Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/0/3133382e3231392e3138382e302f32342d3234203d3e20323633393332.roa
File:                     3133382e3231392e3138382e302f32342d3234203d3e20323633393332.roa (raw, json)
Hash identifier:          tlGc+ZI7BEsc0Fkp8ktqZL2w0hLEc0O16MvdS5+JHJI=
Subject key identifier:   0F:83:3F:E8:3B:E4:C0:1E:C0:80:1B:FD:9A:8A:70:03:13:C4:49:E1
Certificate issuer:       /CN=32C3A39C604E0A859847813700F0E5113757B6FC
Certificate serial:       20741282002FA0854213B81E84F9F958D88148D0
Authority key identifier: 32:C3:A3:9C:60:4E:0A:85:98:47:81:37:00:F0:E5:11:37:57:B6:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3A39C604E0A859847813700F0E5113757B6FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/0/3133382e3231392e3138382e302f32342d3234203d3e20323633393332.roa
Signing time:             Wed 15 Jul 2026 17:44:51 +0000
ROA not before:           Wed 15 Jul 2026 17:39:51 +0000
ROA not after:            Wed 14 Jul 2027 17:44:51 +0000
asID:                     263932
IP address blocks:        138.219.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/0/32C3A39C604E0A859847813700F0E5113757B6FC.crl
                          rsync://rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/0/32C3A39C604E0A859847813700F0E5113757B6FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3A39C604E0A859847813700F0E5113757B6FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 04:41:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:74:12:82:00:2f:a0:85:42:13:b8:1e:84:f9:f9:58:d8:81:48:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32C3A39C604E0A859847813700F0E5113757B6FC
        Validity
            Not Before: Jul 15 17:39:51 2026 GMT
            Not After : Jul 14 17:44:51 2027 GMT
        Subject: CN=0F833FE83BE4C01EC0801BFD9A8A700313C449E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:eb:1a:c7:d2:f7:cc:1f:de:76:d3:1a:98:03:
                    9a:d9:2d:a3:de:ff:4d:d9:40:d3:63:bb:ff:c5:78:
                    cf:80:8e:d4:ec:3f:c2:a3:40:bb:ef:d3:79:af:45:
                    9d:4d:61:c0:88:05:ce:60:e0:23:d0:48:e3:44:5c:
                    79:4f:21:9a:8f:bb:88:35:69:aa:4e:2f:67:31:24:
                    89:7d:06:1b:0d:e1:0d:4d:fb:f9:51:8a:bb:00:12:
                    79:90:7b:aa:72:a4:c7:ab:46:49:da:d5:b5:55:c7:
                    f2:fa:94:a0:22:5c:cf:95:73:5c:ce:81:74:8e:84:
                    91:e8:68:1c:d7:3a:aa:20:84:f4:fc:0d:a2:fe:a1:
                    fa:94:59:f0:e2:2b:38:c0:10:42:d2:40:f2:38:94:
                    e5:75:55:3c:86:a8:9d:bc:c3:f0:c7:26:48:da:96:
                    99:79:ff:74:5c:8b:02:ba:45:6d:f4:91:19:c3:35:
                    e1:ad:d9:74:53:5d:d8:ed:32:59:82:c3:64:44:d2:
                    27:ef:ef:83:46:3a:25:73:d0:22:9d:8f:43:e5:cc:
                    3b:ad:07:1e:4e:be:cb:e3:06:b2:5e:97:f1:85:d8:
                    eb:4a:68:db:a8:4e:7b:df:a7:5a:2c:02:5f:08:ce:
                    19:dd:fe:fc:6b:78:38:d3:9d:8f:78:05:3f:8a:60:
                    5b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:83:3F:E8:3B:E4:C0:1E:C0:80:1B:FD:9A:8A:70:03:13:C4:49:E1
            X509v3 Authority Key Identifier:
                keyid:32:C3:A3:9C:60:4E:0A:85:98:47:81:37:00:F0:E5:11:37:57:B6:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/0/32C3A39C604E0A859847813700F0E5113757B6FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3A39C604E0A859847813700F0E5113757B6FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/0/3133382e3231392e3138382e302f32342d3234203d3e20323633393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:3c:b8:19:43:07:97:79:63:f1:de:21:22:45:a2:72:4f:07:
         f8:0a:5c:6a:cc:74:16:ae:73:65:3f:a3:fc:35:a7:82:78:59:
         55:6c:67:2e:7f:6a:48:8e:17:a8:cf:15:38:77:62:3b:60:5d:
         2d:5a:25:71:ab:22:7c:5c:95:34:0e:d0:5b:df:c5:bf:ef:31:
         28:14:32:37:f3:03:ff:0b:cc:53:56:c9:be:37:93:13:7f:17:
         8d:98:00:8c:bf:3a:c4:30:ba:26:c3:df:d8:5e:df:9e:3d:38:
         12:fe:66:fc:d9:17:e6:24:f5:dc:a0:82:f7:d2:30:2b:16:ff:
         00:eb:82:3c:fd:13:68:48:c4:7c:d8:39:69:09:2b:87:0b:64:
         b9:2a:4f:2f:22:8a:45:dd:1c:c6:58:93:4e:ba:32:23:25:ec:
         88:56:87:2f:76:0b:69:5f:25:a2:7d:37:05:c2:59:f4:81:fd:
         bd:19:a1:10:0f:7a:a8:f6:bd:5e:a0:c8:bf:79:84:60:cc:25:
         64:95:cb:42:3e:96:5d:f8:55:ac:4c:97:26:fd:0e:bf:3f:bc:
         b4:bf:59:18:d8:7c:2b:4e:52:f7:d2:1a:30:63:16:42:c4:b1:
         a7:1f:e7:3f:ac:e7:28:9b:b0:ea:12:71:90:4c:9e:6e:65:a8:
         4f:6c:4a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:39 2026 by rpki-client