Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2Vg2ZozhxHhYEgzQxz2TAyrEpngbhAD1oDXsPQaAUJMb/0/3138372e38372e3135302e302f32342d3234203d3e20323735373939.roa
File:                     3138372e38372e3135302e302f32342d3234203d3e20323735373939.roa (raw, json)
Hash identifier:          iqMTTqvPeblr80Nj7Dl2EtUc+ehvgCVTvRx7IE/eFKM=
Subject key identifier:   16:40:DE:30:ED:55:6D:EA:32:B4:3B:F6:BB:32:F0:2C:0A:52:08:9A
Certificate issuer:       /CN=D1339C429FB75A2542BC85EE2F87F4C5E443D2C9
Certificate serial:       55B614B34DFC067B863A2A9131F198ADD6343273
Authority key identifier: D1:33:9C:42:9F:B7:5A:25:42:BC:85:EE:2F:87:F4:C5:E4:43:D2:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1339C429FB75A2542BC85EE2F87F4C5E443D2C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Vg2ZozhxHhYEgzQxz2TAyrEpngbhAD1oDXsPQaAUJMb/0/3138372e38372e3135302e302f32342d3234203d3e20323735373939.roa
Signing time:             Mon 14 Sep 2026 17:50:00 +0000
ROA not before:           Mon 14 Sep 2026 17:45:00 +0000
ROA not after:            Mon 13 Sep 2027 17:50:00 +0000
asID:                     275799
IP address blocks:        187.87.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2Vg2ZozhxHhYEgzQxz2TAyrEpngbhAD1oDXsPQaAUJMb/0/D1339C429FB75A2542BC85EE2F87F4C5E443D2C9.crl
                          rsync://rpki-repo.registro.br/repo/2Vg2ZozhxHhYEgzQxz2TAyrEpngbhAD1oDXsPQaAUJMb/0/D1339C429FB75A2542BC85EE2F87F4C5E443D2C9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1339C429FB75A2542BC85EE2F87F4C5E443D2C9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 07:11:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:b6:14:b3:4d:fc:06:7b:86:3a:2a:91:31:f1:98:ad:d6:34:32:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1339C429FB75A2542BC85EE2F87F4C5E443D2C9
        Validity
            Not Before: Sep 14 17:45:00 2026 GMT
            Not After : Sep 13 17:50:00 2027 GMT
        Subject: CN=1640DE30ED556DEA32B43BF6BB32F02C0A52089A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:af:15:45:28:3b:6a:dc:2a:7c:32:bf:f0:74:
                    fd:8c:bb:63:32:9c:6f:9a:c3:81:ed:7e:66:1f:f2:
                    9f:e9:70:2d:ca:8f:21:b2:95:14:20:13:48:28:8d:
                    c9:f1:e3:d5:c8:59:8d:5c:09:df:5e:0c:c8:c2:b7:
                    e8:d5:9d:3a:02:57:19:f8:a6:05:0a:5d:da:3e:f9:
                    ba:0c:19:94:7e:12:58:4e:ae:ae:74:3d:98:0b:0a:
                    2a:3b:5e:a5:19:63:f5:90:eb:56:6f:87:d0:b2:f2:
                    e2:44:d0:15:b9:7f:8f:38:b4:79:ab:0e:b8:d8:ae:
                    ec:f7:10:6d:a2:ff:72:1c:48:0b:69:b0:47:d9:74:
                    98:57:da:f0:de:31:da:ad:6c:18:5b:e9:7d:19:5f:
                    60:77:e1:65:44:d4:aa:50:5a:71:82:96:f4:a9:18:
                    79:90:03:a3:4f:ec:6f:85:ce:ec:4a:78:ca:89:e6:
                    7b:65:d0:3e:24:c9:04:69:af:72:73:42:0f:db:5d:
                    f1:09:0f:e4:31:6b:c6:1d:92:e6:96:92:0b:a8:d8:
                    57:86:92:0f:cc:db:7d:fc:4f:1f:8c:33:fe:0e:ab:
                    0f:de:d3:a0:62:13:94:a0:4a:f4:6d:eb:7e:ba:36:
                    e0:d8:32:9d:3f:34:e8:4b:4d:10:68:51:5a:56:f9:
                    94:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:40:DE:30:ED:55:6D:EA:32:B4:3B:F6:BB:32:F0:2C:0A:52:08:9A
            X509v3 Authority Key Identifier:
                keyid:D1:33:9C:42:9F:B7:5A:25:42:BC:85:EE:2F:87:F4:C5:E4:43:D2:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Vg2ZozhxHhYEgzQxz2TAyrEpngbhAD1oDXsPQaAUJMb/0/D1339C429FB75A2542BC85EE2F87F4C5E443D2C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1339C429FB75A2542BC85EE2F87F4C5E443D2C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Vg2ZozhxHhYEgzQxz2TAyrEpngbhAD1oDXsPQaAUJMb/0/3138372e38372e3135302e302f32342d3234203d3e20323735373939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:08:be:49:41:e0:a9:76:31:1d:ae:e0:e4:07:8d:28:05:46:
         e7:33:a3:1e:ac:9b:80:0b:7c:ff:b8:ca:08:b3:03:4b:7c:91:
         e7:e6:08:ec:76:f7:ae:de:7d:23:4e:c8:82:c3:b1:f4:92:e2:
         3d:b0:1c:a8:55:58:b7:52:42:af:d8:f4:5f:61:7f:84:cf:c8:
         1e:48:8e:74:00:42:31:a9:d0:07:e1:7d:9b:9a:89:5a:6e:4e:
         13:e6:d8:24:41:1e:84:1d:3c:2e:28:0c:f6:b6:8a:d2:f7:46:
         6f:21:f1:b6:fc:99:4a:dc:ce:58:25:db:bd:bd:63:fd:e2:68:
         35:c4:2a:95:57:aa:d9:b6:2b:98:85:fa:8d:cb:e9:84:33:9c:
         da:57:c7:41:bb:b1:88:7b:f7:57:5d:47:57:60:23:25:0a:01:
         6a:85:93:2d:7a:e9:53:74:98:66:32:30:ca:b6:5c:cf:d3:c6:
         2d:81:c3:ec:9e:b5:87:db:4e:3a:5a:00:f6:96:38:b6:41:47:
         46:4f:6d:1c:c3:bb:34:b3:e2:85:f7:e6:15:16:99:0c:b5:c4:
         0b:e9:4f:66:96:79:63:b6:f0:a1:02:33:16:68:a4:99:13:c8:
         3c:2e:9b:3d:2e:0a:7b:22:29:6c:bc:41:fd:8d:ee:92:7b:9e:
         da:5e:42:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:36:49 2026 by rpki-client