Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3139322e302e302f32302d3234203d3e20323632373235.roa
File:                     3138362e3139322e302e302f32302d3234203d3e20323632373235.roa (raw, json)
Hash identifier:          0c+rG62HXv+DKqSUFtKi7QMEgufDEDXJn4cP+eSg3ZE=
Subject key identifier:   58:11:12:42:C7:E4:D7:2B:AC:06:A7:24:CA:0E:87:67:71:3E:3E:A3
Certificate issuer:       /CN=33D99D98BFD993CB7DE4284CD0B834BDAA1FB768
Certificate serial:       4046FC4040F5735822E64960CCF43C04EA6267DB
Authority key identifier: 33:D9:9D:98:BF:D9:93:CB:7D:E4:28:4C:D0:B8:34:BD:AA:1F:B7:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3139322e302e302f32302d3234203d3e20323632373235.roa
Signing time:             Tue 15 Sep 2026 16:46:48 +0000
ROA not before:           Tue 15 Sep 2026 16:41:48 +0000
ROA not after:            Tue 14 Sep 2027 16:46:48 +0000
asID:                     262725
IP address blocks:        186.192.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl
                          rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 23:32:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:46:fc:40:40:f5:73:58:22:e6:49:60:cc:f4:3c:04:ea:62:67:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33D99D98BFD993CB7DE4284CD0B834BDAA1FB768
        Validity
            Not Before: Sep 15 16:41:48 2026 GMT
            Not After : Sep 14 16:46:48 2027 GMT
        Subject: CN=58111242C7E4D72BAC06A724CA0E8767713E3EA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4e:4a:37:fd:8f:ec:9a:50:79:7a:e9:18:71:
                    20:82:a3:32:16:0e:da:4f:08:d2:db:21:68:72:ca:
                    b6:42:4c:82:a0:13:bd:22:23:7a:8f:82:ee:58:fd:
                    04:e1:11:ba:46:ed:0f:70:2a:0b:82:ce:03:7e:90:
                    64:6e:8e:93:dc:15:08:35:0b:10:c0:07:39:db:29:
                    1e:36:61:12:a8:53:06:ab:df:fc:6f:0e:35:cd:e3:
                    50:57:a0:eb:ee:14:44:f8:a7:4e:82:b5:a7:43:9a:
                    fc:6b:8a:58:50:74:39:92:b7:e8:0e:5d:2f:9e:ec:
                    34:4f:81:96:30:c5:10:a6:d5:09:11:17:d5:99:6d:
                    a6:49:13:bb:a4:ec:a0:e1:ff:72:86:36:de:0e:76:
                    25:46:cd:a3:ca:e8:8b:a1:83:b9:24:39:c6:74:f5:
                    74:a9:30:ce:22:1d:76:45:5c:1e:c2:9d:4f:94:ee:
                    f1:f6:f4:06:11:53:ff:f8:34:bf:2f:74:12:ce:08:
                    d3:48:ce:1f:06:ca:fc:eb:30:86:8d:9d:d1:2c:1c:
                    62:4b:be:13:5e:92:21:c2:36:52:97:db:e9:e5:e9:
                    5d:b1:ae:28:d5:04:13:8b:a4:0c:77:ae:8a:b8:12:
                    a3:5f:b0:53:38:f5:39:c6:67:18:9c:61:c1:0d:c9:
                    1c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:11:12:42:C7:E4:D7:2B:AC:06:A7:24:CA:0E:87:67:71:3E:3E:A3
            X509v3 Authority Key Identifier:
                keyid:33:D9:9D:98:BF:D9:93:CB:7D:E4:28:4C:D0:B8:34:BD:AA:1F:B7:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3139322e302e302f32302d3234203d3e20323632373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.192.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         06:a1:e2:9e:d8:83:72:44:a2:f6:9f:90:13:f3:77:da:9d:19:
         4a:9c:d6:c1:b1:f9:74:d3:55:0a:08:a0:27:c6:b4:49:da:ea:
         f6:a6:fb:13:10:66:fc:e3:5e:2f:77:a9:4f:73:53:9f:9a:52:
         ec:c7:cd:8a:bb:06:20:39:9c:75:01:26:66:04:f4:6b:b8:f0:
         09:0b:12:86:3a:ed:60:b6:59:a5:eb:44:2a:89:81:31:6c:84:
         0d:67:80:1a:32:3a:6b:48:c7:9d:eb:ea:49:2a:03:aa:a1:cd:
         8f:9e:dd:43:36:96:c5:87:11:c8:96:7b:98:82:c5:db:38:ba:
         7c:b8:b9:40:9d:d6:cb:ec:5d:b0:1c:43:7f:15:71:3b:07:52:
         7e:81:00:e0:17:13:8f:b8:86:ac:9c:d3:d7:8b:fa:b3:19:2b:
         4a:59:9c:c5:bd:a2:b2:c2:a3:28:1a:96:37:9d:95:d8:b8:3d:
         06:a1:4b:e8:e8:79:fa:df:ca:5c:e3:e8:66:d4:10:4b:f8:9d:
         12:bf:65:dc:f0:98:84:4b:61:d2:1c:65:71:e4:dc:ef:cc:87:
         dc:bf:9d:83:7d:49:f9:3d:75:93:6a:54:83:21:f9:3a:12:00:
         16:0c:44:0b:9d:df:a7:a2:4b:ac:6c:ae:7e:22:c2:bb:a1:ad:
         be:36:92:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:16:37 2026 by rpki-client