Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6dAnpnsyHHQraAyCK9UgE4t7LZo8yKQxxvpiM2sJMrD/0/3133382e3231392e3130382e302f32322d3232203d3e20323633393434.roa
File:                     3133382e3231392e3130382e302f32322d3232203d3e20323633393434.roa (raw, json)
Hash identifier:          hTpyylos0mgbHGV5NxJaiEJ19gE+7hICj4wTJT5rrH0=
Subject key identifier:   AA:35:63:35:0D:5A:1C:87:95:52:4B:54:52:A6:52:68:18:DB:38:49
Certificate issuer:       /CN=E1B16B75878BCD931992CD9E3A9D7EF5D5E6B287
Certificate serial:       49A0DE882E1A5A34157045572521D5346B86804A
Authority key identifier: E1:B1:6B:75:87:8B:CD:93:19:92:CD:9E:3A:9D:7E:F5:D5:E6:B2:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1B16B75878BCD931992CD9E3A9D7EF5D5E6B287.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6dAnpnsyHHQraAyCK9UgE4t7LZo8yKQxxvpiM2sJMrD/0/3133382e3231392e3130382e302f32322d3232203d3e20323633393434.roa
Signing time:             Fri 24 Jul 2026 18:16:12 +0000
ROA not before:           Fri 24 Jul 2026 18:11:12 +0000
ROA not after:            Fri 23 Jul 2027 18:16:12 +0000
asID:                     263944
IP address blocks:        138.219.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E6dAnpnsyHHQraAyCK9UgE4t7LZo8yKQxxvpiM2sJMrD/0/E1B16B75878BCD931992CD9E3A9D7EF5D5E6B287.crl
                          rsync://rpki-repo.registro.br/repo/E6dAnpnsyHHQraAyCK9UgE4t7LZo8yKQxxvpiM2sJMrD/0/E1B16B75878BCD931992CD9E3A9D7EF5D5E6B287.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1B16B75878BCD931992CD9E3A9D7EF5D5E6B287.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 18:36:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:a0:de:88:2e:1a:5a:34:15:70:45:57:25:21:d5:34:6b:86:80:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1B16B75878BCD931992CD9E3A9D7EF5D5E6B287
        Validity
            Not Before: Jul 24 18:11:12 2026 GMT
            Not After : Jul 23 18:16:12 2027 GMT
        Subject: CN=AA3563350D5A1C8795524B5452A6526818DB3849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6f:73:47:1e:e0:8c:f9:fe:1b:db:26:4a:c5:
                    98:0d:e0:16:ff:89:a8:bd:a2:79:ab:18:21:81:f1:
                    19:0e:81:65:cb:8c:16:7a:f1:75:89:bb:fe:a2:84:
                    c4:c7:9f:19:c9:aa:6f:65:ce:86:dc:86:2c:9c:56:
                    b5:96:90:4b:63:c0:17:00:7b:37:d9:88:97:09:36:
                    24:64:6e:f3:73:6d:c0:ef:50:92:6c:4b:0b:f5:fc:
                    9a:c7:f8:af:bb:0a:47:e2:62:b6:60:e1:93:f3:42:
                    84:2f:64:47:3d:6d:78:44:34:03:a1:a6:40:05:08:
                    58:4a:7e:94:2c:f8:1c:a2:b0:96:58:d3:4a:3c:64:
                    44:7b:a3:6a:f5:e6:f2:88:d2:da:df:6c:cd:de:ef:
                    2c:08:41:96:25:f5:da:e2:03:d9:50:02:8e:c0:82:
                    41:ac:68:3f:74:a2:dc:8e:28:1c:8f:73:05:89:84:
                    ac:6f:9f:29:c2:ba:77:bb:b6:c1:95:a7:e5:ff:f6:
                    1d:ba:6f:11:bc:19:d2:c5:cd:27:6e:ec:19:af:4d:
                    4c:c7:ea:66:ef:cd:78:17:7f:cd:f5:45:9c:ae:29:
                    ec:06:d5:85:1f:40:c5:90:24:ea:69:1e:00:61:cb:
                    50:f7:ac:11:6e:9c:b0:ab:df:38:21:bd:b7:b4:d7:
                    37:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:35:63:35:0D:5A:1C:87:95:52:4B:54:52:A6:52:68:18:DB:38:49
            X509v3 Authority Key Identifier:
                keyid:E1:B1:6B:75:87:8B:CD:93:19:92:CD:9E:3A:9D:7E:F5:D5:E6:B2:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6dAnpnsyHHQraAyCK9UgE4t7LZo8yKQxxvpiM2sJMrD/0/E1B16B75878BCD931992CD9E3A9D7EF5D5E6B287.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1B16B75878BCD931992CD9E3A9D7EF5D5E6B287.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6dAnpnsyHHQraAyCK9UgE4t7LZo8yKQxxvpiM2sJMrD/0/3133382e3231392e3130382e302f32322d3232203d3e20323633393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:fa:7e:aa:f1:75:0e:69:b8:32:ca:7f:0b:84:67:5b:06:75:
         29:15:cb:95:21:47:e6:e9:77:61:13:0a:40:84:62:48:2a:ee:
         c3:fe:f2:17:f2:1f:b2:4d:3f:45:3c:51:ca:e5:38:28:67:8c:
         7d:44:bb:68:72:e5:b3:97:ed:28:6c:0f:5a:b3:eb:bf:06:bc:
         c9:6a:d6:5d:3b:b5:0e:8d:5e:03:92:93:d0:92:99:a5:77:b5:
         8e:f1:f5:e0:78:ab:2e:c6:5c:74:4a:8b:99:49:74:02:00:d6:
         5c:53:7a:f8:01:34:ce:76:ae:46:44:da:5d:c1:4e:13:b1:c4:
         fd:ea:82:e4:de:b4:fb:ed:8d:e7:2e:b9:8d:92:be:5a:fa:3a:
         82:3a:52:8c:c4:e5:5e:c1:de:69:e2:c7:71:36:ac:2e:7a:d2:
         cb:9a:f2:e2:07:45:b3:b8:da:0d:82:04:3f:0c:75:8c:f9:4f:
         62:db:7b:e9:20:33:0f:ab:87:e8:26:f8:3a:8a:0f:80:16:75:
         10:22:fc:9b:b4:d1:4d:56:98:91:4d:03:2c:30:8d:8d:59:c6:
         37:39:13:3d:ed:4c:2f:7f:ef:48:ad:c9:14:09:18:23:70:09:
         67:aa:ab:eb:11:3c:e2:88:de:cc:fc:27:4a:b3:dd:48:5e:1b:
         15:31:98:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:47:24 2026 by rpki-client