Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6dAnpnsyHHQraAyCK9UgE4t7LZo8yKQxxvpiM2sJMrD/0/3133382e3231392e3130382e302f32332d3233203d3e20323633393434.roa
File:                     3133382e3231392e3130382e302f32332d3233203d3e20323633393434.roa (raw, json)
Hash identifier:          UG/2iFFy+TBjTVp79iHBBSuqV4IriS5YFevze+g+vL0=
Subject key identifier:   56:41:0D:83:0B:DB:04:74:C0:10:B8:88:6D:9D:76:23:86:CA:7A:EB
Certificate issuer:       /CN=E1B16B75878BCD931992CD9E3A9D7EF5D5E6B287
Certificate serial:       2CDB255195D08447AE26313D9650913C3EDE3B5C
Authority key identifier: E1:B1:6B:75:87:8B:CD:93:19:92:CD:9E:3A:9D:7E:F5:D5:E6:B2:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1B16B75878BCD931992CD9E3A9D7EF5D5E6B287.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6dAnpnsyHHQraAyCK9UgE4t7LZo8yKQxxvpiM2sJMrD/0/3133382e3231392e3130382e302f32332d3233203d3e20323633393434.roa
Signing time:             Fri 24 Jul 2026 18:16:12 +0000
ROA not before:           Fri 24 Jul 2026 18:11:12 +0000
ROA not after:            Fri 23 Jul 2027 18:16:12 +0000
asID:                     263944
IP address blocks:        138.219.108.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E6dAnpnsyHHQraAyCK9UgE4t7LZo8yKQxxvpiM2sJMrD/0/E1B16B75878BCD931992CD9E3A9D7EF5D5E6B287.crl
                          rsync://rpki-repo.registro.br/repo/E6dAnpnsyHHQraAyCK9UgE4t7LZo8yKQxxvpiM2sJMrD/0/E1B16B75878BCD931992CD9E3A9D7EF5D5E6B287.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1B16B75878BCD931992CD9E3A9D7EF5D5E6B287.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 18:36:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:db:25:51:95:d0:84:47:ae:26:31:3d:96:50:91:3c:3e:de:3b:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1B16B75878BCD931992CD9E3A9D7EF5D5E6B287
        Validity
            Not Before: Jul 24 18:11:12 2026 GMT
            Not After : Jul 23 18:16:12 2027 GMT
        Subject: CN=56410D830BDB0474C010B8886D9D762386CA7AEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e6:75:28:5e:4d:02:2d:f1:0e:81:fe:6d:64:
                    e1:23:71:8c:f2:a0:84:e4:fe:df:12:d7:ab:24:a6:
                    4e:af:e6:6e:0a:29:d0:13:82:75:ed:8b:d2:67:16:
                    c5:5d:01:46:7f:6a:05:ae:46:8b:57:9b:e8:ce:b2:
                    c5:82:bb:aa:10:4e:ca:8a:93:7d:88:1c:f5:87:5a:
                    c9:34:6b:6b:50:f5:29:ce:60:11:6e:53:23:8b:bd:
                    0f:9b:bf:89:ce:4f:e5:0c:75:62:bb:10:a9:4a:47:
                    02:2a:76:2c:a6:71:e8:87:12:7e:95:21:1b:0e:07:
                    fd:40:ab:be:13:79:e3:74:43:b2:71:0d:d8:62:7f:
                    bd:f1:e5:83:41:b6:59:1d:14:0f:34:4d:3f:7a:a4:
                    fd:7e:9e:df:3e:1b:d7:68:57:a1:50:e9:33:dd:c1:
                    d9:0c:47:9f:b2:86:ea:1c:10:d0:a5:af:04:a4:2a:
                    65:28:d9:80:2e:9b:d9:f8:a6:1c:5b:ed:c3:d0:be:
                    01:a0:3f:79:bb:a4:46:a1:65:55:97:78:f9:2e:19:
                    38:3f:f8:2e:2c:d0:cd:6c:bf:9f:29:5d:28:e1:c2:
                    d3:80:78:38:27:4b:03:ff:b3:18:08:ea:c0:b7:8a:
                    22:31:c7:45:48:51:bf:d6:05:fd:3a:fd:10:e7:43:
                    ea:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:41:0D:83:0B:DB:04:74:C0:10:B8:88:6D:9D:76:23:86:CA:7A:EB
            X509v3 Authority Key Identifier:
                keyid:E1:B1:6B:75:87:8B:CD:93:19:92:CD:9E:3A:9D:7E:F5:D5:E6:B2:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6dAnpnsyHHQraAyCK9UgE4t7LZo8yKQxxvpiM2sJMrD/0/E1B16B75878BCD931992CD9E3A9D7EF5D5E6B287.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1B16B75878BCD931992CD9E3A9D7EF5D5E6B287.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6dAnpnsyHHQraAyCK9UgE4t7LZo8yKQxxvpiM2sJMrD/0/3133382e3231392e3130382e302f32332d3233203d3e20323633393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         de:4e:d4:9f:d1:5c:a9:70:35:02:d1:c7:f2:68:b6:4b:25:b4:
         0d:22:6f:c5:bc:aa:d9:ad:9c:28:4c:60:c2:8b:1f:d1:f6:21:
         e8:0b:07:11:35:f4:81:57:f8:2f:96:77:13:92:82:17:01:ef:
         3c:0a:21:c3:f0:e2:54:65:87:22:93:25:fc:e4:83:0e:51:d1:
         c9:a7:1e:ef:ee:9f:f8:b3:55:03:6e:13:46:ab:9d:18:c9:a3:
         2d:4f:5b:ea:24:e5:2d:b7:46:6e:dc:1c:24:bc:86:a4:a2:55:
         bf:45:2a:eb:db:b1:58:2b:6f:dd:55:e7:cb:11:b8:bc:23:e8:
         30:c3:ef:49:e1:b1:40:e1:f5:f9:ee:d5:de:bf:a3:21:0f:7a:
         53:99:dd:ab:17:84:c6:7e:18:a0:a6:12:66:09:01:02:c4:5f:
         b0:2c:4c:06:85:30:bc:ed:d2:b2:e5:8a:09:e2:b1:e6:9e:bc:
         6e:5c:a9:e1:69:31:11:ef:6f:24:00:92:69:fe:26:4c:ed:ef:
         57:30:2c:91:08:f0:e1:7b:cd:52:d9:37:f9:74:7a:f1:28:3e:
         92:1a:9f:f9:bf:e9:83:bf:c3:d8:09:64:e1:5b:73:3c:c2:53:
         37:44:b9:1a:f5:bb:cc:ae:a0:4f:bb:fa:82:e8:b7:5f:31:df:
         16:10:50:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:33:58 2026 by rpki-client