Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GoTSvvcQBWeAJErD85HGPGed4ZYzEXz61Y1976hkqXL2/0/3133382e33362e33322e302f32322d3234203d3e203134383638.roa
File:                     3133382e33362e33322e302f32322d3234203d3e203134383638.roa (raw, json)
Hash identifier:          qYsTasKuSXAJx7WW4YN5+ia+/9Qxhurp8XFI5YlUC8s=
Subject key identifier:   C2:83:7A:36:5A:26:A6:50:40:6A:E6:1D:A9:C3:3A:2C:D8:45:84:1F
Certificate issuer:       /CN=1BB2349FFA9FD9E14A0EA6DD15A903829B22479C
Certificate serial:       7FCDC1DD5FB5F6A09AACBD30CBB48E2FE214298A
Authority key identifier: 1B:B2:34:9F:FA:9F:D9:E1:4A:0E:A6:DD:15:A9:03:82:9B:22:47:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BB2349FFA9FD9E14A0EA6DD15A903829B22479C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoTSvvcQBWeAJErD85HGPGed4ZYzEXz61Y1976hkqXL2/0/3133382e33362e33322e302f32322d3234203d3e203134383638.roa
Signing time:             Tue 14 Jul 2026 13:47:42 +0000
ROA not before:           Tue 14 Jul 2026 13:42:42 +0000
ROA not after:            Tue 13 Jul 2027 13:47:42 +0000
asID:                     14868
IP address blocks:        138.36.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GoTSvvcQBWeAJErD85HGPGed4ZYzEXz61Y1976hkqXL2/0/1BB2349FFA9FD9E14A0EA6DD15A903829B22479C.crl
                          rsync://rpki-repo.registro.br/repo/GoTSvvcQBWeAJErD85HGPGed4ZYzEXz61Y1976hkqXL2/0/1BB2349FFA9FD9E14A0EA6DD15A903829B22479C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BB2349FFA9FD9E14A0EA6DD15A903829B22479C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 07:57:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:cd:c1:dd:5f:b5:f6:a0:9a:ac:bd:30:cb:b4:8e:2f:e2:14:29:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BB2349FFA9FD9E14A0EA6DD15A903829B22479C
        Validity
            Not Before: Jul 14 13:42:42 2026 GMT
            Not After : Jul 13 13:47:42 2027 GMT
        Subject: CN=C2837A365A26A650406AE61DA9C33A2CD845841F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1e:b7:a4:f7:bc:59:80:0c:a9:67:e1:df:a2:
                    81:4c:d9:30:f8:df:20:92:36:71:37:a4:9f:8d:9e:
                    06:ba:6b:75:48:a4:a5:15:24:59:95:01:67:a3:3d:
                    8d:30:48:22:54:5a:8c:74:18:5e:50:91:23:f8:5e:
                    da:ea:aa:2d:e8:22:6e:f2:79:1f:45:8e:c7:a6:ba:
                    f2:27:b4:de:3e:26:96:d9:b3:05:d1:a4:65:c9:1e:
                    8c:6b:eb:9b:57:c8:b7:03:60:83:67:bb:4a:7d:24:
                    0c:51:8a:c8:67:c8:91:dd:2e:3b:7a:81:61:5d:bb:
                    03:ac:3a:24:02:e4:f9:d3:b3:6d:e9:7a:7e:21:4f:
                    ee:13:99:e3:26:85:09:43:e3:8d:ee:02:41:af:b3:
                    75:b2:a6:47:be:ae:ec:de:d1:1d:24:77:8a:0a:90:
                    61:86:1b:0c:b5:2c:95:46:3e:5a:2a:82:40:04:ea:
                    5c:3f:cb:d0:36:7f:cf:79:d9:00:13:bf:8b:a1:20:
                    ad:22:ea:90:0b:88:27:08:f4:d8:20:8c:0c:8a:16:
                    b2:ca:23:d6:54:f1:3a:a6:c4:48:c2:3b:d6:b7:fa:
                    e2:c9:e0:19:d9:32:87:3b:91:a4:a1:20:b0:6f:71:
                    5f:c0:d3:d5:11:99:e3:a1:d9:5e:f2:46:c0:18:4f:
                    2b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:83:7A:36:5A:26:A6:50:40:6A:E6:1D:A9:C3:3A:2C:D8:45:84:1F
            X509v3 Authority Key Identifier:
                keyid:1B:B2:34:9F:FA:9F:D9:E1:4A:0E:A6:DD:15:A9:03:82:9B:22:47:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoTSvvcQBWeAJErD85HGPGed4ZYzEXz61Y1976hkqXL2/0/1BB2349FFA9FD9E14A0EA6DD15A903829B22479C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BB2349FFA9FD9E14A0EA6DD15A903829B22479C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoTSvvcQBWeAJErD85HGPGed4ZYzEXz61Y1976hkqXL2/0/3133382e33362e33322e302f32322d3234203d3e203134383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:a9:24:7c:7a:e9:15:03:f1:6a:30:33:a8:34:19:1f:b5:ba:
         7b:51:62:cd:66:45:cb:53:80:e4:33:bf:7c:58:6a:79:8b:f3:
         ed:d4:99:d2:7d:f2:80:35:b7:93:c1:7b:80:52:79:11:dc:8e:
         7b:17:c9:a5:58:c3:b7:0b:2c:46:63:d3:af:6f:48:c6:1f:84:
         83:29:b7:07:3a:b3:83:f8:4e:27:41:7d:fc:ef:7b:45:7a:31:
         ee:e4:fb:ab:a2:41:77:70:fc:de:7b:1c:f2:f1:ef:41:61:13:
         1a:88:8a:c2:59:41:6d:db:47:00:64:8d:70:55:4b:55:55:4f:
         9d:e1:cf:24:c4:09:d2:b6:60:59:b5:bb:57:2a:9c:9e:c8:43:
         c1:18:8f:7c:c6:3f:89:1d:2d:6b:6f:1c:f2:91:b3:e5:b9:da:
         a9:9b:6b:a8:d2:db:fc:2d:48:ce:b0:09:fe:51:5e:08:a0:79:
         d9:6b:87:13:4b:8c:ec:80:8c:96:7c:0b:1c:08:12:2b:17:ea:
         9d:bc:43:1b:4d:97:bf:ce:5f:f8:dd:0b:96:e3:a4:a2:09:fc:
         94:3a:74:ff:b4:e8:aa:9f:6f:5f:4c:66:e5:3c:89:83:59:47:
         4c:56:d3:5a:cc:da:6b:45:ad:b8:40:7c:12:21:53:24:8e:01:
         ec:2e:47:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:11:30 2026 by rpki-client