Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/1/3133382e302e3230342e302f32322d3234203d3e20323033.roa
File:                     3133382e302e3230342e302f32322d3234203d3e20323033.roa (raw, json)
Hash identifier:          jr3kYCVLYQ9bNdFxIC2q74rYSCcgQTRYrBGAyQUrl9g=
Subject key identifier:   29:F8:5C:F1:7D:DC:1E:BC:88:5C:C8:91:68:7A:7B:6F:01:48:F0:CC
Certificate issuer:       /CN=5284148D5418D7FC055874603C6DEB41483FA241
Certificate serial:       05BCCE5124AD72871E473E86D9A8B348F3E3ABDD
Authority key identifier: 52:84:14:8D:54:18:D7:FC:05:58:74:60:3C:6D:EB:41:48:3F:A2:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5284148D5418D7FC055874603C6DEB41483FA241.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/1/3133382e302e3230342e302f32322d3234203d3e20323033.roa
Signing time:             Fri 11 Sep 2026 13:53:56 +0000
ROA not before:           Fri 11 Sep 2026 13:48:56 +0000
ROA not after:            Fri 10 Sep 2027 13:53:56 +0000
asID:                     203
IP address blocks:        138.0.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/1/5284148D5418D7FC055874603C6DEB41483FA241.crl
                          rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/1/5284148D5418D7FC055874603C6DEB41483FA241.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5284148D5418D7FC055874603C6DEB41483FA241.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 14:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:bc:ce:51:24:ad:72:87:1e:47:3e:86:d9:a8:b3:48:f3:e3:ab:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5284148D5418D7FC055874603C6DEB41483FA241
        Validity
            Not Before: Sep 11 13:48:56 2026 GMT
            Not After : Sep 10 13:53:56 2027 GMT
        Subject: CN=29F85CF17DDC1EBC885CC891687A7B6F0148F0CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6d:d9:79:cd:80:e8:8e:3f:63:db:b7:b4:f1:
                    ab:9b:72:e8:1b:5b:d5:64:1f:5e:63:f8:78:9d:d3:
                    3a:28:a2:62:d9:2b:e5:8b:55:a5:64:a0:93:a5:29:
                    e2:ce:e1:f6:47:56:d5:52:4e:7f:40:e8:2d:2d:e1:
                    93:4c:bf:49:5d:6f:5b:67:39:65:08:2e:46:b9:c5:
                    da:37:1a:03:8e:44:e3:5d:a9:f9:3b:70:09:99:f6:
                    3c:9a:5e:46:d7:ae:60:69:ce:f9:20:f1:9f:cd:ae:
                    6f:3b:ab:f0:0e:8e:8c:c6:7c:c3:72:2a:6b:1b:e3:
                    b1:45:95:11:7c:36:cc:d6:4e:0f:ef:fb:92:2e:de:
                    9d:61:66:2f:26:ef:c2:a0:f7:5d:b8:f5:60:78:74:
                    fd:dc:66:0d:88:94:01:91:b4:2a:8a:2c:a7:6a:59:
                    19:71:e1:94:5e:98:84:3e:97:86:1e:e7:8e:35:8b:
                    41:0e:ea:21:ba:11:87:8b:8e:18:2a:28:c3:e6:0f:
                    89:ce:7c:df:c0:ce:ae:7c:e8:9c:ad:f1:55:a8:21:
                    a7:d2:25:38:e4:6a:0c:3b:04:1e:80:36:91:74:17:
                    b2:53:eb:9d:5c:f0:10:46:32:0d:e5:a9:d6:76:bd:
                    89:51:cb:57:bd:1f:42:c9:3d:34:1f:0a:dc:34:c2:
                    dc:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:F8:5C:F1:7D:DC:1E:BC:88:5C:C8:91:68:7A:7B:6F:01:48:F0:CC
            X509v3 Authority Key Identifier:
                keyid:52:84:14:8D:54:18:D7:FC:05:58:74:60:3C:6D:EB:41:48:3F:A2:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/1/5284148D5418D7FC055874603C6DEB41483FA241.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5284148D5418D7FC055874603C6DEB41483FA241.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/1/3133382e302e3230342e302f32322d3234203d3e20323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:bf:12:21:fc:d1:a8:31:56:35:01:93:9a:de:4c:4f:7b:c6:
         b7:76:5e:6a:1f:6b:d4:7e:df:2f:74:32:bc:0c:28:35:c2:35:
         0b:72:a2:08:77:44:bb:32:73:7c:17:81:01:1d:26:30:f5:fc:
         67:89:ff:99:ee:e3:34:f2:ba:b1:b9:9d:47:10:7c:e6:01:1a:
         e5:38:f3:68:75:86:a8:f4:1a:92:f5:b6:35:da:e2:55:64:72:
         3d:a2:3c:17:67:89:74:f0:25:95:09:a3:f2:67:ea:ea:fa:1a:
         bd:41:66:d2:0b:dd:19:42:00:42:b4:8e:8b:71:69:dd:19:0b:
         87:34:81:88:c8:cc:49:03:4c:03:f1:45:bb:69:b6:04:b5:c9:
         b1:81:b4:7f:77:d2:55:5b:68:f0:7c:0a:c1:26:9e:61:5b:fa:
         4f:c5:74:f0:b3:15:59:4f:fc:94:08:93:88:37:fa:66:e9:76:
         0c:08:05:22:78:09:b1:d4:32:b5:59:eb:cb:68:20:40:16:15:
         50:a9:55:d3:9f:c0:96:0f:23:12:b4:5d:bc:6d:57:e4:7c:c2:
         40:a6:74:75:f6:67:10:77:ab:e9:a4:5a:88:ad:0f:e1:d9:dc:
         fe:62:91:e0:6f:48:b0:f5:90:27:fd:17:ba:11:a8:13:fd:63:
         ad:28:cd:80
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIUBbzOUSStcoceRz6G2aizSPPjq90wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTI4NDE0OEQ1NDE4RDdGQzA1NTg3NDYwM0M2REVCNDE0
ODNGQTI0MTAeFw0yNjA5MTExMzQ4NTZaFw0yNzA5MTAxMzUzNTZaMDMxMTAvBgNV
BAMTKDI5Rjg1Q0YxN0REQzFFQkM4ODVDQzg5MTY4N0E3QjZGMDE0OEYwQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFbdl5zYDojj9j27e08aubcugb
W9VkH15j+Hid0zooomLZK+WLVaVkoJOlKeLO4fZHVtVSTn9A6C0t4ZNMv0ldb1tn
OWUILka5xdo3GgOORONdqfk7cAmZ9jyaXkbXrmBpzvkg8Z/Nrm87q/AOjozGfMNy
Kmsb47FFlRF8NszWTg/v+5Iu3p1hZi8m78Kg91249WB4dP3cZg2IlAGRtCqKLKdq
WRlx4ZRemIQ+l4Ye5441i0EO6iG6EYeLjhgqKMPmD4nOfN/Azq586Jyt8VWoIafS
JTjkagw7BB6ANpF0F7JT651c8BBGMg3lqdZ2vYlRy1e9H0LJPTQfCtw0wtyxAgMB
AAGjggJJMIICRTAdBgNVHQ4EFgQUKfhc8X3cHryIXMiRaHp7bwFI8MwwHwYDVR0j
BBgwFoAUUoQUjVQY1/wFWHRgPG3rQUg/okEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHhuWGlSQjN6c0NMQkdjc1pnYVJzS0xiN3Mzc3dIeDN2b1Z4NHlUa0px
cnMvMS81Mjg0MTQ4RDU0MThEN0ZDMDU1ODc0NjAzQzZERUI0MTQ4M0ZBMjQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUyODQxNDhENTQxOEQ3RkMw
NTU4NzQ2MDNDNkRFQjQxNDgzRkEyNDEuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCB
kwYIKwYBBQUHMAuGgYZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R4blhpUkIzenNDTEJHY3NaZ2FSc0tMYjdzM3N3SHgzdm9WeDR5VGtKcXJzLzEv
MzEzMzM4MmUzMDJlMzIzMDM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzMDMz
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQCigDMMA0GCSqGSIb3DQEBCwUAA4IBAQCNvxIh/NGoMVY1AZOa
3kxPe8a3dl5qH2vUft8vdDK8DCg1wjULcqIId0S7MnN8F4EBHSYw9fxnif+Z7uM0
8rqxuZ1HEHzmARrlOPNodYao9BqS9bY12uJVZHI9ojwXZ4l08CWVCaPyZ+rq+hq9
QWbSC90ZQgBCtI6LcWndGQuHNIGIyMxJA0wD8UW7abYEtcmxgbR/d9JVW2jwfArB
Jp5hW/pPxXTwsxVZT/yUCJOIN/pm6XYMCAUieAmx1DK1WevLaCBAFhVQqVXTn8CW
DyMStF28bVfkfMJApnR19mcQd6vppFqIrQ/h2dz+YpHgb0iw9ZAn/Re6EagT/WOt
KM2A
-----END CERTIFICATE-----
Generated at Sun Oct 11 19:19:31 2026 by rpki-client