Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2WUuY7JDLfMNAERvmAhZoW7cH8tacEFu7BP3FRV3JxVR/0/3138362e3139362e37392e302f32342d3332203d3e20323735373439.roa
File:                     3138362e3139362e37392e302f32342d3332203d3e20323735373439.roa (raw, json)
Hash identifier:          3LGDH2Zak12Qf4Nd6EC7/OGCfzaps2ZjceJo5ijxXQM=
Subject key identifier:   E1:E3:7B:B9:EA:2F:66:9D:D2:6F:49:B7:F0:37:5E:00:21:39:99:08
Certificate issuer:       /CN=ACED4C952116C77EA1B35CF2A95C37621EB66DC6
Certificate serial:       5DA7DE4E4AD5410C6F9E23518DA146DB73B95B95
Authority key identifier: AC:ED:4C:95:21:16:C7:7E:A1:B3:5C:F2:A9:5C:37:62:1E:B6:6D:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACED4C952116C77EA1B35CF2A95C37621EB66DC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2WUuY7JDLfMNAERvmAhZoW7cH8tacEFu7BP3FRV3JxVR/0/3138362e3139362e37392e302f32342d3332203d3e20323735373439.roa
Signing time:             Mon 14 Sep 2026 13:43:49 +0000
ROA not before:           Mon 14 Sep 2026 13:38:49 +0000
ROA not after:            Mon 13 Sep 2027 13:43:49 +0000
asID:                     275749
IP address blocks:        186.196.79.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2WUuY7JDLfMNAERvmAhZoW7cH8tacEFu7BP3FRV3JxVR/0/ACED4C952116C77EA1B35CF2A95C37621EB66DC6.crl
                          rsync://rpki-repo.registro.br/repo/2WUuY7JDLfMNAERvmAhZoW7cH8tacEFu7BP3FRV3JxVR/0/ACED4C952116C77EA1B35CF2A95C37621EB66DC6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACED4C952116C77EA1B35CF2A95C37621EB66DC6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 04:50:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a7:de:4e:4a:d5:41:0c:6f:9e:23:51:8d:a1:46:db:73:b9:5b:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACED4C952116C77EA1B35CF2A95C37621EB66DC6
        Validity
            Not Before: Sep 14 13:38:49 2026 GMT
            Not After : Sep 13 13:43:49 2027 GMT
        Subject: CN=E1E37BB9EA2F669DD26F49B7F0375E0021399908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:59:8f:91:aa:ff:22:90:93:87:43:13:5d:f6:
                    3d:bf:5b:d8:c9:e3:4d:fd:5c:50:e7:c0:ba:c6:11:
                    0b:9d:3b:70:35:d6:18:d2:31:91:b0:08:5d:5a:0c:
                    d6:0d:9e:13:3f:3b:90:a8:c6:a4:40:f8:b5:18:36:
                    6e:f9:e8:6a:f4:84:33:72:90:37:2f:f5:b7:19:50:
                    a3:f3:34:29:51:a3:60:ef:75:2c:06:17:d7:1d:f0:
                    48:eb:1c:af:2a:d6:46:9d:12:fe:98:04:18:b5:35:
                    f5:4a:e8:2c:cb:13:c1:88:84:e7:d8:6e:b4:1a:0b:
                    8f:e4:ec:e1:06:a4:ce:44:ec:32:de:a1:82:fa:76:
                    c1:59:99:16:dd:6c:e7:31:21:0e:45:6c:7b:29:8b:
                    0d:54:a8:f7:3f:78:c1:75:d0:39:ae:cb:c8:5b:83:
                    40:ce:5e:36:4c:c8:67:0a:84:dc:05:88:13:63:a1:
                    35:ed:91:2a:58:28:be:5a:5b:88:10:e4:fc:69:62:
                    5b:3a:45:5c:a0:e5:29:26:f4:fe:25:b5:99:48:91:
                    6d:8b:b0:39:4e:b4:1c:9f:2a:39:67:0e:9f:ea:70:
                    76:49:d1:ee:aa:1b:fc:9a:5a:6a:39:b5:f4:e5:1b:
                    c0:d6:7e:9d:61:fb:17:67:9c:4c:3c:a4:31:21:e4:
                    f4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E3:7B:B9:EA:2F:66:9D:D2:6F:49:B7:F0:37:5E:00:21:39:99:08
            X509v3 Authority Key Identifier:
                keyid:AC:ED:4C:95:21:16:C7:7E:A1:B3:5C:F2:A9:5C:37:62:1E:B6:6D:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2WUuY7JDLfMNAERvmAhZoW7cH8tacEFu7BP3FRV3JxVR/0/ACED4C952116C77EA1B35CF2A95C37621EB66DC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACED4C952116C77EA1B35CF2A95C37621EB66DC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WUuY7JDLfMNAERvmAhZoW7cH8tacEFu7BP3FRV3JxVR/0/3138362e3139362e37392e302f32342d3332203d3e20323735373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.196.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:6c:68:c6:73:58:c1:1a:cb:23:22:b0:b6:22:15:a5:aa:f2:
         47:62:49:02:37:5b:c1:13:96:8d:58:72:ef:26:44:71:a2:eb:
         5e:fc:f4:a2:98:06:c2:a0:24:60:7d:3d:1f:b0:b2:39:77:24:
         e9:6f:4a:a4:48:a5:e9:f3:dd:8f:85:c5:dd:5f:a3:72:09:3d:
         2f:46:bb:e3:a0:e5:10:09:78:3f:ab:ed:13:d5:1b:13:d7:d4:
         92:dc:bf:97:87:f2:cd:43:f6:1f:45:72:a9:f6:89:aa:c6:86:
         1b:e4:8b:b0:97:7b:84:e3:f5:f8:f0:16:d1:fa:0e:a4:dc:8b:
         9f:5e:64:22:44:45:a1:2a:b1:d9:a3:4d:7f:f2:b2:74:d5:93:
         50:27:96:f0:c5:97:33:73:db:52:e2:65:b0:01:3f:13:b3:15:
         d0:aa:3b:1f:89:d9:1f:88:0a:7e:ae:25:a2:fd:3f:e2:cc:bb:
         d3:be:54:7b:b2:36:5a:87:de:95:85:61:de:c7:ba:4e:d8:43:
         ad:86:6f:cb:90:f6:6f:46:71:51:b6:30:37:be:ed:cb:db:d0:
         46:f6:83:c2:ea:29:94:02:87:74:1a:c0:b7:7c:c7:a7:84:0e:
         c3:18:d1:1d:89:43:4e:a3:98:ed:88:bd:c6:2f:a9:d3:4d:17:
         7a:0d:06:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:27:24 2026 by rpki-client