Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/3133382e39372e302e302f32322d3234203d3e20323632333436.roa
File:                     3133382e39372e302e302f32322d3234203d3e20323632333436.roa (raw, json)
Hash identifier:          IqwBmJdBzoK+6zPfk/dKgyW1/YhGMc8vMsnW99howuU=
Subject key identifier:   84:53:CE:35:29:31:09:A0:2A:31:22:02:23:F3:BE:DD:62:7E:18:FF
Certificate issuer:       /CN=E5C66115E0418CD2E72803A317A3ECB4948657A4
Certificate serial:       1F9EE2EF2CCC21F7F5015010E75156F28782C505
Authority key identifier: E5:C6:61:15:E0:41:8C:D2:E7:28:03:A3:17:A3:EC:B4:94:86:57:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5C66115E0418CD2E72803A317A3ECB4948657A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/3133382e39372e302e302f32322d3234203d3e20323632333436.roa
Signing time:             Fri 08 May 2026 11:54:52 +0000
ROA not before:           Fri 08 May 2026 11:49:52 +0000
ROA not after:            Fri 07 May 2027 11:54:52 +0000
asID:                     262346
IP address blocks:        138.97.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/E5C66115E0418CD2E72803A317A3ECB4948657A4.crl
                          rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/E5C66115E0418CD2E72803A317A3ECB4948657A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5C66115E0418CD2E72803A317A3ECB4948657A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 15:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:9e:e2:ef:2c:cc:21:f7:f5:01:50:10:e7:51:56:f2:87:82:c5:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5C66115E0418CD2E72803A317A3ECB4948657A4
        Validity
            Not Before: May  8 11:49:52 2026 GMT
            Not After : May  7 11:54:52 2027 GMT
        Subject: CN=8453CE35293109A02A31220223F3BEDD627E18FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:93:ac:ba:61:2d:d0:1b:ba:79:36:09:01:c8:
                    7e:d3:ef:32:cc:f4:71:3b:c0:4f:e6:ad:42:42:2f:
                    d4:f5:d7:87:ab:bb:0d:f9:be:3b:9f:f8:c2:c3:bb:
                    12:cc:40:38:b1:87:b3:40:30:a4:39:dc:71:71:bc:
                    48:b2:47:c6:95:6e:b9:2f:d0:98:32:91:d1:a4:28:
                    33:83:f4:65:71:d7:d5:a0:86:46:14:2e:a5:3d:51:
                    61:94:27:3e:f0:ef:e6:62:02:f3:d8:db:87:23:7e:
                    7e:39:48:48:2a:28:39:97:8b:a3:8e:34:ad:25:c6:
                    bf:6d:3b:a0:68:d9:39:e4:9d:ce:25:b9:9c:03:87:
                    b7:e7:1d:43:93:cc:0f:d7:3b:9c:44:7b:99:94:bb:
                    e3:fd:bd:25:30:db:53:d5:87:9b:c0:4e:30:9b:f6:
                    87:d2:a2:4b:44:8c:e0:b4:f7:d7:62:72:51:a1:cf:
                    6e:c2:4b:25:d9:7b:77:d2:8b:74:bb:4f:ef:c7:7d:
                    c7:a2:95:d3:2b:ed:23:44:8e:8f:72:65:22:f6:b6:
                    bb:f0:1a:8c:ae:8b:53:5b:2c:3e:f6:e1:38:43:9e:
                    ee:3a:5c:3d:bd:67:96:23:f5:f5:fb:73:66:d0:67:
                    37:3b:33:26:a1:1e:8c:f7:13:93:9b:a8:a1:38:49:
                    46:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:53:CE:35:29:31:09:A0:2A:31:22:02:23:F3:BE:DD:62:7E:18:FF
            X509v3 Authority Key Identifier:
                keyid:E5:C6:61:15:E0:41:8C:D2:E7:28:03:A3:17:A3:EC:B4:94:86:57:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/E5C66115E0418CD2E72803A317A3ECB4948657A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5C66115E0418CD2E72803A317A3ECB4948657A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/3133382e39372e302e302f32322d3234203d3e20323632333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:07:48:9a:44:52:03:e9:6f:75:74:22:87:8c:20:b2:d6:5b:
         c3:fd:a4:d8:cc:08:f2:ab:ad:eb:64:10:9d:5a:1d:17:83:7e:
         fc:40:cf:56:80:eb:ba:ee:a2:ea:b3:93:53:3a:48:b1:7c:c3:
         86:2f:95:cd:7e:b4:02:b4:21:24:4e:41:cd:88:72:3b:e4:9c:
         07:14:5f:60:8b:1d:03:2a:1b:69:e7:07:e1:a7:e7:66:b1:ba:
         b7:0b:a3:66:73:2e:7a:a4:e3:8e:10:4b:0d:bd:5d:cf:75:7f:
         3c:5e:c4:50:80:66:c4:3f:20:f8:fa:6b:6b:59:6f:28:42:cd:
         d3:5c:05:13:68:e4:61:83:4f:7f:dd:39:97:3b:35:f1:6a:bc:
         9f:39:6e:ce:63:73:a7:95:5f:a9:54:99:11:2f:86:3f:7f:f9:
         13:ef:b2:38:3d:8e:f6:1a:d8:0a:f1:ca:08:50:1d:0f:99:6a:
         9f:85:11:9a:4b:9a:04:50:ad:f8:64:91:23:92:a7:fd:bb:8a:
         00:75:59:4c:17:0d:c8:ed:db:1b:cf:2a:80:79:d4:2e:86:fa:
         b5:a5:ef:b5:a7:7d:82:3c:04:0f:21:4c:d1:8b:2a:04:f1:10:
         07:6a:fd:d2:1e:6a:d3:d5:36:3a:8f:41:a4:e3:81:51:38:d4:
         32:c1:15:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:57:16 2026 by rpki-client