Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2xxGCZw9M48eUJsHJGURaQkp6rNdP9itEmwpH4hzEmeL/0/3138362e3139352e3136372e302f32342d3234203d3e20323734363736.roa
File:                     3138362e3139352e3136372e302f32342d3234203d3e20323734363736.roa (raw, json)
Hash identifier:          2uVUuHqh2rGB595GsD5hKN+WU/rCyn13rl+qHtbifnU=
Subject key identifier:   3D:C5:FE:5C:C4:3E:D6:91:6C:1C:E9:05:EA:B4:15:01:7A:BE:8D:C1
Certificate issuer:       /CN=6CA8F2E376D51B5B94371C8CF853DE6986BA4AF5
Certificate serial:       4230205B1146A99519BDAE4CB5E3F1F0F10D97A3
Authority key identifier: 6C:A8:F2:E3:76:D5:1B:5B:94:37:1C:8C:F8:53:DE:69:86:BA:4A:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CA8F2E376D51B5B94371C8CF853DE6986BA4AF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2xxGCZw9M48eUJsHJGURaQkp6rNdP9itEmwpH4hzEmeL/0/3138362e3139352e3136372e302f32342d3234203d3e20323734363736.roa
Signing time:             Wed 18 Mar 2026 12:59:25 +0000
ROA not before:           Wed 18 Mar 2026 12:54:25 +0000
ROA not after:            Wed 17 Mar 2027 12:59:25 +0000
asID:                     274676
IP address blocks:        186.195.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2xxGCZw9M48eUJsHJGURaQkp6rNdP9itEmwpH4hzEmeL/0/6CA8F2E376D51B5B94371C8CF853DE6986BA4AF5.crl
                          rsync://rpki-repo.registro.br/repo/2xxGCZw9M48eUJsHJGURaQkp6rNdP9itEmwpH4hzEmeL/0/6CA8F2E376D51B5B94371C8CF853DE6986BA4AF5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CA8F2E376D51B5B94371C8CF853DE6986BA4AF5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 23:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:30:20:5b:11:46:a9:95:19:bd:ae:4c:b5:e3:f1:f0:f1:0d:97:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CA8F2E376D51B5B94371C8CF853DE6986BA4AF5
        Validity
            Not Before: Mar 18 12:54:25 2026 GMT
            Not After : Mar 17 12:59:25 2027 GMT
        Subject: CN=3DC5FE5CC43ED6916C1CE905EAB415017ABE8DC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2a:0b:e5:d8:35:f6:cd:53:5a:27:96:fb:9d:
                    b3:7f:3a:c6:f0:fb:34:2d:eb:74:ce:f7:f8:04:4d:
                    39:b1:ef:a2:bb:a6:24:f2:d8:e3:29:90:8f:54:33:
                    6d:b7:34:9c:91:9b:e7:ac:84:51:42:b9:ea:0d:6e:
                    37:c9:d2:e0:a6:9f:a6:93:0e:81:57:06:fd:76:bc:
                    38:64:d3:cd:8b:e7:1c:24:70:04:a0:32:b9:e5:ca:
                    8c:e0:60:a2:db:79:21:34:e0:f0:42:4c:94:ab:f6:
                    ee:64:d9:a6:61:2a:14:2f:be:c7:b5:b5:3b:12:ed:
                    cc:2c:82:65:6c:10:55:9c:f1:09:9d:44:4e:e4:7a:
                    c0:19:fa:20:31:be:05:f8:50:90:56:cb:c1:4b:a9:
                    d1:48:1f:83:84:11:13:ef:13:2a:8e:74:e0:c7:3f:
                    29:ce:c5:06:7e:d3:d0:73:83:87:ad:59:b1:f3:1c:
                    8e:bb:fa:02:da:d7:61:49:71:54:fc:21:4b:71:b3:
                    10:dd:0b:ea:45:2a:25:81:13:fb:dd:39:c1:df:ab:
                    44:8d:a2:68:18:3e:4a:d0:85:dc:0f:10:76:d1:08:
                    0b:c5:38:b6:b2:95:99:d8:c1:02:f1:e5:d6:ba:ae:
                    12:90:7d:5b:f1:09:ce:1a:ee:75:7d:85:08:7f:69:
                    b9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C5:FE:5C:C4:3E:D6:91:6C:1C:E9:05:EA:B4:15:01:7A:BE:8D:C1
            X509v3 Authority Key Identifier:
                keyid:6C:A8:F2:E3:76:D5:1B:5B:94:37:1C:8C:F8:53:DE:69:86:BA:4A:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2xxGCZw9M48eUJsHJGURaQkp6rNdP9itEmwpH4hzEmeL/0/6CA8F2E376D51B5B94371C8CF853DE6986BA4AF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CA8F2E376D51B5B94371C8CF853DE6986BA4AF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2xxGCZw9M48eUJsHJGURaQkp6rNdP9itEmwpH4hzEmeL/0/3138362e3139352e3136372e302f32342d3234203d3e20323734363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:d2:39:64:b8:48:c7:1e:b7:94:7c:2e:53:1b:b1:1c:75:09:
         1e:e0:6a:6b:09:f3:33:15:a2:97:ea:fa:9f:95:cc:53:00:63:
         50:4a:65:bb:68:d4:17:09:e0:74:d0:e4:19:bc:c5:28:7c:66:
         71:2c:14:fe:9d:32:be:64:81:5b:a6:6e:6e:ef:a2:c7:f7:b7:
         1f:54:7a:09:27:95:32:d2:17:5a:ca:03:05:43:05:c5:19:6b:
         0a:35:48:7a:83:42:5f:37:44:31:a2:02:2e:e3:3e:53:56:b9:
         0d:ab:77:63:b4:01:d5:95:52:71:3d:78:55:c2:ba:a8:f8:fe:
         61:5d:9c:07:88:ee:50:cd:86:ce:f1:ae:4b:06:82:e1:93:ce:
         f6:fc:fe:86:aa:40:b8:7f:57:bd:0e:dd:a8:6d:c5:d9:98:2f:
         29:a5:13:74:67:d2:13:de:ba:f5:4c:1c:d7:3c:84:0c:52:94:
         a6:08:73:b1:19:2c:df:d2:87:30:0e:28:60:a2:3a:5d:e7:5c:
         e9:1e:0e:8a:e4:0b:13:ec:c0:c9:ae:a2:fd:bb:9d:b7:2a:e3:
         ad:4d:8a:42:61:7c:e5:e3:43:a4:4c:c7:51:d5:13:62:ff:06:
         12:64:c2:3c:06:90:b9:e2:24:5f:b7:79:24:57:24:11:d3:49:
         aa:a9:67:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:53:00 2026 by rpki-client