Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/0/3133382e3231392e3139302e302f32342d3234203d3e20323633393332.roa
File:                     3133382e3231392e3139302e302f32342d3234203d3e20323633393332.roa (raw, json)
Hash identifier:          ZjxcIqFNQRsCTKjfWY7SebCr/Wmc24/tZq6nMD63LrU=
Subject key identifier:   7E:7E:01:C6:9B:11:52:81:0B:82:23:D1:CE:D3:88:F2:5B:A3:3D:5E
Certificate issuer:       /CN=32C3A39C604E0A859847813700F0E5113757B6FC
Certificate serial:       4F0671677FC02B06BD4A456ECE200481BD4DB477
Authority key identifier: 32:C3:A3:9C:60:4E:0A:85:98:47:81:37:00:F0:E5:11:37:57:B6:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3A39C604E0A859847813700F0E5113757B6FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/0/3133382e3231392e3139302e302f32342d3234203d3e20323633393332.roa
Signing time:             Wed 15 Jul 2026 17:46:09 +0000
ROA not before:           Wed 15 Jul 2026 17:41:09 +0000
ROA not after:            Wed 14 Jul 2027 17:46:09 +0000
asID:                     263932
IP address blocks:        138.219.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/0/32C3A39C604E0A859847813700F0E5113757B6FC.crl
                          rsync://rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/0/32C3A39C604E0A859847813700F0E5113757B6FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3A39C604E0A859847813700F0E5113757B6FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 04:41:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:06:71:67:7f:c0:2b:06:bd:4a:45:6e:ce:20:04:81:bd:4d:b4:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32C3A39C604E0A859847813700F0E5113757B6FC
        Validity
            Not Before: Jul 15 17:41:09 2026 GMT
            Not After : Jul 14 17:46:09 2027 GMT
        Subject: CN=7E7E01C69B1152810B8223D1CED388F25BA33D5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:62:c4:2d:e7:33:ce:8b:88:1d:1b:0c:8c:3d:
                    0b:96:22:5c:2f:e0:21:89:0d:ac:42:34:0b:ba:9f:
                    12:1e:52:01:7a:37:e8:0d:13:3a:c2:e9:eb:4b:58:
                    4c:98:8d:66:b9:af:10:b7:b7:89:f3:51:88:ad:d3:
                    20:ea:b7:d8:a5:64:90:c1:d2:b8:75:a9:62:75:2a:
                    a3:77:4a:92:54:37:2b:9f:28:7e:26:6e:47:bf:7c:
                    56:90:ca:f2:36:48:41:3b:f6:4d:c7:8c:e7:2b:60:
                    51:34:e3:b8:ff:78:84:ad:f8:b8:73:5d:65:45:00:
                    d5:08:be:a5:63:f4:c6:c8:a7:db:27:28:3c:97:c4:
                    63:56:7c:0e:07:4f:e7:5f:fd:9b:52:0b:c7:78:d4:
                    d8:ef:67:4b:af:a1:23:d9:f8:5d:29:80:98:07:61:
                    ee:50:2c:74:91:10:b5:c2:42:0d:0e:f3:4c:35:cd:
                    37:71:51:6b:69:7d:c3:f9:68:2d:aa:7e:71:71:b8:
                    e6:b4:d1:e0:69:4d:52:fd:d8:a6:b3:fc:51:5a:fa:
                    ce:51:6e:67:f2:a0:aa:21:dd:7e:39:9b:61:a6:53:
                    73:7c:07:a5:31:4c:97:89:24:8e:18:dc:00:e8:1e:
                    46:35:d9:de:27:34:28:ba:58:53:ab:83:d4:38:ce:
                    81:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:7E:01:C6:9B:11:52:81:0B:82:23:D1:CE:D3:88:F2:5B:A3:3D:5E
            X509v3 Authority Key Identifier:
                keyid:32:C3:A3:9C:60:4E:0A:85:98:47:81:37:00:F0:E5:11:37:57:B6:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/0/32C3A39C604E0A859847813700F0E5113757B6FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3A39C604E0A859847813700F0E5113757B6FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/0/3133382e3231392e3139302e302f32342d3234203d3e20323633393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:b0:a6:d8:da:47:fd:8b:04:0e:69:2a:95:ae:f0:a3:ec:41:
         af:3f:26:e3:26:50:c2:e9:85:b3:06:a0:62:74:60:79:bd:9b:
         14:03:34:66:12:0d:17:e2:2a:1a:ce:1f:d9:b8:7e:b7:e8:f3:
         6a:f7:1a:3e:8b:10:d2:5f:cd:26:bd:d4:fe:1e:bc:4a:f7:aa:
         db:8b:c0:dd:1a:aa:02:68:b5:fe:70:94:00:d2:5c:c0:00:35:
         69:d2:1d:b4:6e:ac:32:78:1d:98:3d:6c:3a:ea:72:1f:26:e4:
         96:fc:d7:4f:d5:94:4f:b3:fb:22:74:93:68:09:33:55:62:9b:
         91:25:05:ff:d3:a2:cb:90:62:fe:64:fe:9a:b4:7b:16:68:2b:
         98:4f:43:74:10:83:73:43:b7:49:c5:de:89:f8:51:49:dc:ed:
         3e:81:d1:1e:61:aa:0f:41:cf:37:14:71:de:4b:0b:2a:f9:87:
         54:b8:94:a9:da:c9:98:56:82:aa:1a:8c:cd:40:a2:b7:05:ab:
         c0:66:53:0a:9f:54:8d:d0:8c:e3:b5:d3:c6:42:56:22:f0:18:
         51:96:2f:98:c0:db:17:bc:a1:29:10:f6:bf:3a:9f:37:ba:fa:
         7c:8b:ca:bc:8f:1b:bf:7c:3d:ca:c0:46:be:26:16:c7:e5:de:
         bd:dc:ff:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:41 2026 by rpki-client