Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/0/3133382e3231392e3138382e302f32322d3232203d3e20323633393332.roa
File:                     3133382e3231392e3138382e302f32322d3232203d3e20323633393332.roa (raw, json)
Hash identifier:          /dbXIH+sGFWf9gYormBZNPK73eiAcOkauIiKK340Jgc=
Subject key identifier:   26:4F:FC:A4:A6:A0:9F:40:8D:5C:66:F7:58:D8:5E:0F:D8:7E:BF:01
Certificate issuer:       /CN=32C3A39C604E0A859847813700F0E5113757B6FC
Certificate serial:       5F497C518B14C4BA3BD40AE6673248B505228E2E
Authority key identifier: 32:C3:A3:9C:60:4E:0A:85:98:47:81:37:00:F0:E5:11:37:57:B6:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3A39C604E0A859847813700F0E5113757B6FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/0/3133382e3231392e3138382e302f32322d3232203d3e20323633393332.roa
Signing time:             Wed 15 Jul 2026 17:46:33 +0000
ROA not before:           Wed 15 Jul 2026 17:41:33 +0000
ROA not after:            Wed 14 Jul 2027 17:46:33 +0000
asID:                     263932
IP address blocks:        138.219.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/0/32C3A39C604E0A859847813700F0E5113757B6FC.crl
                          rsync://rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/0/32C3A39C604E0A859847813700F0E5113757B6FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3A39C604E0A859847813700F0E5113757B6FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 04:41:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:49:7c:51:8b:14:c4:ba:3b:d4:0a:e6:67:32:48:b5:05:22:8e:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32C3A39C604E0A859847813700F0E5113757B6FC
        Validity
            Not Before: Jul 15 17:41:33 2026 GMT
            Not After : Jul 14 17:46:33 2027 GMT
        Subject: CN=264FFCA4A6A09F408D5C66F758D85E0FD87EBF01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d6:00:42:94:b6:60:09:83:4b:2d:9c:d9:71:
                    31:54:dd:f6:d9:dd:34:65:7f:1d:e2:69:72:6a:a4:
                    1f:67:84:56:22:7e:37:01:65:df:0a:4c:05:e0:7c:
                    80:86:50:a2:9a:17:94:0b:73:a3:9c:ff:47:68:8d:
                    cf:3e:e0:89:89:c5:08:cb:01:ff:c2:08:04:d7:bb:
                    39:40:14:a1:6a:3d:56:2b:85:2d:42:45:5f:a5:87:
                    af:82:ce:fe:33:f5:54:7e:d3:74:9a:1e:ce:e2:83:
                    db:dd:92:75:a1:0a:99:51:5a:b5:b6:a5:14:eb:8b:
                    2a:06:b9:ab:81:e7:55:d7:86:19:d2:cf:05:bd:fa:
                    9c:3e:e1:e6:84:d3:96:46:5f:62:8f:10:ac:78:cf:
                    e0:66:91:a6:20:8f:1e:6e:9f:ed:4e:a8:04:af:ce:
                    03:e9:55:38:3f:15:ae:f5:8e:4a:47:39:16:ed:19:
                    ef:d7:36:4f:60:d1:59:d0:ce:96:4b:cf:d6:77:e9:
                    07:8c:5d:39:9a:f7:10:8a:2c:cd:01:df:52:11:d4:
                    2b:0b:83:50:53:fc:9b:5a:82:82:2c:16:c7:90:d9:
                    90:7a:76:10:47:b2:9e:cb:5c:69:77:2d:7f:2b:66:
                    db:f5:53:f6:d4:5e:4e:d4:cf:54:2f:8a:75:60:1b:
                    ba:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:4F:FC:A4:A6:A0:9F:40:8D:5C:66:F7:58:D8:5E:0F:D8:7E:BF:01
            X509v3 Authority Key Identifier:
                keyid:32:C3:A3:9C:60:4E:0A:85:98:47:81:37:00:F0:E5:11:37:57:B6:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/0/32C3A39C604E0A859847813700F0E5113757B6FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3A39C604E0A859847813700F0E5113757B6FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/0/3133382e3231392e3138382e302f32322d3232203d3e20323633393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ce:ce:3c:c2:83:1f:fa:cd:b6:ec:25:94:38:3d:9a:ec:7f:c6:
         d9:b8:af:9a:77:21:39:be:8b:21:6e:1e:b5:bc:7f:30:62:4e:
         01:fd:b8:c7:7b:46:c0:d0:0a:1e:06:ac:8a:28:5c:d3:58:0a:
         a4:d3:16:60:9d:f5:7c:00:81:aa:5a:92:f5:8e:6d:0f:9c:90:
         82:e2:cc:26:59:99:76:4c:4e:80:be:ec:94:c6:e6:e3:08:b4:
         16:57:09:ac:4a:7d:ca:a5:a3:2e:9a:6c:76:e8:36:5b:b3:2b:
         fb:21:3d:93:f8:5d:bc:a3:30:a0:ca:ae:5d:28:8f:03:d0:5d:
         4c:4e:04:5a:be:c4:0b:7c:e9:00:8a:d3:80:8e:00:12:b3:82:
         8b:c3:98:cd:2e:e7:b9:aa:af:37:ee:e9:b8:19:7b:c4:cd:f2:
         25:2d:2a:46:14:45:91:8f:65:fe:b4:22:50:5a:77:ed:51:0a:
         90:ba:ca:5c:00:63:be:da:b5:e6:de:b2:44:a4:c6:9a:65:cd:
         54:0a:79:41:7b:9a:b1:e0:86:bf:0a:f7:a7:a1:3e:e4:ca:84:
         3b:78:9d:a6:f8:c9:dc:f8:81:af:c8:86:a4:bf:9e:c5:5c:1e:
         7e:cd:a5:a0:3c:b9:1a:56:22:ec:6f:c4:d6:28:df:c2:31:cd:
         27:94:06:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:43 2026 by rpki-client