Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/3138372e3131302e3133362e302f32322d3232203d3e203533313237.roa
File:                     3138372e3131302e3133362e302f32322d3232203d3e203533313237.roa (raw, json)
Hash identifier:          cNs6Tva1cTcFrmSMCv1MvTTIreAOBRPCqFZ7i1KW+HY=
Subject key identifier:   CB:05:6D:00:8E:48:B0:3D:F6:DE:B2:11:31:18:18:2C:1E:3E:E6:28
Certificate issuer:       /CN=5FC32B7879FE9033D1C514ACD7EA5EF1929FC407
Certificate serial:       62F713E87D98B0DC7C2A95A80024723660E4CC18
Authority key identifier: 5F:C3:2B:78:79:FE:90:33:D1:C5:14:AC:D7:EA:5E:F1:92:9F:C4:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC32B7879FE9033D1C514ACD7EA5EF1929FC407.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/3138372e3131302e3133362e302f32322d3232203d3e203533313237.roa
Signing time:             Thu 16 Jul 2026 14:50:09 +0000
ROA not before:           Thu 16 Jul 2026 14:45:09 +0000
ROA not after:            Thu 15 Jul 2027 14:50:09 +0000
asID:                     53127
IP address blocks:        187.110.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/5FC32B7879FE9033D1C514ACD7EA5EF1929FC407.crl
                          rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/5FC32B7879FE9033D1C514ACD7EA5EF1929FC407.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC32B7879FE9033D1C514ACD7EA5EF1929FC407.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 06:56:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:f7:13:e8:7d:98:b0:dc:7c:2a:95:a8:00:24:72:36:60:e4:cc:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FC32B7879FE9033D1C514ACD7EA5EF1929FC407
        Validity
            Not Before: Jul 16 14:45:09 2026 GMT
            Not After : Jul 15 14:50:09 2027 GMT
        Subject: CN=CB056D008E48B03DF6DEB2113118182C1E3EE628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:5d:3e:f1:a3:04:ef:14:e2:c9:05:8d:7c:c3:
                    d3:65:55:63:85:9e:d5:7c:02:74:e1:d3:d5:16:07:
                    34:b4:ff:f8:31:7d:72:86:a9:a5:b2:3e:ab:6a:38:
                    2b:8e:bf:58:0b:04:ea:71:79:3c:6b:64:6f:8b:0b:
                    cb:0c:18:ae:10:88:a5:d0:1e:2a:2c:fe:fc:b0:3d:
                    93:b8:a7:df:22:8a:46:9a:f6:22:8e:4f:a2:b0:86:
                    33:a0:ac:28:4f:70:bf:a9:af:f2:ab:7f:d3:73:50:
                    35:02:ce:24:58:31:e4:9a:1c:8f:9c:46:8d:7f:d4:
                    23:46:5d:17:2e:be:8d:83:79:77:e1:8e:82:72:6a:
                    43:30:2b:ac:8d:f9:2e:c0:aa:d8:4c:e8:bd:62:8b:
                    48:ff:97:62:69:0a:7e:2c:15:41:2d:6f:8a:d7:07:
                    d8:57:9f:47:68:8f:51:91:46:6c:8f:d5:7e:34:ac:
                    89:df:21:6b:57:18:c5:f9:0c:3c:6c:70:78:63:0c:
                    c9:7c:97:9b:d3:98:2f:35:aa:3e:20:60:52:f6:41:
                    d6:07:44:8c:4e:2a:ff:de:4c:39:20:49:e2:68:c2:
                    77:67:0f:88:ba:75:2f:40:27:7a:01:4b:c1:a3:b0:
                    aa:fb:1e:5a:46:fb:ca:e5:fc:11:be:19:d0:56:4f:
                    e4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:05:6D:00:8E:48:B0:3D:F6:DE:B2:11:31:18:18:2C:1E:3E:E6:28
            X509v3 Authority Key Identifier:
                keyid:5F:C3:2B:78:79:FE:90:33:D1:C5:14:AC:D7:EA:5E:F1:92:9F:C4:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/5FC32B7879FE9033D1C514ACD7EA5EF1929FC407.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC32B7879FE9033D1C514ACD7EA5EF1929FC407.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/3138372e3131302e3133362e302f32322d3232203d3e203533313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:ea:7b:90:f1:a9:94:c3:f0:cb:99:ae:03:47:6c:ce:18:00:
         ca:ed:fd:96:36:a1:4b:05:45:a2:87:5b:d3:de:fb:b5:06:38:
         32:9d:58:13:d9:4e:fa:70:b6:2b:6b:72:a7:51:a7:30:22:8b:
         eb:be:df:8e:12:25:2b:a3:93:50:e8:ed:e9:7a:56:ae:61:d7:
         7f:c8:53:65:15:58:0e:e4:68:65:09:bd:08:55:09:93:65:01:
         84:23:c4:8f:0f:71:5e:8d:31:f9:7f:17:c4:3f:4a:8f:6d:00:
         b1:52:33:9d:a1:f1:8b:00:c0:2b:2f:4d:a1:7e:f0:36:f0:51:
         79:94:da:ff:64:3e:25:2f:56:1a:53:fe:84:5d:dd:cb:d5:d5:
         86:ef:8d:86:be:b5:70:8c:d0:8c:ce:c8:04:6d:84:53:be:7e:
         56:2f:a5:c8:61:f0:6a:ae:22:cb:de:05:0a:88:61:0a:04:e5:
         7f:55:70:4e:5a:e8:b3:47:fc:39:3b:16:97:7e:61:81:26:5f:
         f6:ca:93:1b:cf:5d:80:7a:43:85:05:3f:82:16:b2:89:83:16:
         9f:2c:19:aa:8c:74:d9:e3:bc:51:f6:ef:39:df:72:74:b7:88:
         86:c7:b1:0d:d2:4a:aa:5c:19:6b:7b:cf:25:20:33:e3:81:46:
         70:95:21:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:36:21 2026 by rpki-client