Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/3138372e3131302e3133362e302f32332d3233203d3e203533313237.roa
File:                     3138372e3131302e3133362e302f32332d3233203d3e203533313237.roa (raw, json)
Hash identifier:          1L45Nap7lLrjdoUu/s9VR3TobA+S8gVGb6TcKa/d8WI=
Subject key identifier:   3A:D7:FA:98:73:14:6D:C6:01:CC:5D:E4:78:52:9F:8A:5D:D1:3F:C4
Certificate issuer:       /CN=5FC32B7879FE9033D1C514ACD7EA5EF1929FC407
Certificate serial:       0A2CE1D278998A4472D51CBE6CBEE8452E1E056F
Authority key identifier: 5F:C3:2B:78:79:FE:90:33:D1:C5:14:AC:D7:EA:5E:F1:92:9F:C4:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC32B7879FE9033D1C514ACD7EA5EF1929FC407.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/3138372e3131302e3133362e302f32332d3233203d3e203533313237.roa
Signing time:             Thu 16 Jul 2026 14:50:09 +0000
ROA not before:           Thu 16 Jul 2026 14:45:09 +0000
ROA not after:            Thu 15 Jul 2027 14:50:09 +0000
asID:                     53127
IP address blocks:        187.110.136.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/5FC32B7879FE9033D1C514ACD7EA5EF1929FC407.crl
                          rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/5FC32B7879FE9033D1C514ACD7EA5EF1929FC407.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC32B7879FE9033D1C514ACD7EA5EF1929FC407.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 06:56:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:2c:e1:d2:78:99:8a:44:72:d5:1c:be:6c:be:e8:45:2e:1e:05:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FC32B7879FE9033D1C514ACD7EA5EF1929FC407
        Validity
            Not Before: Jul 16 14:45:09 2026 GMT
            Not After : Jul 15 14:50:09 2027 GMT
        Subject: CN=3AD7FA9873146DC601CC5DE478529F8A5DD13FC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:01:ae:61:ce:7f:74:09:47:a3:f7:97:1f:d0:
                    da:4a:0a:db:cc:92:7f:9a:17:90:f9:98:6b:14:67:
                    32:ee:19:a3:c3:17:87:f2:d5:c8:6f:20:3d:b2:d5:
                    d6:19:24:ad:7c:33:5f:cd:bd:9a:1d:b6:1a:e2:90:
                    8c:52:3a:1f:2c:b5:88:df:eb:45:0e:2d:37:75:dd:
                    89:d0:fd:05:7a:d7:93:36:52:0a:3b:d2:1e:ba:da:
                    d7:f6:cc:5e:01:0d:a4:50:08:53:c4:0b:e6:44:ea:
                    63:ec:90:f3:28:7e:50:0e:c4:e2:74:0e:e0:89:27:
                    ef:ff:b3:2f:e5:d8:69:7c:5a:91:3d:45:47:84:6d:
                    ff:f2:cb:cf:d2:b4:3a:73:f1:b8:cd:bc:64:32:f5:
                    76:ff:a7:60:10:22:f3:2f:2c:14:36:9f:0c:90:a7:
                    33:19:2c:29:f2:85:31:a9:5b:94:40:b5:9e:39:43:
                    4e:bc:19:07:6a:9e:e9:5c:6e:55:20:c7:9f:e8:d6:
                    1c:4f:73:98:29:87:18:13:77:dc:e6:a4:85:d5:cd:
                    f3:81:9f:83:cc:6b:47:49:89:dc:40:5e:fc:5c:72:
                    c7:1e:e0:21:92:81:6d:43:1c:bd:a9:41:13:fb:07:
                    d6:17:72:fd:49:17:2a:63:5b:32:a3:e4:c1:ee:42:
                    ab:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:D7:FA:98:73:14:6D:C6:01:CC:5D:E4:78:52:9F:8A:5D:D1:3F:C4
            X509v3 Authority Key Identifier:
                keyid:5F:C3:2B:78:79:FE:90:33:D1:C5:14:AC:D7:EA:5E:F1:92:9F:C4:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/5FC32B7879FE9033D1C514ACD7EA5EF1929FC407.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC32B7879FE9033D1C514ACD7EA5EF1929FC407.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/3138372e3131302e3133362e302f32332d3233203d3e203533313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:8c:85:36:74:ea:f1:3d:2a:fc:ad:22:bd:8e:17:de:ef:d2:
         1e:ea:50:12:b6:d9:db:21:73:68:a6:c4:1a:2b:2c:99:0e:a3:
         44:d2:0d:db:8c:bc:7d:21:f3:ba:11:d5:4d:fc:1b:61:fe:2e:
         3d:c2:e6:ba:7b:31:f2:b7:da:ce:33:1c:b1:71:57:ac:5c:6e:
         42:8c:c0:8f:79:25:37:7b:01:e3:4b:c5:07:ed:f0:7e:fa:c8:
         d7:16:9d:36:f1:9d:3d:44:da:2e:13:ca:1b:b9:5d:a7:ea:82:
         da:ec:3d:d6:d2:7e:fc:0f:1d:18:c7:88:b1:a4:c6:41:b4:a8:
         98:63:cb:d2:d1:3b:fa:3f:25:1c:4a:86:98:6e:03:0d:a3:6f:
         ea:fa:c7:f7:69:c1:65:0b:ec:09:4a:07:18:33:bd:93:53:bc:
         77:49:a2:92:82:0d:9e:0d:da:fd:a5:e8:4a:4b:1a:e1:27:5f:
         7e:1a:75:6f:24:ce:a6:ed:18:0c:49:9f:0e:ab:a2:86:4b:02:
         76:5f:b7:19:55:49:97:8b:56:64:5e:45:6d:20:4b:20:64:88:
         29:cf:f3:f6:b2:27:da:5e:b0:ef:f6:46:ee:82:c3:f6:c0:83:
         51:57:68:c1:ca:3f:2d:5e:99:54:50:7c:ad:4e:57:51:8c:af:
         8b:e0:27:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:36:29 2026 by rpki-client