Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GsoHV4fRLtB4iaHER59fKtij3VBCS6sqLkVxNXZRXeD2/0/3133382e39392e37322e302f32322d3234203d3e20323634313738.roa
File:                     3133382e39392e37322e302f32322d3234203d3e20323634313738.roa (raw, json)
Hash identifier:          uFzS6G216vtXJ8izlDQvjkU2vopWszbFFXSKMHSTzrE=
Subject key identifier:   DA:C8:9C:39:62:D3:D7:69:F7:26:11:D1:06:B3:B9:E4:1E:95:2E:C1
Certificate issuer:       /CN=F6FDFB556161F56337A651786FBBB413C76C0A48
Certificate serial:       20F839E344561EB315D690835C0D023D7379CF9A
Authority key identifier: F6:FD:FB:55:61:61:F5:63:37:A6:51:78:6F:BB:B4:13:C7:6C:0A:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6FDFB556161F56337A651786FBBB413C76C0A48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsoHV4fRLtB4iaHER59fKtij3VBCS6sqLkVxNXZRXeD2/0/3133382e39392e37322e302f32322d3234203d3e20323634313738.roa
Signing time:             Wed 07 Oct 2026 17:48:35 +0000
ROA not before:           Wed 07 Oct 2026 17:43:35 +0000
ROA not after:            Wed 06 Oct 2027 17:48:35 +0000
asID:                     264178
IP address blocks:        138.99.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GsoHV4fRLtB4iaHER59fKtij3VBCS6sqLkVxNXZRXeD2/0/F6FDFB556161F56337A651786FBBB413C76C0A48.crl
                          rsync://rpki-repo.registro.br/repo/GsoHV4fRLtB4iaHER59fKtij3VBCS6sqLkVxNXZRXeD2/0/F6FDFB556161F56337A651786FBBB413C76C0A48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6FDFB556161F56337A651786FBBB413C76C0A48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 06:22:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:f8:39:e3:44:56:1e:b3:15:d6:90:83:5c:0d:02:3d:73:79:cf:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6FDFB556161F56337A651786FBBB413C76C0A48
        Validity
            Not Before: Oct  7 17:43:35 2026 GMT
            Not After : Oct  6 17:48:35 2027 GMT
        Subject: CN=DAC89C3962D3D769F72611D106B3B9E41E952EC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ee:98:74:f2:81:56:c3:be:d3:8f:f2:30:be:
                    42:21:da:3e:05:b4:59:1a:5e:8c:9d:ff:40:e9:ec:
                    38:63:27:63:e1:ec:48:b4:44:2c:46:7e:c9:f6:2e:
                    6e:2e:66:aa:21:6a:8a:86:c4:8e:0b:c4:bc:28:a3:
                    a9:09:f8:6f:bd:cb:c6:c5:bd:f2:c3:34:d7:d1:3f:
                    d8:9a:65:f4:77:b0:5a:c7:e8:08:b4:ba:a1:d7:cb:
                    a2:59:4d:f5:f0:77:29:a4:83:4e:22:7f:59:f2:40:
                    1c:27:51:ae:20:ce:f2:e9:4a:8c:97:60:d8:dd:b9:
                    38:62:66:8c:eb:25:9c:da:53:b2:3e:a5:76:c8:86:
                    b9:a1:6d:84:39:5f:d8:a3:0d:d9:b5:68:0f:6b:8f:
                    17:5e:57:c5:e1:46:91:c0:ee:7d:98:40:40:50:4b:
                    98:f2:b5:9e:3b:16:3a:70:1a:e9:79:3a:fa:ec:26:
                    7d:9e:43:e6:5e:8f:3d:88:b6:ef:dc:19:10:30:4a:
                    f3:f3:8f:f0:ed:e8:a8:fa:e8:49:c4:61:a3:42:62:
                    5d:f1:fe:80:0d:63:97:d1:bc:9e:8d:28:01:71:b0:
                    95:a9:9e:a4:39:58:a8:18:3a:74:f6:bc:e2:42:ae:
                    14:8c:e0:9f:30:2f:c7:32:b6:a9:80:27:a3:b7:47:
                    84:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C8:9C:39:62:D3:D7:69:F7:26:11:D1:06:B3:B9:E4:1E:95:2E:C1
            X509v3 Authority Key Identifier:
                keyid:F6:FD:FB:55:61:61:F5:63:37:A6:51:78:6F:BB:B4:13:C7:6C:0A:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsoHV4fRLtB4iaHER59fKtij3VBCS6sqLkVxNXZRXeD2/0/F6FDFB556161F56337A651786FBBB413C76C0A48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6FDFB556161F56337A651786FBBB413C76C0A48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsoHV4fRLtB4iaHER59fKtij3VBCS6sqLkVxNXZRXeD2/0/3133382e39392e37322e302f32322d3234203d3e20323634313738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:18:01:fd:a3:f2:ea:02:c3:29:59:63:54:04:ee:f9:6f:d5:
         82:24:4c:4e:a4:aa:0a:60:41:21:72:17:7c:ea:70:06:01:b9:
         8f:e0:ee:be:c2:df:47:87:a3:6e:d5:59:ed:6a:bc:39:5d:5c:
         a3:e0:ad:db:4a:db:9c:48:93:18:de:bc:37:b8:f9:45:d9:cb:
         46:46:08:4b:0a:29:72:cc:06:9f:17:16:45:eb:6b:4a:12:b7:
         33:3a:19:84:25:42:db:9f:44:45:2d:99:ae:23:3e:8c:bf:3f:
         b0:9d:5c:a2:b7:48:3b:d5:a0:f1:ea:f0:6d:00:3b:0e:50:3a:
         f0:fd:35:03:50:c3:cf:fb:45:5a:fb:6a:3d:8d:b6:49:5b:14:
         f1:c2:df:4d:19:1b:a4:6e:7d:b5:74:80:43:9e:8c:a6:80:80:
         68:ea:b4:fd:63:61:75:58:5d:70:d8:8a:02:ce:d4:d7:3b:ed:
         99:3e:2f:74:de:b1:e6:09:0e:3a:42:2d:95:d5:dd:7c:15:e9:
         41:8a:b4:fa:b8:10:03:32:ec:4c:1e:9f:83:61:27:11:3e:e8:
         b3:4c:08:7f:7e:6c:97:2c:01:0f:40:92:73:79:6a:7a:8f:e9:
         3d:64:e6:16:f3:0f:79:3d:11:f8:5f:9b:b6:65:06:2c:36:59:
         ea:e7:7c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 21:05:29 2026 by rpki-client