Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36332e302f32342d3234203d3e20323634313330.roa
File:                     3133382e39372e36332e302f32342d3234203d3e20323634313330.roa (raw, json)
Hash identifier:          VVhYqYc+AVAnN5fyBELs+uHieDUmnwwynRxY0+LTf/Q=
Subject key identifier:   97:34:1D:86:5D:0F:05:E9:2B:71:FF:39:AA:90:54:E8:22:8E:2F:CE
Certificate issuer:       /CN=E47C0193099D783BC9228A8B85CB28868735A4E2
Certificate serial:       07B281C1310163AA37573A459A32B0FDBC346CE8
Authority key identifier: E4:7C:01:93:09:9D:78:3B:C9:22:8A:8B:85:CB:28:86:87:35:A4:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E47C0193099D783BC9228A8B85CB28868735A4E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36332e302f32342d3234203d3e20323634313330.roa
Signing time:             Tue 21 Apr 2026 13:55:06 +0000
ROA not before:           Tue 21 Apr 2026 13:50:06 +0000
ROA not after:            Tue 20 Apr 2027 13:55:06 +0000
asID:                     264130
IP address blocks:        138.97.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/E47C0193099D783BC9228A8B85CB28868735A4E2.crl
                          rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/E47C0193099D783BC9228A8B85CB28868735A4E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E47C0193099D783BC9228A8B85CB28868735A4E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 15:51:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:b2:81:c1:31:01:63:aa:37:57:3a:45:9a:32:b0:fd:bc:34:6c:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E47C0193099D783BC9228A8B85CB28868735A4E2
        Validity
            Not Before: Apr 21 13:50:06 2026 GMT
            Not After : Apr 20 13:55:06 2027 GMT
        Subject: CN=97341D865D0F05E92B71FF39AA9054E8228E2FCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e2:da:ba:3f:33:ca:cf:42:c8:2e:ee:46:63:
                    ab:ac:56:af:22:3e:a1:65:ff:45:85:c4:b1:f7:57:
                    ae:1a:c5:ca:f7:e4:b8:ef:25:27:f2:be:9e:d4:ee:
                    fc:92:be:a2:99:8a:97:2d:a5:58:7d:98:ea:50:b9:
                    7a:1a:80:af:f3:04:cb:f8:dd:da:39:28:0d:0a:29:
                    96:c5:db:5f:b8:a3:d2:2e:3c:45:ce:26:c6:e0:c9:
                    16:4d:88:8f:cd:45:80:6b:67:b0:1e:89:3b:03:61:
                    b3:98:2d:85:a0:de:08:1b:85:83:b5:a4:0a:da:94:
                    08:33:bc:e3:31:1e:87:5b:23:d1:a1:c6:90:7b:3b:
                    7f:ed:a0:f8:a2:67:d3:c8:7f:c1:37:da:1f:80:e4:
                    5c:2c:17:c1:df:36:1a:f0:61:70:e4:8a:9e:14:ed:
                    73:cc:d9:bc:f9:ca:37:de:e9:b0:76:39:5b:25:aa:
                    5b:99:57:1b:df:b1:69:9e:44:23:cc:bd:74:27:64:
                    c9:db:7e:89:f9:2b:ba:09:98:be:14:ec:4a:65:a1:
                    2d:22:69:0e:61:6e:a4:78:cf:63:89:2b:1b:d9:f0:
                    b8:76:b4:00:6d:d6:a7:c5:d1:4a:ee:d3:3e:c0:0c:
                    3c:7c:92:84:f4:99:a5:9d:24:24:1c:08:1e:72:06:
                    aa:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:34:1D:86:5D:0F:05:E9:2B:71:FF:39:AA:90:54:E8:22:8E:2F:CE
            X509v3 Authority Key Identifier:
                keyid:E4:7C:01:93:09:9D:78:3B:C9:22:8A:8B:85:CB:28:86:87:35:A4:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/E47C0193099D783BC9228A8B85CB28868735A4E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E47C0193099D783BC9228A8B85CB28868735A4E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36332e302f32342d3234203d3e20323634313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:aa:8d:ef:21:d7:f1:88:7e:24:ac:58:bd:a9:2f:b6:a7:b2:
         53:70:d8:d3:97:54:c6:e0:01:a6:80:c5:df:ca:48:e8:a8:14:
         ca:49:4f:df:02:a5:b3:1f:fd:32:67:4b:f6:d7:1c:32:3d:e9:
         3c:a1:e0:68:18:7d:60:2d:4d:0f:c9:78:ea:e5:f1:74:be:18:
         c1:ba:71:b9:68:1b:1d:e6:c4:64:9f:d9:29:df:91:6b:e5:b8:
         15:8a:f0:2e:10:9d:7c:d4:81:d4:62:5a:36:c7:a8:ce:ed:76:
         f4:00:c4:ac:56:2b:75:77:7d:bc:6f:82:8b:b0:a6:02:e6:ae:
         9f:19:8c:7c:53:26:f2:54:d0:b3:f8:63:d6:a3:77:fe:e7:66:
         62:80:7f:f2:40:5a:30:64:b7:ae:3b:0e:03:0c:fa:45:8d:5e:
         79:54:ff:88:ff:1c:60:d7:88:02:1e:5f:50:bd:d0:19:b8:40:
         b2:ff:3a:0c:18:66:22:8b:54:5d:18:be:a3:90:a6:43:e0:57:
         e0:00:89:e1:ed:00:b5:2e:96:61:fc:c6:a5:f0:d5:86:89:2f:
         32:3e:9e:e6:45:7e:a3:19:1a:d0:4b:a6:0f:3b:aa:f4:40:c8:
         b7:bc:01:0f:d3:72:ab:d4:56:f4:71:44:93:11:54:fb:f1:74:
         8d:e2:27:e5
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUB7KBwTEBY6o3VzpFmjKw/bw0bOgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQ3QzAxOTMwOTlENzgzQkM5MjI4QThCODVDQjI4ODY4
NzM1QTRFMjAeFw0yNjA0MjExMzUwMDZaFw0yNzA0MjAxMzU1MDZaMDMxMTAvBgNV
BAMTKDk3MzQxRDg2NUQwRjA1RTkyQjcxRkYzOUFBOTA1NEU4MjI4RTJGQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH4tq6PzPKz0LILu5GY6usVq8i
PqFl/0WFxLH3V64axcr35LjvJSfyvp7U7vySvqKZipctpVh9mOpQuXoagK/zBMv4
3do5KA0KKZbF21+4o9IuPEXOJsbgyRZNiI/NRYBrZ7AeiTsDYbOYLYWg3ggbhYO1
pAralAgzvOMxHodbI9GhxpB7O3/toPiiZ9PIf8E32h+A5FwsF8HfNhrwYXDkip4U
7XPM2bz5yjfe6bB2OVslqluZVxvfsWmeRCPMvXQnZMnbfon5K7oJmL4U7EploS0i
aQ5hbqR4z2OJKxvZ8Lh2tABt1qfF0Uru0z7ADDx8koT0maWdJCQcCB5yBqo/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUlzQdhl0PBekrcf85qpBU6CKOL84wHwYDVR0j
BBgwFoAU5HwBkwmdeDvJIoqLhcsohoc1pOIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUxyb1dvS3BMQ2tkanc3TjhENVVCc0J5OU45RzU1akpuZWZBVXdodVNq
N04vMC9FNDdDMDE5MzA5OUQ3ODNCQzkyMjhBOEI4NUNCMjg4Njg3MzVBNEUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U0N0MwMTkzMDk5RDc4M0JD
OTIyOEE4Qjg1Q0IyODg2ODczNUE0RTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VMcm9Xb0twTENrZGp3N044RDVVQnNCeTlOOUc1NWpKbmVmQVV3aHVTajdOLzAv
MzEzMzM4MmUzOTM3MmUzNjMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM0
MzEzMzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAimE/MA0GCSqGSIb3DQEBCwUAA4IBAQB0qo3vIdfx
iH4krFi9qS+2p7JTcNjTl1TG4AGmgMXfykjoqBTKSU/fAqWzH/0yZ0v21xwyPek8
oeBoGH1gLU0PyXjq5fF0vhjBunG5aBsd5sRkn9kp35Fr5bgVivAuEJ181IHUYlo2
x6jO7Xb0AMSsVit1d328b4KLsKYC5q6fGYx8UybyVNCz+GPWo3f+52ZigH/yQFow
ZLeuOw4DDPpFjV55VP+I/xxg14gCHl9QvdAZuECy/zoMGGYii1RdGL6jkKZD4Ffg
AInh7QC1LpZh/Mal8NWGiS8yPp7mRX6jGRrQS6YPO6r0QMi3vAEP03Kr1Fb0cUST
EVT78XSN4ifl
-----END CERTIFICATE-----
Generated at Wed May 13 21:37:18 2026 by rpki-client