Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3138362e3235312e3231342e302f32332d3234203d3e203232313238.roa
File:                     3138362e3235312e3231342e302f32332d3234203d3e203232313238.roa (raw, json)
Hash identifier:          xLdJ8gAFFaA43R/xbPO6HWpFb/WRUlQ4ZkrX6TQWLI0=
Subject key identifier:   07:1E:10:19:68:01:42:6C:C7:5F:80:68:03:C1:AD:51:28:59:7F:9E
Certificate issuer:       /CN=14BE2DC7DA29D6A3E51E817626C1D961B3BA6787
Certificate serial:       32BEDBBE44614E39D5EB067A5C0A757C4D2885DA
Authority key identifier: 14:BE:2D:C7:DA:29:D6:A3:E5:1E:81:76:26:C1:D9:61:B3:BA:67:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14BE2DC7DA29D6A3E51E817626C1D961B3BA6787.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3138362e3235312e3231342e302f32332d3234203d3e203232313238.roa
Signing time:             Mon 13 Jul 2026 21:02:56 +0000
ROA not before:           Mon 13 Jul 2026 20:57:55 +0000
ROA not after:            Mon 12 Jul 2027 21:02:55 +0000
asID:                     22128
IP address blocks:        186.251.214.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/14BE2DC7DA29D6A3E51E817626C1D961B3BA6787.crl
                          rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/14BE2DC7DA29D6A3E51E817626C1D961B3BA6787.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14BE2DC7DA29D6A3E51E817626C1D961B3BA6787.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 22:36:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:be:db:be:44:61:4e:39:d5:eb:06:7a:5c:0a:75:7c:4d:28:85:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14BE2DC7DA29D6A3E51E817626C1D961B3BA6787
        Validity
            Not Before: Jul 13 20:57:55 2026 GMT
            Not After : Jul 12 21:02:55 2027 GMT
        Subject: CN=071E10196801426CC75F806803C1AD5128597F9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:21:75:de:ee:77:26:25:a9:4e:61:54:b4:08:
                    54:55:6c:66:d4:d2:b7:66:5b:af:c1:a5:c7:03:67:
                    55:80:1d:58:98:5d:ee:2d:7b:56:15:88:f9:b3:e2:
                    d2:65:8f:d4:cd:05:52:55:af:34:2e:b1:ff:f6:98:
                    7a:b9:19:02:72:8f:2a:0d:ea:ed:69:39:55:55:5f:
                    84:5c:b3:75:a2:ff:e7:45:52:96:7d:8e:10:6d:de:
                    2a:8b:7c:87:4f:02:70:cc:1f:46:95:3a:42:a3:40:
                    69:c8:c1:85:81:d3:a2:e5:8b:6a:e6:ea:b6:f7:63:
                    e4:9c:0a:f2:ed:40:93:8c:33:2b:78:53:5e:b9:ab:
                    49:36:f4:95:d8:1e:d2:41:ae:57:5a:7c:65:ee:d4:
                    2f:b2:ed:c5:62:2f:08:46:8d:ef:06:ce:09:c6:1d:
                    95:b8:7e:67:0a:84:65:4e:38:6d:e6:94:d6:30:48:
                    b9:01:a8:a4:af:26:a8:54:ab:e7:ff:83:03:70:cc:
                    fe:ef:ed:8e:04:98:dd:9b:a5:d2:76:58:3b:46:aa:
                    a0:10:01:8d:38:9b:0e:f4:9c:29:a2:1c:1f:70:b7:
                    47:4e:05:b1:22:18:80:b2:ba:bf:33:86:7d:e5:c4:
                    5e:0d:61:83:12:44:07:bb:89:24:16:da:1e:2f:a3:
                    56:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:1E:10:19:68:01:42:6C:C7:5F:80:68:03:C1:AD:51:28:59:7F:9E
            X509v3 Authority Key Identifier:
                keyid:14:BE:2D:C7:DA:29:D6:A3:E5:1E:81:76:26:C1:D9:61:B3:BA:67:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/14BE2DC7DA29D6A3E51E817626C1D961B3BA6787.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14BE2DC7DA29D6A3E51E817626C1D961B3BA6787.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3138362e3235312e3231342e302f32332d3234203d3e203232313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:52:df:58:7f:f0:b7:43:86:4a:28:29:91:c3:5e:98:7a:b3:
         0e:a7:9a:8e:2e:15:f9:55:f2:74:e1:54:20:29:06:56:4d:55:
         a3:18:29:e6:83:1e:a5:60:31:fd:20:d9:90:33:42:bd:86:56:
         03:32:12:0b:d6:77:ec:b9:48:1f:67:9b:14:e1:e7:4a:4a:03:
         08:7e:c3:8c:5e:8d:70:cc:25:22:38:59:da:8f:b8:98:7c:0f:
         0f:c4:cc:db:5c:54:18:42:13:01:b5:8c:89:1d:cc:17:a9:16:
         9c:c9:e7:c9:c4:ad:7d:75:bf:4e:b0:d9:89:11:ae:1c:43:e9:
         05:45:60:0c:dc:e7:55:da:4d:8e:3d:6f:4c:ec:de:5c:52:2f:
         0a:16:51:ec:cc:8a:50:31:ce:87:19:c0:90:19:a4:c0:92:47:
         ba:2c:ce:14:2d:51:f7:3e:97:bb:b9:51:87:0f:f4:61:07:48:
         ad:03:ce:ba:ae:8a:e4:d4:39:bf:1f:41:5f:d9:ea:8f:2c:2f:
         f6:6e:7a:1a:bc:01:06:cb:2a:ce:0c:57:d3:dd:4d:b1:13:a8:
         59:1a:f0:d3:9d:4a:dd:0f:d2:e8:93:16:74:40:b0:79:78:15:
         be:c3:20:a8:5e:ed:d6:02:2c:6f:bb:27:2d:37:d0:7a:86:ae:
         82:14:49:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:37:17 2026 by rpki-client