Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/3138362e3235302e3136382e302f32322d3332203d3e203533323138.roa
File:                     3138362e3235302e3136382e302f32322d3332203d3e203533323138.roa (raw, json)
Hash identifier:          W2VojqXeRjNqg1ykoK5IEvP5VmTxgcMDzD2JEUyvv/s=
Subject key identifier:   EC:77:2F:E9:4E:D7:C3:62:A4:16:12:CC:09:13:62:44:53:5D:67:2B
Certificate issuer:       /CN=2942F22000F3A7315703CF3B13100D76386FCAD1
Certificate serial:       471DD2A823B7FDFB50A414A9BD59D4B894EE915D
Authority key identifier: 29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/3138362e3235302e3136382e302f32322d3332203d3e203533323138.roa
Signing time:             Mon 20 Jul 2026 20:18:13 +0000
ROA not before:           Mon 20 Jul 2026 20:13:13 +0000
ROA not after:            Mon 19 Jul 2027 20:18:13 +0000
asID:                     53218
IP address blocks:        186.250.168.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl
                          rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:1d:d2:a8:23:b7:fd:fb:50:a4:14:a9:bd:59:d4:b8:94:ee:91:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2942F22000F3A7315703CF3B13100D76386FCAD1
        Validity
            Not Before: Jul 20 20:13:13 2026 GMT
            Not After : Jul 19 20:18:13 2027 GMT
        Subject: CN=EC772FE94ED7C362A41612CC09136244535D672B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ce:0f:05:96:6c:73:53:75:fa:ce:f6:58:d0:
                    86:d9:aa:4c:dd:e5:f4:0e:2d:5b:c4:db:2b:6d:53:
                    86:98:a3:05:e8:47:81:b7:03:48:55:4d:87:88:71:
                    0d:1f:11:6e:13:5d:55:62:ac:c2:8e:09:75:a1:b4:
                    e8:9b:37:d6:14:b9:de:aa:8f:3d:91:0a:0a:23:4e:
                    6a:78:b5:38:e3:ee:ca:0e:20:3f:28:fd:4a:0b:80:
                    0d:48:d3:e1:6e:1e:e8:52:a8:4b:d4:6b:a7:0a:fc:
                    7c:a1:c1:3d:b5:74:94:8d:cf:c5:a2:8e:f2:de:03:
                    6a:15:7c:e8:38:2a:21:3b:90:a1:55:05:3d:34:37:
                    75:d4:6f:e6:0b:38:a7:c3:f1:70:74:80:54:1c:28:
                    40:87:09:65:e7:81:53:cd:6c:d7:dd:8a:73:a9:75:
                    0c:e0:fe:3a:5f:35:a4:ea:6b:ce:d2:c2:2b:02:e9:
                    f5:8d:1a:b8:b6:d3:d1:d1:9b:09:a2:21:5c:ba:e4:
                    fa:e1:55:50:33:94:83:15:6a:4e:ed:fb:e6:f5:b5:
                    3b:f4:81:96:c8:4d:81:48:58:de:8a:04:c9:e4:77:
                    98:ab:cc:ec:3d:c3:45:59:fd:e5:ae:c2:3c:85:ba:
                    45:20:db:e0:47:73:8e:72:5b:6b:9a:3d:2e:e1:b3:
                    48:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:77:2F:E9:4E:D7:C3:62:A4:16:12:CC:09:13:62:44:53:5D:67:2B
            X509v3 Authority Key Identifier:
                keyid:29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/3138362e3235302e3136382e302f32322d3332203d3e203533323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:2a:ab:ac:ab:9d:8d:09:20:c6:59:20:b4:19:8d:53:ab:3c:
         76:2e:a7:7f:06:bc:a1:ef:0a:26:47:1e:37:7a:3e:10:9c:28:
         04:64:04:13:2a:64:b0:7f:68:46:fe:0c:20:3d:e7:c5:9d:c4:
         69:e8:df:f1:f6:c3:87:cd:d3:c4:dd:62:47:e5:b2:b3:69:c7:
         14:95:50:be:7c:49:70:a7:46:ae:c4:e3:3d:81:c4:40:13:ea:
         fe:ec:62:19:7a:29:ce:df:76:8e:d2:da:30:13:40:35:00:40:
         a0:c8:72:3a:8f:a4:35:05:ea:1d:11:6f:d8:b0:98:b5:ea:b5:
         50:0f:72:81:96:6f:4b:7a:e7:f3:11:61:d7:5c:1d:cc:d4:72:
         63:ab:3d:21:c1:c1:04:b3:22:6f:d8:78:16:0d:3f:24:bf:fa:
         8e:a3:e1:9b:7e:80:55:d6:61:42:85:e8:a0:51:f0:0e:90:21:
         7f:c5:10:4a:4e:19:83:7d:75:e4:13:b4:60:42:04:c6:db:8a:
         d3:fe:29:aa:ce:c3:ba:a0:14:20:f0:1e:6d:4b:e0:ba:86:9a:
         9f:8d:a0:37:43:9c:34:b8:25:cb:da:de:d1:7b:05:e4:49:da:
         49:d6:23:14:cb:da:1e:7c:a1:9d:7b:a6:a3:35:c4:05:cc:86:
         b2:6a:90:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:52:24 2026 by rpki-client