Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/3133382e3132322e3136382e302f32322d3332203d3e20323632393532.roa
File:                     3133382e3132322e3136382e302f32322d3332203d3e20323632393532.roa (raw, json)
Hash identifier:          PTKOlz1kECMznXyAIOPClRSOxEtp+AzkghEDX6lHH3k=
Subject key identifier:   7A:77:1C:5C:93:CD:BD:D3:39:74:59:0F:EE:5B:A3:95:DD:6F:8B:D5
Certificate issuer:       /CN=4F91864780E3C640327E24B527D2248C0C5CAD25
Certificate serial:       20E8A6BE449D399C0C0ED2D1ED1D8EEAF97BFA3D
Authority key identifier: 4F:91:86:47:80:E3:C6:40:32:7E:24:B5:27:D2:24:8C:0C:5C:AD:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F91864780E3C640327E24B527D2248C0C5CAD25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/3133382e3132322e3136382e302f32322d3332203d3e20323632393532.roa
Signing time:             Tue 14 Jul 2026 13:18:22 +0000
ROA not before:           Tue 14 Jul 2026 13:13:22 +0000
ROA not after:            Tue 13 Jul 2027 13:18:22 +0000
asID:                     262952
IP address blocks:        138.122.168.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/4F91864780E3C640327E24B527D2248C0C5CAD25.crl
                          rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/4F91864780E3C640327E24B527D2248C0C5CAD25.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F91864780E3C640327E24B527D2248C0C5CAD25.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 12:59:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:e8:a6:be:44:9d:39:9c:0c:0e:d2:d1:ed:1d:8e:ea:f9:7b:fa:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F91864780E3C640327E24B527D2248C0C5CAD25
        Validity
            Not Before: Jul 14 13:13:22 2026 GMT
            Not After : Jul 13 13:18:22 2027 GMT
        Subject: CN=7A771C5C93CDBDD33974590FEE5BA395DD6F8BD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0d:b2:71:5f:b3:1d:3b:43:ba:34:91:ec:8f:
                    56:62:a7:5b:25:13:f0:08:37:d8:14:08:c7:09:85:
                    16:15:f0:7c:d8:4c:ff:d4:8b:fb:28:4e:51:dd:8d:
                    bf:23:9d:5b:f2:22:53:33:e3:48:34:f5:d1:1b:be:
                    a0:1d:18:10:c3:12:84:8a:8f:81:4e:cd:ab:e5:5d:
                    55:46:75:7c:91:2a:50:51:18:45:88:7f:2b:6f:d6:
                    fe:94:a9:81:40:6d:b4:54:b3:bf:d1:86:2a:51:cd:
                    a1:d2:0e:0b:6c:e6:9f:27:5d:3c:77:af:ff:c7:e3:
                    25:8a:0c:39:41:f5:68:da:cf:44:ee:67:43:b5:8b:
                    f2:12:95:6b:c5:cb:01:16:b8:3d:6c:7c:b7:38:b4:
                    87:ee:2e:76:25:b9:ea:97:46:5d:2b:fe:94:98:33:
                    9b:73:b5:d2:13:4f:9e:ac:1c:4f:13:ed:02:54:15:
                    b8:bb:d4:79:34:ad:70:8a:80:90:dc:d8:4b:41:bf:
                    be:75:6e:19:21:66:d0:c5:2e:ad:c2:ac:72:4f:af:
                    88:91:80:ff:2a:44:d0:e5:94:24:69:79:f8:56:a3:
                    22:7c:4d:4e:85:a8:8b:8c:cf:a6:2c:57:ff:4b:dc:
                    b9:06:9b:cf:fe:be:0e:d5:21:37:26:6b:7c:9f:9d:
                    94:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:77:1C:5C:93:CD:BD:D3:39:74:59:0F:EE:5B:A3:95:DD:6F:8B:D5
            X509v3 Authority Key Identifier:
                keyid:4F:91:86:47:80:E3:C6:40:32:7E:24:B5:27:D2:24:8C:0C:5C:AD:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/4F91864780E3C640327E24B527D2248C0C5CAD25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F91864780E3C640327E24B527D2248C0C5CAD25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/3133382e3132322e3136382e302f32322d3332203d3e20323632393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:02:a3:1d:e9:a6:8f:74:21:d2:9c:b6:56:5f:e7:a4:f2:08:
         c1:f8:c5:a8:81:74:77:9e:96:a1:e5:ec:a6:03:4d:e3:b1:39:
         26:2b:40:c9:30:5d:bb:64:9e:ff:05:ed:da:f4:aa:d3:73:11:
         02:9b:03:c3:8f:94:ef:ad:7c:ae:b9:96:1c:6f:d6:5b:d1:27:
         63:e8:6e:7c:bc:a6:f8:b2:60:c3:79:83:70:e9:7f:be:34:ea:
         7c:96:6e:80:f6:d5:c2:ce:95:c9:34:7f:1a:5e:e0:7a:a1:74:
         5d:04:0d:34:f7:cf:b8:b1:1a:6c:59:aa:3b:84:08:33:da:5b:
         47:9c:11:ea:bf:22:47:75:75:03:2a:5e:62:b5:11:9e:f1:24:
         a5:86:4a:20:84:6c:96:53:63:a6:9b:b3:46:99:a0:2b:4b:a2:
         c0:f8:18:74:35:59:67:6d:33:c4:8f:c8:fc:6b:82:be:07:25:
         ce:4e:b6:41:43:8f:ea:c4:ea:da:ce:86:ca:46:50:fc:8f:cc:
         60:86:6c:6f:2e:5a:1a:dd:f6:73:0b:a7:67:74:d1:67:99:19:
         50:b2:88:46:39:b1:fc:e7:c9:e4:2d:83:76:15:b0:e1:61:29:
         4b:ae:f1:33:2d:e0:b6:ab:3a:6e:4f:8d:30:0e:1e:fc:ce:87:
         6e:2e:0e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:19:53 2026 by rpki-client