Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/3133382e3235352e3138382e302f32322d3234203d3e20323633393838.roa
File:                     3133382e3235352e3138382e302f32322d3234203d3e20323633393838.roa (raw, json)
Hash identifier:          1R8ZUNb12AfAC+hKOkG/NaZ1OdGDA01T+JUUw5SpTqw=
Subject key identifier:   6B:59:39:F3:74:AA:81:CC:E2:F5:CA:AF:33:A2:9D:53:73:AE:9D:E0
Certificate issuer:       /CN=4491F61A3392F58DCF5B33411AD0EC4329C8AFB7
Certificate serial:       12F9E44126CBE331687D4B4C36C96DF5C587131E
Authority key identifier: 44:91:F6:1A:33:92:F5:8D:CF:5B:33:41:1A:D0:EC:43:29:C8:AF:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/3133382e3235352e3138382e302f32322d3234203d3e20323633393838.roa
Signing time:             Tue 28 Apr 2026 14:36:29 +0000
ROA not before:           Tue 28 Apr 2026 14:31:29 +0000
ROA not after:            Tue 27 Apr 2027 14:36:29 +0000
asID:                     263988
IP address blocks:        138.255.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.crl
                          rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 15:57:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:f9:e4:41:26:cb:e3:31:68:7d:4b:4c:36:c9:6d:f5:c5:87:13:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4491F61A3392F58DCF5B33411AD0EC4329C8AFB7
        Validity
            Not Before: Apr 28 14:31:29 2026 GMT
            Not After : Apr 27 14:36:29 2027 GMT
        Subject: CN=6B5939F374AA81CCE2F5CAAF33A29D5373AE9DE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:89:4e:dc:39:fe:e3:a2:c1:a5:60:f7:72:2c:
                    40:df:97:44:69:b0:02:16:d9:9b:f9:69:d3:a8:59:
                    76:c2:da:72:32:18:f9:ae:55:4c:c7:2a:fa:3a:d8:
                    51:7f:45:7e:fc:ef:cc:c6:8f:de:3b:5f:52:a6:f7:
                    a2:f1:5e:ab:22:9c:0a:bc:16:30:03:a8:a4:11:98:
                    62:07:9e:02:aa:27:62:d7:a8:47:0b:5e:1a:c9:01:
                    9f:05:29:7c:b4:d1:f7:cd:72:e7:71:98:0f:4f:d9:
                    cd:70:ba:1d:f7:3c:2f:f4:ea:e2:65:e4:5c:f5:8e:
                    ca:a5:03:c5:95:8a:7c:42:cf:be:2e:35:d7:fb:5b:
                    09:af:c1:2e:ac:c5:1f:6b:73:97:28:14:bf:c5:a7:
                    7a:8e:44:eb:df:cf:af:57:79:7e:71:c9:9c:2b:b4:
                    f7:da:4f:78:e5:eb:b6:26:b0:f7:1f:95:88:0d:3a:
                    29:3a:7e:3e:bb:d6:de:bb:6d:60:66:cc:f8:cc:d0:
                    79:79:35:38:24:7f:1e:57:b0:97:70:38:85:6a:e9:
                    a9:8d:ad:b3:a6:cc:fb:93:51:b2:dd:2e:f1:b7:1a:
                    8f:a1:1a:f8:9d:c9:4c:80:0b:a5:e7:21:84:db:c3:
                    96:f4:e2:cb:c8:b2:2a:a6:e2:9f:70:c5:2b:fc:36:
                    e6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:59:39:F3:74:AA:81:CC:E2:F5:CA:AF:33:A2:9D:53:73:AE:9D:E0
            X509v3 Authority Key Identifier:
                keyid:44:91:F6:1A:33:92:F5:8D:CF:5B:33:41:1A:D0:EC:43:29:C8:AF:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/3133382e3235352e3138382e302f32322d3234203d3e20323633393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:3e:22:45:19:ce:86:38:a4:69:3a:88:95:27:a2:f4:9f:ad:
         57:b4:39:32:4a:9b:3d:84:a3:eb:b1:90:a1:e6:10:d9:f8:d7:
         15:cd:52:9a:73:c2:c5:13:ae:af:71:fc:dd:5f:e9:22:80:5c:
         06:94:3a:eb:12:6a:ba:7e:60:f8:0e:e7:4a:d7:5a:63:f9:47:
         f2:9c:9f:fa:36:e6:a1:2b:48:2c:18:7d:a3:41:0b:cf:e9:77:
         67:8d:60:b2:dd:59:e3:f3:b2:60:ae:2c:0b:3f:b6:60:85:c8:
         62:ae:b9:d2:3f:b6:e9:8a:82:3b:87:bb:07:ce:1b:52:2c:a2:
         89:17:a5:fc:28:65:f0:f2:3a:19:31:90:a4:00:2a:c8:77:fb:
         ac:51:d3:21:40:f1:96:58:aa:6c:41:26:25:aa:4b:ae:1f:39:
         0e:b7:23:fa:92:15:1a:4f:22:22:61:ca:b7:72:87:21:6f:b9:
         47:ae:7e:cb:a7:87:bd:eb:97:5c:14:f4:fe:51:81:6d:c3:59:
         48:1a:b5:d0:d7:fc:44:dc:3f:d2:f7:3b:80:3e:7c:84:a4:1b:
         b5:9d:8d:7f:86:dd:f1:34:d7:fa:8e:d9:d7:fc:e5:e6:45:a1:
         a4:d6:00:6b:45:a9:3b:22:6b:5d:0e:4d:d7:29:f3:0e:3e:fd:
         c3:81:43:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:20:49 2026 by rpki-client