Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/3138372e3131302e3133322e302f32342d3234203d3e203533313237.roa
File:                     3138372e3131302e3133322e302f32342d3234203d3e203533313237.roa (raw, json)
Hash identifier:          4PfbM55kMSNgyvzF1EpLhl6aZDxnybmWA6ZKzvSw81o=
Subject key identifier:   1B:11:D5:60:CD:E8:27:FB:4A:E1:A6:3B:1F:C6:52:68:A0:13:3B:94
Certificate issuer:       /CN=5FC32B7879FE9033D1C514ACD7EA5EF1929FC407
Certificate serial:       3C7A6411E0092C45236D7EE01C0BC35D6DADCA45
Authority key identifier: 5F:C3:2B:78:79:FE:90:33:D1:C5:14:AC:D7:EA:5E:F1:92:9F:C4:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC32B7879FE9033D1C514ACD7EA5EF1929FC407.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/3138372e3131302e3133322e302f32342d3234203d3e203533313237.roa
Signing time:             Thu 16 Jul 2026 14:50:10 +0000
ROA not before:           Thu 16 Jul 2026 14:45:10 +0000
ROA not after:            Thu 15 Jul 2027 14:50:10 +0000
asID:                     53127
IP address blocks:        187.110.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/5FC32B7879FE9033D1C514ACD7EA5EF1929FC407.crl
                          rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/5FC32B7879FE9033D1C514ACD7EA5EF1929FC407.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC32B7879FE9033D1C514ACD7EA5EF1929FC407.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 06:56:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:7a:64:11:e0:09:2c:45:23:6d:7e:e0:1c:0b:c3:5d:6d:ad:ca:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FC32B7879FE9033D1C514ACD7EA5EF1929FC407
        Validity
            Not Before: Jul 16 14:45:10 2026 GMT
            Not After : Jul 15 14:50:10 2027 GMT
        Subject: CN=1B11D560CDE827FB4AE1A63B1FC65268A0133B94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:89:2a:6f:fa:4e:82:9e:19:32:2c:22:a9:9e:
                    9b:95:58:6b:52:68:10:06:85:70:8b:c4:b2:a3:3e:
                    9d:1d:10:48:96:95:f5:1b:a4:23:7f:a5:2b:fd:26:
                    b2:09:61:63:6d:ba:54:24:d8:d7:c4:4f:07:ca:de:
                    da:ee:e0:01:32:e0:5c:4a:4a:be:03:44:78:3c:e3:
                    67:5d:71:f8:fd:93:5b:a9:5c:ee:8b:42:72:bb:d0:
                    03:bd:42:16:92:16:45:d6:e4:51:78:14:0d:60:3c:
                    7c:84:7d:45:c6:5a:ab:44:3f:64:db:a4:80:43:6d:
                    21:5a:da:60:d2:ab:f5:2c:95:8b:d4:95:91:c9:f6:
                    bb:21:b3:10:28:88:31:43:ee:06:f2:e7:f1:15:94:
                    7e:4b:a4:54:ca:52:f0:af:80:8c:a9:87:9c:39:f9:
                    e5:d7:0c:5e:6d:30:40:da:a6:02:31:67:bd:22:4a:
                    e5:90:ba:80:00:8c:1b:2a:09:71:d2:de:b7:ec:d6:
                    c5:2d:76:b5:8c:8a:2c:5e:55:1c:b0:f3:7b:32:8f:
                    11:69:34:fa:b7:00:57:af:5f:b2:12:62:3a:ad:73:
                    d0:fc:08:fc:cb:5b:a2:6e:b7:85:49:18:d5:2c:09:
                    0e:31:a9:19:ca:5a:54:be:5a:fd:0f:f4:36:4e:91:
                    00:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:11:D5:60:CD:E8:27:FB:4A:E1:A6:3B:1F:C6:52:68:A0:13:3B:94
            X509v3 Authority Key Identifier:
                keyid:5F:C3:2B:78:79:FE:90:33:D1:C5:14:AC:D7:EA:5E:F1:92:9F:C4:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/5FC32B7879FE9033D1C514ACD7EA5EF1929FC407.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC32B7879FE9033D1C514ACD7EA5EF1929FC407.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/3138372e3131302e3133322e302f32342d3234203d3e203533313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:0e:d7:e7:6a:0d:bc:6c:34:a7:81:58:e0:1c:8c:ab:73:8b:
         29:fc:c7:d4:4a:2e:c0:69:03:6a:34:89:0c:b3:16:12:84:29:
         c9:a7:4b:cd:80:c6:b6:80:d5:84:24:3a:26:11:1a:0d:ab:77:
         61:8f:cd:12:53:33:a2:a4:56:31:e5:f3:5f:36:1f:ac:ff:d6:
         c1:c1:a0:0f:fe:88:45:50:5d:db:83:1d:01:2c:ff:db:0c:8f:
         d5:f0:f7:3e:5e:fd:f9:3f:1f:4c:bf:34:bd:68:c8:cf:13:0a:
         f6:ee:38:98:a9:82:d4:0a:68:ab:e3:eb:bf:f9:af:0a:7a:b2:
         b7:a4:82:96:7e:39:34:59:44:9d:93:c6:c4:67:7f:06:3c:20:
         31:37:cc:57:0e:1b:4e:cc:79:b0:2a:ab:d8:52:fc:95:6c:f5:
         f6:26:dd:ca:df:ba:44:b9:6d:cf:6c:64:43:6f:4a:e5:99:1f:
         34:3e:27:7a:fb:11:c9:a4:e5:d4:cb:9a:78:de:26:89:51:a3:
         04:fd:b7:1c:44:10:dd:0a:06:e3:ee:57:22:76:2d:2d:79:c9:
         2b:37:ef:6e:a6:54:bf:1e:30:23:94:7c:b7:72:27:ed:ea:9a:
         53:1d:55:55:61:65:10:38:4c:93:d5:4f:4f:8e:64:f5:e8:57:
         1d:62:c7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:36:13 2026 by rpki-client