Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/3133382e3230342e36342e302f32322d3332203d3e203533313831.roa
File:                     3133382e3230342e36342e302f32322d3332203d3e203533313831.roa (raw, json)
Hash identifier:          +0lwzybCtoDpeA00IP/e/Nh0SdKI++xNXq5JaNtUODc=
Subject key identifier:   72:58:1D:2B:DE:5A:BC:C5:31:98:06:56:03:29:57:ED:A8:78:59:03
Certificate issuer:       /CN=70BE7503F48CCC14271EE75026EB08184789273F
Certificate serial:       1F8BF6830929F41E5810055B8B866AF864C278DA
Authority key identifier: 70:BE:75:03:F4:8C:CC:14:27:1E:E7:50:26:EB:08:18:47:89:27:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70BE7503F48CCC14271EE75026EB08184789273F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/3133382e3230342e36342e302f32322d3332203d3e203533313831.roa
Signing time:             Sat 07 Mar 2026 21:18:14 +0000
ROA not before:           Sat 07 Mar 2026 21:13:14 +0000
ROA not after:            Sat 06 Mar 2027 21:18:14 +0000
asID:                     53181
IP address blocks:        138.204.64.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.crl
                          rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70BE7503F48CCC14271EE75026EB08184789273F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 15:43:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:8b:f6:83:09:29:f4:1e:58:10:05:5b:8b:86:6a:f8:64:c2:78:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70BE7503F48CCC14271EE75026EB08184789273F
        Validity
            Not Before: Mar  7 21:13:14 2026 GMT
            Not After : Mar  6 21:18:14 2027 GMT
        Subject: CN=72581D2BDE5ABCC531980656032957EDA8785903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3a:40:25:5a:4a:d1:c5:fc:07:5b:e9:8d:60:
                    ca:60:58:cb:cf:cb:c6:7c:3f:9d:23:c9:cb:b5:7a:
                    9b:2a:f1:6d:ba:26:9c:23:2b:9c:08:cd:5a:5e:53:
                    2e:ee:14:8e:09:c0:03:c2:60:38:f7:c2:3b:70:15:
                    36:42:80:23:38:e8:1a:84:de:5a:e1:8d:83:0f:e3:
                    be:ca:53:30:12:36:58:0a:d3:a2:d8:42:2b:3d:c9:
                    3b:59:50:fe:32:38:7f:67:93:de:ce:25:ec:69:b0:
                    2b:18:7f:72:e2:86:d6:b0:86:c8:70:fa:55:16:06:
                    1b:e5:14:83:3d:b8:40:9e:a3:c0:7c:fa:f8:9c:ff:
                    ef:72:3e:06:c4:63:67:e6:66:fc:1e:4d:2b:f5:e9:
                    f5:4c:c4:34:c1:2e:33:71:c2:80:52:f4:a4:f3:f1:
                    3b:3e:d6:67:6c:91:72:05:a3:ce:cc:66:93:a2:73:
                    41:2d:83:82:2f:21:63:6d:27:71:cc:b6:69:22:55:
                    cc:c8:ab:f6:6b:8a:81:4c:55:e2:9d:7c:d6:9a:de:
                    0b:6f:3c:0c:0c:0f:69:7f:86:ed:c5:ba:9d:68:e8:
                    54:53:59:83:6a:a3:1b:c4:f5:5b:6f:b1:ff:51:b3:
                    98:ef:7d:bf:56:50:52:48:c9:ad:dd:51:a4:7b:21:
                    6d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:58:1D:2B:DE:5A:BC:C5:31:98:06:56:03:29:57:ED:A8:78:59:03
            X509v3 Authority Key Identifier:
                keyid:70:BE:75:03:F4:8C:CC:14:27:1E:E7:50:26:EB:08:18:47:89:27:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70BE7503F48CCC14271EE75026EB08184789273F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/3133382e3230342e36342e302f32322d3332203d3e203533313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:16:1d:2e:7a:d7:8d:18:2b:37:65:52:4f:f1:68:ec:99:1a:
         ff:e8:4e:c6:ad:6c:81:16:67:06:72:ce:0e:81:8b:03:01:54:
         91:0a:2e:2f:a1:32:5e:ea:9e:b2:54:ff:1c:0d:15:b1:09:35:
         b4:53:bc:c3:99:2f:f1:4a:97:27:2a:11:9e:f5:ba:5e:dd:d8:
         d4:83:ee:90:02:4a:ac:28:39:80:1d:fa:8e:cf:2d:7b:09:04:
         d7:7c:f0:7f:6e:f6:ee:44:54:68:a3:31:80:4e:2b:e1:5f:da:
         d5:58:b4:a0:9f:08:4a:b9:1b:be:0a:ff:ac:1c:b1:a3:29:4b:
         d6:37:0d:46:9e:9f:df:4d:23:09:29:55:e2:ee:85:7d:0f:8d:
         1f:79:40:00:5f:41:71:88:11:84:c8:aa:df:c0:a1:1b:48:cd:
         7e:c3:d5:97:45:cd:d0:93:72:30:81:e3:e4:5c:42:83:db:36:
         7b:d7:60:54:6c:30:fb:04:04:31:b6:b2:c0:69:5d:39:1c:b4:
         39:68:9d:7a:e9:24:75:a0:17:b9:4e:1e:88:53:10:63:20:9e:
         09:92:a9:81:ff:1e:85:0a:5d:28:85:95:42:63:38:25:f8:dc:
         d0:31:97:7a:57:77:51:4a:12:37:f7:30:5e:75:4c:6f:ba:18:
         49:68:51:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:13:20 2026 by rpki-client