Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/3138372e3131302e3133332e302f32342d3234203d3e203533313237.roa
File:                     3138372e3131302e3133332e302f32342d3234203d3e203533313237.roa (raw, json)
Hash identifier:          EUe4hmo/YiPtvJyrWxSSIa5LTMqjVluBbnJ2A1AR2Tc=
Subject key identifier:   62:AE:7B:13:13:E6:8B:58:1E:6D:7A:E3:11:FB:17:0B:FB:D3:93:85
Certificate issuer:       /CN=5FC32B7879FE9033D1C514ACD7EA5EF1929FC407
Certificate serial:       704AC5F53D7BD20641EC1FCBC7BA8B1A8CA4A209
Authority key identifier: 5F:C3:2B:78:79:FE:90:33:D1:C5:14:AC:D7:EA:5E:F1:92:9F:C4:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC32B7879FE9033D1C514ACD7EA5EF1929FC407.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/3138372e3131302e3133332e302f32342d3234203d3e203533313237.roa
Signing time:             Thu 16 Jul 2026 14:50:08 +0000
ROA not before:           Thu 16 Jul 2026 14:45:08 +0000
ROA not after:            Thu 15 Jul 2027 14:50:08 +0000
asID:                     53127
IP address blocks:        187.110.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/5FC32B7879FE9033D1C514ACD7EA5EF1929FC407.crl
                          rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/5FC32B7879FE9033D1C514ACD7EA5EF1929FC407.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC32B7879FE9033D1C514ACD7EA5EF1929FC407.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 06:56:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:4a:c5:f5:3d:7b:d2:06:41:ec:1f:cb:c7:ba:8b:1a:8c:a4:a2:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FC32B7879FE9033D1C514ACD7EA5EF1929FC407
        Validity
            Not Before: Jul 16 14:45:08 2026 GMT
            Not After : Jul 15 14:50:08 2027 GMT
        Subject: CN=62AE7B1313E68B581E6D7AE311FB170BFBD39385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:26:1b:7a:78:9a:1b:de:d5:5b:11:77:5d:26:
                    ac:57:4d:37:ce:98:3b:1c:86:b3:1b:7e:5a:98:9b:
                    1d:4b:46:f6:ea:c3:8d:0d:db:14:ab:0d:3c:71:2b:
                    24:10:b9:dc:b2:0e:fc:f5:39:69:e2:0e:ec:2d:7c:
                    31:01:a2:0d:d0:b2:5a:8a:37:1f:02:7e:32:fb:15:
                    be:7a:de:e1:ae:78:2a:d6:62:2d:46:87:29:52:4f:
                    fb:1b:71:29:ef:8e:c7:15:bc:6c:ae:15:c8:dc:91:
                    44:b1:7e:2a:d4:b9:0c:ba:91:ab:3b:73:91:7c:f0:
                    e5:e7:88:98:85:e9:f3:da:ca:f4:16:1a:fb:28:ef:
                    7b:1d:88:37:e6:8e:91:17:65:7b:e7:5a:5d:8c:86:
                    b9:1e:ba:3a:24:3f:06:c5:14:8b:22:aa:cb:5c:73:
                    d6:41:81:56:2e:48:30:24:de:18:57:53:a0:9d:4f:
                    4b:06:49:b4:78:59:c2:33:85:ba:21:5f:f8:6f:9a:
                    dd:8e:56:e5:a6:25:2d:53:a8:8e:bf:96:eb:c3:68:
                    2a:64:10:7a:15:35:a5:c2:4e:49:e3:f5:21:5e:c9:
                    d1:73:a3:6d:fd:86:8c:5c:0f:1f:83:08:31:f7:3e:
                    2b:88:fa:2a:e4:79:3a:b6:b0:69:97:6e:b9:15:e0:
                    63:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:AE:7B:13:13:E6:8B:58:1E:6D:7A:E3:11:FB:17:0B:FB:D3:93:85
            X509v3 Authority Key Identifier:
                keyid:5F:C3:2B:78:79:FE:90:33:D1:C5:14:AC:D7:EA:5E:F1:92:9F:C4:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/5FC32B7879FE9033D1C514ACD7EA5EF1929FC407.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC32B7879FE9033D1C514ACD7EA5EF1929FC407.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/3138372e3131302e3133332e302f32342d3234203d3e203533313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:80:b3:08:d4:72:ee:ee:13:2c:63:5b:b8:f8:1b:d6:fc:74:
         35:dd:ab:c4:f8:d3:c2:bd:1d:a6:2d:9f:bf:c7:bd:08:3f:9d:
         2f:ff:4f:6b:09:b8:0f:d0:c2:41:72:d3:eb:9f:40:91:06:57:
         83:0f:74:a3:5d:d8:43:02:5d:d0:2e:71:f6:dd:88:a6:7b:de:
         a6:8a:ef:8a:aa:41:07:69:14:5f:d6:99:27:88:a0:f7:0b:bb:
         fa:d8:1b:f7:5c:14:d8:e1:85:55:98:6a:3b:86:61:2f:eb:09:
         07:aa:47:9a:4c:5b:dc:cb:b2:87:ad:7c:24:3c:33:48:04:5c:
         46:2c:25:33:87:09:2b:2f:12:19:3f:c0:dc:d8:d9:88:55:b6:
         e4:d0:02:08:f6:eb:52:87:b8:a4:4a:b8:4e:d3:f9:ce:11:fe:
         08:92:0e:d5:50:b3:5f:3d:79:bc:c6:ce:af:e4:a3:b4:55:e9:
         85:e9:cf:2b:4c:ac:55:32:ba:58:9a:ad:b8:03:3b:89:01:46:
         93:31:3f:a6:05:16:f4:d3:29:e3:da:ce:18:a9:79:1c:30:97:
         cc:f0:8f:98:67:f1:c9:35:20:12:e3:86:20:d2:d6:88:f3:1f:
         ae:e6:3e:ac:57:79:3c:37:6f:42:67:95:b7:f7:3c:53:18:67:
         c8:e3:1b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:37:54 2026 by rpki-client