7:59:ac:bb:89:c2:f7:60:40:05:22:f1:
         1e:09:43:a8:47:40:1f:ca:01:f3:aa:21:94:b1:4e:47:cb:6a:
         82:6c:64:27:ec:cc:52:19:bf:89:52:72:e3:f7:a8:9e:14:8c:
         c3:7f:5d:9b:e7:67:40:57:3d:85:67:4f:46:89:9a:bc:00:13:
         ac:04:e0:19:0f:38:48:83:0d:01:29:37:0e:7d:d8:36:ba:02:
         b8:0d:1d:69:6d:16:e6:78:53:b8:43:3c:75:b8:37:19:a5:e7:
         64:88:75:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:13:28 2026 by rpki-client