Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/3133382e3235352e3233322e302f32322d3234203d3e20323633393832.roa
File:                     3133382e3235352e3233322e302f32322d3234203d3e20323633393832.roa (raw, json)
Hash identifier:          8TD84iRjTeI4OKZNCvbna7o/mh9C9hG4MHnsPMG6Ung=
Subject key identifier:   4E:E0:BC:A8:89:93:A5:0A:D4:95:BA:50:4D:36:3F:74:34:DB:72:E7
Certificate issuer:       /CN=7D571DA7BE6740284BB9A931D664B9482AA6C653
Certificate serial:       08BA991717D14D4DF22B8D0A33698CEC63F4843D
Authority key identifier: 7D:57:1D:A7:BE:67:40:28:4B:B9:A9:31:D6:64:B9:48:2A:A6:C6:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D571DA7BE6740284BB9A931D664B9482AA6C653.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/3133382e3235352e3233322e302f32322d3234203d3e20323633393832.roa
Signing time:             Thu 07 May 2026 16:28:01 +0000
ROA not before:           Thu 07 May 2026 16:23:01 +0000
ROA not after:            Thu 06 May 2027 16:28:01 +0000
asID:                     263982
IP address blocks:        138.255.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/7D571DA7BE6740284BB9A931D664B9482AA6C653.crl
                          rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/7D571DA7BE6740284BB9A931D664B9482AA6C653.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D571DA7BE6740284BB9A931D664B9482AA6C653.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 04:18:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ba:99:17:17:d1:4d:4d:f2:2b:8d:0a:33:69:8c:ec:63:f4:84:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D571DA7BE6740284BB9A931D664B9482AA6C653
        Validity
            Not Before: May  7 16:23:01 2026 GMT
            Not After : May  6 16:28:01 2027 GMT
        Subject: CN=4EE0BCA88993A50AD495BA504D363F7434DB72E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e5:61:f8:ce:9d:13:17:42:2c:a8:e8:48:19:
                    dd:6c:f2:6c:6b:d2:b2:b9:c0:d8:e6:d9:3b:88:99:
                    2c:1a:7f:df:22:a9:09:9f:6a:d4:76:78:9e:60:98:
                    fb:16:e7:32:12:b1:9c:5c:4d:6a:81:71:35:4e:08:
                    d4:2b:b4:9c:7a:6d:5e:2b:25:58:2b:07:3b:28:30:
                    dc:99:fd:f1:1a:10:30:67:e0:72:55:96:89:58:d1:
                    04:e8:cb:a7:e0:6c:7e:74:fa:1f:ec:9f:a7:87:15:
                    41:f9:32:d2:82:22:d1:06:06:e1:34:a2:7a:cb:08:
                    77:32:d2:b8:39:7f:4a:ca:08:18:52:10:3f:5d:f7:
                    4e:d6:dc:0e:ce:91:6c:18:e4:4c:fa:2e:5d:64:e3:
                    be:5d:db:91:04:48:88:0a:8d:cf:c8:6a:bb:e3:ea:
                    d3:68:b7:02:f6:a4:71:8c:39:58:8a:06:95:ef:87:
                    06:e2:50:93:68:51:c2:d1:3c:91:62:ed:db:af:57:
                    3a:07:13:db:f1:ec:34:ed:73:db:2e:8b:07:8d:6c:
                    34:59:3f:f5:a1:9e:c0:16:7d:cc:e7:6e:c7:f2:76:
                    3e:fd:65:59:83:27:81:a5:8b:85:d9:d1:45:0b:c2:
                    6d:e8:36:55:f4:73:6f:ca:05:45:25:b6:95:0c:76:
                    a5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E0:BC:A8:89:93:A5:0A:D4:95:BA:50:4D:36:3F:74:34:DB:72:E7
            X509v3 Authority Key Identifier:
                keyid:7D:57:1D:A7:BE:67:40:28:4B:B9:A9:31:D6:64:B9:48:2A:A6:C6:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/7D571DA7BE6740284BB9A931D664B9482AA6C653.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D571DA7BE6740284BB9A931D664B9482AA6C653.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/3133382e3235352e3233322e302f32322d3234203d3e20323633393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:82:18:e9:38:d7:4a:c1:d7:81:c6:1f:f1:dc:a5:f7:df:ce:
         ab:47:7a:d8:13:1b:4c:51:7e:f0:7e:8f:1c:46:af:8e:37:ac:
         f0:a4:ee:3f:ea:23:ec:9d:59:97:28:99:27:c5:a6:b1:88:43:
         a2:28:81:ae:81:30:53:4d:86:18:bc:7b:8d:66:05:25:bb:5d:
         e2:d9:ba:03:31:9b:1e:33:50:b9:1a:ca:4f:ce:c4:69:7b:ea:
         3b:63:1d:68:00:82:0b:b7:1d:66:48:55:8d:19:52:8b:f3:3c:
         62:aa:d3:f7:3b:fa:05:ca:16:3d:bc:39:ac:b4:e0:27:16:99:
         40:42:db:8d:b8:17:04:d2:3f:15:e1:2d:c2:f1:63:ec:f8:d2:
         44:a3:41:fc:69:2e:77:7f:a2:48:7f:d1:bd:5f:81:6c:42:28:
         8b:5f:42:9f:b8:e7:9e:69:f8:0a:23:70:09:c2:55:b1:a3:84:
         4c:05:80:9f:09:41:c8:bd:e6:27:19:44:42:fd:f3:4b:63:cc:
         de:0d:7b:de:17:ae:c6:7a:4b:93:14:b8:d4:0b:fd:73:5c:20:
         b1:8d:06:2b:86:37:58:e3:38:12:4b:d0:2e:92:15:7d:dd:0c:
         e6:03:47:ee:61:75:32:0c:6c:1f:75:8f:c7:76:c5:c7:7f:2e:
         b4:a2:40:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:19:34 2026 by rpki-client