Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/3133382e302e3235322e302f32322d3332203d3e20323634353631.roa
File:                     3133382e302e3235322e302f32322d3332203d3e20323634353631.roa (raw, json)
Hash identifier:          qiiMqrHmSqZ493xiCdjjob2qrx/FN86n5nuoNC5dKew=
Subject key identifier:   24:24:24:A6:CA:63:B7:E5:A8:35:5F:D0:E9:E3:68:19:B2:9F:6E:0F
Certificate issuer:       /CN=A0EA3944E319A4322D44C0390DCDA5F7858CC82D
Certificate serial:       72CEF9EDA589626644B52D52DFA245BA866F4D8B
Authority key identifier: A0:EA:39:44:E3:19:A4:32:2D:44:C0:39:0D:CD:A5:F7:85:8C:C8:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0EA3944E319A4322D44C0390DCDA5F7858CC82D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/3133382e302e3235322e302f32322d3332203d3e20323634353631.roa
Signing time:             Wed 17 Jun 2026 12:24:04 +0000
ROA not before:           Wed 17 Jun 2026 12:19:04 +0000
ROA not after:            Wed 16 Jun 2027 12:24:04 +0000
asID:                     264561
IP address blocks:        138.0.252.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/A0EA3944E319A4322D44C0390DCDA5F7858CC82D.crl
                          rsync://rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/A0EA3944E319A4322D44C0390DCDA5F7858CC82D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0EA3944E319A4322D44C0390DCDA5F7858CC82D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 08:54:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ce:f9:ed:a5:89:62:66:44:b5:2d:52:df:a2:45:ba:86:6f:4d:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0EA3944E319A4322D44C0390DCDA5F7858CC82D
        Validity
            Not Before: Jun 17 12:19:04 2026 GMT
            Not After : Jun 16 12:24:04 2027 GMT
        Subject: CN=242424A6CA63B7E5A8355FD0E9E36819B29F6E0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ae:a4:e8:ee:56:5f:0c:c0:1a:20:e4:9c:44:
                    3e:c1:6b:91:73:e0:1c:49:3e:b0:cf:25:b9:72:13:
                    d4:39:2a:c2:08:38:d4:fd:0d:52:0a:55:88:96:3f:
                    20:65:80:2e:a5:be:d5:23:cb:35:b5:0c:a7:28:98:
                    9c:16:85:25:4c:59:59:32:93:ff:5a:6d:60:9f:55:
                    91:af:36:71:b0:4b:b4:01:76:48:f6:fc:e2:cf:bc:
                    cc:ac:bc:6f:48:63:ab:20:f0:ec:93:d4:f4:b0:b8:
                    3e:d4:c3:33:78:64:e9:9c:95:84:92:28:66:6b:4d:
                    42:0e:f4:2d:10:09:88:b9:61:8f:8a:26:9e:8d:41:
                    af:f1:73:5b:c0:98:44:56:00:84:cf:ed:4f:4d:3d:
                    be:24:f0:f4:d5:11:cd:41:64:61:c4:7b:db:d6:99:
                    01:05:17:33:e0:fd:74:93:b5:5a:17:68:8b:ca:74:
                    5f:28:d7:cc:8a:f1:be:b4:e4:cb:aa:85:d8:04:0a:
                    8c:49:9b:80:81:33:d4:2c:32:81:cd:ae:7e:94:a9:
                    39:c6:c0:b8:21:95:44:94:73:3b:38:55:65:3b:56:
                    fe:0b:4f:0d:1a:fb:cf:ef:f0:46:e9:67:ca:57:76:
                    b6:40:e2:3a:3a:ab:02:bc:fe:18:f5:bc:a1:86:96:
                    b4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:24:24:A6:CA:63:B7:E5:A8:35:5F:D0:E9:E3:68:19:B2:9F:6E:0F
            X509v3 Authority Key Identifier:
                keyid:A0:EA:39:44:E3:19:A4:32:2D:44:C0:39:0D:CD:A5:F7:85:8C:C8:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/A0EA3944E319A4322D44C0390DCDA5F7858CC82D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0EA3944E319A4322D44C0390DCDA5F7858CC82D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/3133382e302e3235322e302f32322d3332203d3e20323634353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ca:96:4e:75:5e:90:fb:9f:b9:73:1f:91:25:11:5a:3a:c6:6f:
         81:15:65:a8:12:9f:d1:7d:22:29:47:e1:56:d8:4a:ec:f2:15:
         a7:24:2c:48:ba:59:06:a7:64:db:08:62:1e:0c:81:73:6e:15:
         26:33:75:33:a4:fd:c1:53:3a:cf:2f:98:f4:0e:6b:a7:f9:fe:
         06:be:20:da:17:08:15:f3:c8:d8:da:36:7d:22:4e:dd:60:f6:
         cf:69:79:d8:d5:07:2c:bb:93:be:31:cb:fe:85:36:68:45:dc:
         ba:b2:65:6e:a7:ba:42:1d:59:32:19:c5:12:7c:ac:ec:c6:38:
         e5:7c:65:3a:a8:08:07:bc:92:28:5c:55:cb:fb:94:a7:b6:91:
         b4:6a:68:38:38:f1:94:18:ca:f8:0b:8c:ce:b1:14:ea:69:0c:
         17:e2:5a:a7:b3:b5:49:98:6c:be:f0:8e:fd:e1:10:0a:e7:19:
         fd:6e:e4:ef:4d:53:cb:d4:ac:ff:40:84:5d:14:3d:2e:7d:62:
         e0:38:2f:bc:e1:aa:0a:10:6f:cf:37:f8:94:a7:78:5c:37:e3:
         6e:fe:04:03:a2:39:f2:59:8b:ed:57:77:af:08:61:d1:e1:93:
         07:09:91:b2:5d:5b:5b:37:b0:64:c0:94:07:1d:ff:31:9f:8d:
         7c:e6:a0:d2
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUcs757aWJYmZEtS1S36JFuoZvTYswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTBFQTM5NDRFMzE5QTQzMjJENDRDMDM5MERDREE1Rjc4
NThDQzgyRDAeFw0yNjA2MTcxMjE5MDRaFw0yNzA2MTYxMjI0MDRaMDMxMTAvBgNV
BAMTKDI0MjQyNEE2Q0E2M0I3RTVBODM1NUZEMEU5RTM2ODE5QjI5RjZFMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYrqTo7lZfDMAaIOScRD7Ba5Fz
4BxJPrDPJblyE9Q5KsIIONT9DVIKVYiWPyBlgC6lvtUjyzW1DKcomJwWhSVMWVky
k/9abWCfVZGvNnGwS7QBdkj2/OLPvMysvG9IY6sg8OyT1PSwuD7UwzN4ZOmclYSS
KGZrTUIO9C0QCYi5YY+KJp6NQa/xc1vAmERWAITP7U9NPb4k8PTVEc1BZGHEe9vW
mQEFFzPg/XSTtVoXaIvKdF8o18yK8b605MuqhdgECoxJm4CBM9QsMoHNrn6UqTnG
wLghlUSUczs4VWU7Vv4LTw0a+8/v8EbpZ8pXdrZA4jo6qwK8/hj1vKGGlrRzAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUJCQkpspjt+WoNV/Q6eNoGbKfbg8wHwYDVR0j
BBgwFoAUoOo5ROMZpDItRMA5Dc2l94WMyC0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0RMSGdyTmpSRmVlRHE5b3lSRGZoZ3JHSFdUNHRkNUJoaVI3TWtncFJo
SkYvMC9BMEVBMzk0NEUzMTlBNDMyMkQ0NEMwMzkwRENEQTVGNzg1OENDODJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EwRUEzOTQ0RTMxOUE0MzIy
RDQ0QzAzOTBEQ0RBNUY3ODU4Q0M4MkQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dETEhnck5qUkZlZURxOW95UkRmaGdyR0hXVDR0ZDVCaGlSN01rZ3BSaEpGLzAv
MzEzMzM4MmUzMDJlMzIzNTMyMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzUzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCigD8MA0GCSqGSIb3DQEBCwUAA4IBAQDKlk51XpD7
n7lzH5ElEVo6xm+BFWWoEp/RfSIpR+FW2Ers8hWnJCxIulkGp2TbCGIeDIFzbhUm
M3UzpP3BUzrPL5j0Dmun+f4GviDaFwgV88jY2jZ9Ik7dYPbPaXnY1Qcsu5O+Mcv+
hTZoRdy6smVup7pCHVkyGcUSfKzsxjjlfGU6qAgHvJIoXFXL+5SntpG0amg4OPGU
GMr4C4zOsRTqaQwX4lqns7VJmGy+8I794RAK5xn9buTvTVPL1Kz/QIRdFD0ufWLg
OC+84aoKEG/PN/iUp3hcN+Nu/gQDojnyWYvtV3evCGHR4ZMHCZGyXVtbN7BkwJQH
Hf8xn4185qDS
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:34:58 2026 by rpki-client