Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/3138362e3232372e37362e302f32332d3233203d3e20323733343331.roa
File:                     3138362e3232372e37362e302f32332d3233203d3e20323733343331.roa (raw, json)
Hash identifier:          aPj+Ni1OK27U6JoiSJgKLRMD4AFwNn35ER0jk3QCm44=
Subject key identifier:   0C:A9:B8:DC:33:EE:9D:A5:01:22:2F:6E:C5:B1:69:33:E1:46:62:EF
Certificate issuer:       /CN=88BBA01D8BF5C5D5AC36704286B4BCBAF29D8671
Certificate serial:       37C3C86CB34AA52D560FA240EBEB204CE5DFBC9A
Authority key identifier: 88:BB:A0:1D:8B:F5:C5:D5:AC:36:70:42:86:B4:BC:BA:F2:9D:86:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88BBA01D8BF5C5D5AC36704286B4BCBAF29D8671.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/3138362e3232372e37362e302f32332d3233203d3e20323733343331.roa
Signing time:             Mon 15 Jun 2026 11:58:23 +0000
ROA not before:           Mon 15 Jun 2026 11:53:23 +0000
ROA not after:            Mon 14 Jun 2027 11:58:23 +0000
asID:                     273431
IP address blocks:        186.227.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/88BBA01D8BF5C5D5AC36704286B4BCBAF29D8671.crl
                          rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/88BBA01D8BF5C5D5AC36704286B4BCBAF29D8671.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88BBA01D8BF5C5D5AC36704286B4BCBAF29D8671.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 04:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:c3:c8:6c:b3:4a:a5:2d:56:0f:a2:40:eb:eb:20:4c:e5:df:bc:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88BBA01D8BF5C5D5AC36704286B4BCBAF29D8671
        Validity
            Not Before: Jun 15 11:53:23 2026 GMT
            Not After : Jun 14 11:58:23 2027 GMT
        Subject: CN=0CA9B8DC33EE9DA501222F6EC5B16933E14662EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:87:cb:97:7f:75:39:80:ba:5b:6f:69:53:37:
                    38:0a:5b:b8:61:16:d3:17:b2:61:53:44:5c:aa:2b:
                    ad:5b:60:ed:dd:c3:77:81:25:11:b2:82:b6:61:e8:
                    3c:97:15:74:f7:8e:fb:d2:cf:08:60:c1:6c:9b:5f:
                    3a:29:24:56:f4:aa:31:5e:7b:df:42:93:c7:cb:c1:
                    08:1c:cb:13:80:37:c2:91:23:03:c5:a5:0a:a3:27:
                    22:f8:cd:11:03:f8:f1:30:99:04:29:54:e8:04:ed:
                    2c:b2:6e:66:13:1d:d6:05:63:ef:4f:3d:72:9f:67:
                    41:d9:e9:f9:4d:73:b8:30:c2:d6:b3:17:b8:88:5a:
                    2d:ec:40:81:9b:72:45:f3:f8:8f:8e:06:38:dd:cd:
                    d2:42:7c:f5:b7:e8:91:69:f3:cf:55:79:af:55:87:
                    c6:12:a8:71:a9:ac:4b:12:38:1d:28:e9:f8:ac:d8:
                    4b:01:cb:60:25:1b:b1:d9:f0:94:5a:7e:f9:2f:dd:
                    31:0e:47:9f:f9:d8:b3:28:89:76:8d:68:cc:ff:d8:
                    71:6a:c5:8c:4c:45:87:ff:fc:d6:bb:97:6a:6a:1d:
                    c1:b4:11:24:ca:65:30:6b:d0:9a:cb:77:dc:b9:7f:
                    30:af:d4:32:b6:6f:0a:0c:3f:10:f0:10:17:28:9e:
                    91:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A9:B8:DC:33:EE:9D:A5:01:22:2F:6E:C5:B1:69:33:E1:46:62:EF
            X509v3 Authority Key Identifier:
                keyid:88:BB:A0:1D:8B:F5:C5:D5:AC:36:70:42:86:B4:BC:BA:F2:9D:86:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/88BBA01D8BF5C5D5AC36704286B4BCBAF29D8671.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88BBA01D8BF5C5D5AC36704286B4BCBAF29D8671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/3138362e3232372e37362e302f32332d3233203d3e20323733343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:84:1d:c0:1c:80:83:d1:91:ee:aa:94:85:a8:07:84:8d:cb:
         f7:11:b9:23:e1:49:96:28:f6:60:aa:3c:a3:e4:ab:e8:6c:0a:
         f9:e2:66:92:94:89:e1:cf:0a:dc:a3:b4:61:8c:5c:4b:18:34:
         fe:f8:b9:17:f4:14:42:56:ee:dc:db:a5:0b:8c:cc:26:1b:3e:
         e4:51:37:09:2d:c7:24:79:3b:ae:01:40:23:fb:f7:1e:f6:c5:
         09:4d:e0:40:5f:b4:07:44:d0:c6:f6:f0:4d:64:36:98:34:c0:
         5a:bd:3d:4a:3a:ba:58:66:6a:23:46:50:1d:20:41:f7:2c:95:
         97:fa:25:18:dc:04:b0:e3:99:78:0d:32:ff:ca:a4:24:0d:3f:
         91:83:bb:c1:81:ff:71:dc:0b:92:1a:d6:60:28:c8:30:3d:af:
         ff:3b:59:b5:b4:a9:3f:76:91:3c:36:f1:c5:8f:c7:8b:d2:59:
         ed:a5:51:5e:7b:03:98:39:1c:4e:3e:de:b1:c0:a3:a3:81:23:
         29:25:72:10:c4:96:99:a8:45:fe:2a:6e:b5:76:06:62:3b:61:
         62:fd:d0:16:9c:f8:3c:e6:52:b0:fa:25:ae:aa:8b:c6:4a:2c:
         08:29:b6:e5:05:eb:d8:58:3d:8e:e9:70:f3:d4:c3:28:30:9d:
         d5:ec:27:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:28:04 2026 by rpki-client