Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/3133382e3132312e302e302f32342d3234203d3e20323634323834.roa
File:                     3133382e3132312e302e302f32342d3234203d3e20323634323834.roa (raw, json)
Hash identifier:          KrETPjlzMgOswtA5b9g8jgkIv3gTwd+CNzKF8ewH4UI=
Subject key identifier:   D6:CB:50:35:75:54:CB:16:39:E7:26:DD:CC:4C:FA:E3:3E:3E:8B:38
Certificate issuer:       /CN=D3674BC62244757D82BD45C85C9511AD511807E1
Certificate serial:       4E9D12483B97FF4A2F281C9774D5141F7006378A
Authority key identifier: D3:67:4B:C6:22:44:75:7D:82:BD:45:C8:5C:95:11:AD:51:18:07:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3674BC62244757D82BD45C85C9511AD511807E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/3133382e3132312e302e302f32342d3234203d3e20323634323834.roa
Signing time:             Mon 02 Mar 2026 22:48:05 +0000
ROA not before:           Mon 02 Mar 2026 22:43:05 +0000
ROA not after:            Mon 01 Mar 2027 22:48:05 +0000
asID:                     264284
IP address blocks:        138.121.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/D3674BC62244757D82BD45C85C9511AD511807E1.crl
                          rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/D3674BC62244757D82BD45C85C9511AD511807E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3674BC62244757D82BD45C85C9511AD511807E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 15:29:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:9d:12:48:3b:97:ff:4a:2f:28:1c:97:74:d5:14:1f:70:06:37:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3674BC62244757D82BD45C85C9511AD511807E1
        Validity
            Not Before: Mar  2 22:43:05 2026 GMT
            Not After : Mar  1 22:48:05 2027 GMT
        Subject: CN=D6CB50357554CB1639E726DDCC4CFAE33E3E8B38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c9:3e:07:5f:f5:26:fe:0c:4a:63:d5:59:e0:
                    c7:89:84:1c:39:53:13:02:74:0f:8b:32:a6:f4:43:
                    68:00:39:03:4e:50:56:02:ae:2d:4a:42:5d:4c:34:
                    1c:e2:57:80:15:ce:a1:b8:20:88:12:45:ce:5c:c8:
                    d7:85:30:56:c2:9a:66:16:46:a5:11:6e:ef:b1:15:
                    41:61:57:6b:12:f0:e3:3d:f6:77:89:b7:fa:cd:d4:
                    d9:39:8d:b5:ba:a0:1a:5d:a8:78:d3:ef:ce:33:9b:
                    db:30:c6:dc:1e:66:3e:ab:a7:b6:5f:a9:b4:d2:f6:
                    0d:24:8d:93:66:1f:d0:c9:79:2a:84:0f:0b:68:c7:
                    ef:99:da:89:86:25:3a:22:ad:7d:84:9c:f1:ed:6f:
                    77:ba:0e:ce:dc:06:c2:fa:02:8b:b3:da:b5:8a:2f:
                    c9:1a:34:10:02:7a:43:42:eb:4c:29:fc:10:9e:30:
                    ee:20:0e:d8:ba:91:96:ce:2f:77:a7:9f:6b:83:21:
                    f1:95:d7:15:f8:da:5e:0b:36:26:98:c6:5f:e7:8d:
                    8b:75:bf:9c:2d:be:7c:1c:63:5b:67:8b:47:36:22:
                    0f:28:a1:b5:21:6a:5a:77:47:b1:4f:21:e8:44:4d:
                    be:12:17:d4:33:5e:53:04:1d:33:d7:35:46:28:9f:
                    0f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:CB:50:35:75:54:CB:16:39:E7:26:DD:CC:4C:FA:E3:3E:3E:8B:38
            X509v3 Authority Key Identifier:
                keyid:D3:67:4B:C6:22:44:75:7D:82:BD:45:C8:5C:95:11:AD:51:18:07:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/D3674BC62244757D82BD45C85C9511AD511807E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3674BC62244757D82BD45C85C9511AD511807E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/3133382e3132312e302e302f32342d3234203d3e20323634323834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:a7:c3:da:f2:a7:25:8e:e7:07:4e:ce:da:08:55:9f:a7:c6:
         15:83:a3:ef:48:86:f3:de:a5:5e:1f:66:41:81:54:69:37:ab:
         76:ec:f3:ce:2b:6f:7f:e7:04:b8:3a:a5:94:44:2e:7d:e4:8a:
         ea:1b:e7:bd:4d:df:de:77:50:2e:20:72:fb:d3:11:84:87:46:
         be:d0:9d:3d:ec:52:17:55:c9:3f:cd:d0:ac:f5:3f:04:c8:ce:
         2b:35:23:8a:5f:02:9a:eb:17:58:5b:93:5e:3b:d7:7c:e8:d7:
         5c:10:8b:ed:1f:e1:80:0a:e6:89:2e:ee:02:b3:a7:3a:ad:2b:
         c8:a2:80:59:82:d5:cf:3a:56:b2:f1:9a:dc:6a:e7:7c:03:11:
         3d:4e:e8:ba:fa:58:95:bd:7e:ef:f9:6a:8c:de:3c:4b:c1:8d:
         55:fd:4e:4e:33:fb:ae:88:48:68:7a:2a:f5:42:dc:ff:2f:2f:
         e8:31:22:9a:c3:eb:fa:4a:5b:4c:f0:1e:e7:f0:ec:cc:be:1c:
         d6:ef:2d:fb:71:36:7c:6e:e5:fb:5e:96:c7:13:d9:45:b6:e2:
         c8:c2:9c:ee:7a:ff:21:78:fe:71:2e:2d:76:24:cf:16:a2:c9:
         04:22:7b:00:fb:29:7e:14:3e:1b:c0:8f:31:fb:89:94:5c:11:
         4a:72:2e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:03:01 2026 by rpki-client