Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/0/3133382e3231392e3138382e302f32332d3233203d3e20323633393332.roa
File:                     3133382e3231392e3138382e302f32332d3233203d3e20323633393332.roa (raw, json)
Hash identifier:          Rx1cy4/iDrmE+AwDzmcjvER4kDzwcn/PU4C+ldq5X/M=
Subject key identifier:   AC:12:05:98:75:94:C1:E7:C6:1E:AE:1A:9E:38:AC:52:80:51:FB:55
Certificate issuer:       /CN=32C3A39C604E0A859847813700F0E5113757B6FC
Certificate serial:       29634F8351DB0AEC7EF03EF364511C2CFA32C4D6
Authority key identifier: 32:C3:A3:9C:60:4E:0A:85:98:47:81:37:00:F0:E5:11:37:57:B6:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3A39C604E0A859847813700F0E5113757B6FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/0/3133382e3231392e3138382e302f32332d3233203d3e20323633393332.roa
Signing time:             Wed 15 Jul 2026 17:46:49 +0000
ROA not before:           Wed 15 Jul 2026 17:41:49 +0000
ROA not after:            Wed 14 Jul 2027 17:46:49 +0000
asID:                     263932
IP address blocks:        138.219.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/0/32C3A39C604E0A859847813700F0E5113757B6FC.crl
                          rsync://rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/0/32C3A39C604E0A859847813700F0E5113757B6FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3A39C604E0A859847813700F0E5113757B6FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 04:41:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:63:4f:83:51:db:0a:ec:7e:f0:3e:f3:64:51:1c:2c:fa:32:c4:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32C3A39C604E0A859847813700F0E5113757B6FC
        Validity
            Not Before: Jul 15 17:41:49 2026 GMT
            Not After : Jul 14 17:46:49 2027 GMT
        Subject: CN=AC1205987594C1E7C61EAE1A9E38AC528051FB55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5f:cb:36:ff:74:6a:fe:10:23:79:fa:03:13:
                    b2:5b:b1:d0:48:15:30:38:d5:63:27:80:bb:0b:1e:
                    89:d6:96:f0:5f:77:c3:93:c1:09:73:af:a8:8e:d3:
                    75:80:6f:dc:02:61:0a:54:6d:6b:00:e7:c6:46:98:
                    07:44:d1:36:08:26:e7:14:1b:62:a6:ea:5f:54:b9:
                    93:60:35:07:bc:3d:28:f8:0b:5b:e9:f2:38:59:67:
                    1e:12:86:5b:0e:a6:c8:c4:17:42:44:db:c9:73:e1:
                    82:55:0e:99:69:33:db:64:a7:13:7c:c2:b6:be:25:
                    86:a7:07:10:93:9e:db:4e:ab:21:37:03:01:54:6d:
                    5d:19:e9:92:54:2c:98:16:1a:e5:06:1d:4e:b2:ba:
                    63:1a:fb:90:3e:f5:f4:0a:40:9f:0e:a3:4e:64:79:
                    5d:f2:81:38:fa:47:54:75:64:39:c1:14:35:79:4b:
                    4f:26:e4:ee:07:1f:02:24:27:58:9c:15:0c:62:c0:
                    1b:62:cf:29:16:af:84:4b:d6:25:b4:2e:e3:0b:04:
                    c4:f9:4f:ab:2d:ec:e2:b1:d6:17:5a:24:d1:88:b5:
                    cf:c1:ab:a7:02:8d:dd:0c:b1:e5:d6:f8:65:3e:86:
                    bd:de:a0:02:39:43:4c:22:12:3b:dd:d6:b0:d3:20:
                    fd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:12:05:98:75:94:C1:E7:C6:1E:AE:1A:9E:38:AC:52:80:51:FB:55
            X509v3 Authority Key Identifier:
                keyid:32:C3:A3:9C:60:4E:0A:85:98:47:81:37:00:F0:E5:11:37:57:B6:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/0/32C3A39C604E0A859847813700F0E5113757B6FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3A39C604E0A859847813700F0E5113757B6FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/0/3133382e3231392e3138382e302f32332d3233203d3e20323633393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:4d:c5:b6:a4:09:4e:4a:85:49:b0:93:7f:8e:a1:17:56:32:
         29:fa:ac:c8:b7:19:4a:ca:2e:91:04:b8:7a:dd:f3:c3:1c:9d:
         af:ec:d6:9f:5d:dd:90:b8:42:18:1f:50:c5:5a:97:58:59:2c:
         48:2a:21:f6:43:9a:74:d9:a6:23:6f:9e:24:a7:e0:12:13:d1:
         cc:f6:b2:0d:af:f2:f4:3d:eb:27:92:ad:d8:96:d6:44:64:73:
         10:3e:e5:bc:6e:e9:53:c2:e8:de:70:e1:56:1e:59:d9:6b:f0:
         4e:1f:a0:8d:ef:7a:ca:9f:ea:97:52:d7:a8:26:17:48:03:63:
         cd:d4:b7:77:5f:79:30:1e:c8:3b:a7:1f:8f:f0:d8:a6:22:61:
         be:eb:49:36:c2:ad:d2:29:b6:01:8f:d6:fa:7e:64:03:e5:2c:
         47:d5:4e:e8:fc:b2:8f:35:40:7b:ef:9f:e0:2d:67:b5:1d:c9:
         f9:53:ac:14:b3:34:b3:91:e0:59:3b:fe:44:c9:df:72:8c:2c:
         dd:0c:b2:9c:0a:74:e3:88:ed:06:e2:8f:ad:7c:81:15:ea:28:
         0e:42:9c:34:81:f8:79:5d:65:2c:f7:ee:45:3c:9c:21:6d:b6:
         b2:9b:5c:e5:45:e5:ea:53:a0:3a:b7:1d:63:f3:fb:f2:46:44:
         ea:ab:ed:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:53 2026 by rpki-client