Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/3138372e3131302e3134322e302f32332d3233203d3e203533313237.roa
File:                     3138372e3131302e3134322e302f32332d3233203d3e203533313237.roa (raw, json)
Hash identifier:          xEc3RwXdDIqGVse/ex8e5yfUrHShGFBpA5NsIZyVdTw=
Subject key identifier:   A4:FF:43:AC:FB:C5:7E:94:80:2A:68:E5:73:EC:37:2E:AF:C2:A1:2E
Certificate issuer:       /CN=5FC32B7879FE9033D1C514ACD7EA5EF1929FC407
Certificate serial:       2E437FDAB40E393531E002BD59460C3FBE42E47F
Authority key identifier: 5F:C3:2B:78:79:FE:90:33:D1:C5:14:AC:D7:EA:5E:F1:92:9F:C4:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC32B7879FE9033D1C514ACD7EA5EF1929FC407.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/3138372e3131302e3134322e302f32332d3233203d3e203533313237.roa
Signing time:             Thu 16 Jul 2026 14:50:08 +0000
ROA not before:           Thu 16 Jul 2026 14:45:08 +0000
ROA not after:            Thu 15 Jul 2027 14:50:08 +0000
asID:                     53127
IP address blocks:        187.110.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/5FC32B7879FE9033D1C514ACD7EA5EF1929FC407.crl
                          rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/5FC32B7879FE9033D1C514ACD7EA5EF1929FC407.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC32B7879FE9033D1C514ACD7EA5EF1929FC407.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 06:56:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:43:7f:da:b4:0e:39:35:31:e0:02:bd:59:46:0c:3f:be:42:e4:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FC32B7879FE9033D1C514ACD7EA5EF1929FC407
        Validity
            Not Before: Jul 16 14:45:08 2026 GMT
            Not After : Jul 15 14:50:08 2027 GMT
        Subject: CN=A4FF43ACFBC57E94802A68E573EC372EAFC2A12E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e8:85:30:7d:1e:0e:ec:c8:eb:c5:1b:24:f9:
                    fc:50:f8:73:87:e6:41:cf:33:fa:7d:54:7f:4d:e8:
                    0d:9c:55:1c:c4:d9:33:f4:46:42:7a:92:b4:0d:b8:
                    35:dd:bf:37:a5:3b:f4:1e:f4:b8:6b:c3:23:85:5d:
                    fc:96:b1:14:12:70:e7:63:8e:50:60:cf:53:58:75:
                    ac:17:d3:7a:71:13:d5:6f:14:27:ac:3c:d3:21:5d:
                    da:68:42:6e:2a:95:d4:a6:35:b7:13:da:7b:3e:b8:
                    53:dd:68:e3:52:37:e8:7a:e0:03:59:4c:eb:44:67:
                    0a:6d:8a:bd:dc:f2:bd:1f:9c:17:68:40:dc:11:ca:
                    37:49:a4:ae:97:4d:97:2b:32:9a:8a:fa:6f:5e:6f:
                    1c:20:e7:a3:b0:81:26:e2:0f:40:ee:2a:b0:8e:e0:
                    c3:55:a3:9d:86:4f:7e:22:8b:cb:3b:ab:a8:7f:af:
                    9e:94:64:45:f4:57:9b:53:c8:b6:92:02:53:7c:d8:
                    99:ee:1b:9c:bf:07:6b:fb:c7:14:3f:6e:ff:59:74:
                    99:82:d7:88:01:43:93:04:4a:68:8a:cc:99:c8:6f:
                    17:b2:fa:d1:9c:93:20:f1:4a:79:17:93:7a:4a:40:
                    3e:6c:42:db:63:ad:15:f1:a8:f1:c3:00:7d:1f:f2:
                    21:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:FF:43:AC:FB:C5:7E:94:80:2A:68:E5:73:EC:37:2E:AF:C2:A1:2E
            X509v3 Authority Key Identifier:
                keyid:5F:C3:2B:78:79:FE:90:33:D1:C5:14:AC:D7:EA:5E:F1:92:9F:C4:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/5FC32B7879FE9033D1C514ACD7EA5EF1929FC407.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC32B7879FE9033D1C514ACD7EA5EF1929FC407.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5mDf8fNLTCjQ7aGv3rQSd2XeHNgCDKTMHHYpzN2SQ2WF/0/3138372e3131302e3134322e302f32332d3233203d3e203533313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:4e:7f:aa:eb:0a:cc:cd:d3:41:77:ae:3a:79:31:2d:e5:9e:
         64:6f:11:ac:42:bd:96:2d:76:39:d8:f5:e4:28:ec:bf:3a:c3:
         c1:32:6d:e2:a5:72:4e:57:45:f1:4e:4e:8f:95:39:cf:b5:17:
         d8:ad:a4:63:e6:51:5f:81:4d:78:36:50:1d:d1:8a:a4:b3:f9:
         fa:f4:8e:2d:cd:f4:52:15:a8:ee:da:fc:da:05:bc:e2:be:3e:
         96:ec:93:d3:8a:ce:ce:d6:22:76:8f:93:3a:80:3b:1e:01:b5:
         ac:f7:1f:ef:fc:cb:a2:cc:27:ee:c7:93:63:bc:17:fa:50:83:
         df:5f:7f:2d:5f:2a:aa:71:ce:95:fc:4a:43:76:f0:f2:37:32:
         63:d5:7a:c8:71:00:18:f4:7f:43:4f:76:c3:60:fb:15:6a:20:
         64:72:88:01:c8:a7:fa:f2:dc:77:95:b2:06:d7:85:7d:94:a6:
         38:1d:d5:32:a5:7f:d5:16:09:ac:07:a3:35:b6:ae:0d:cd:62:
         97:09:4a:16:bc:90:3b:d4:2f:27:bd:90:cb:1e:77:b8:55:8e:
         63:71:6b:37:35:f5:4e:4b:d7:10:3b:e1:3a:57:5f:ca:e1:9c:
         b8:b2:40:33:d3:97:8a:39:52:b8:72:59:80:11:9b:25:31:db:
         59:37:87:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:36:29 2026 by rpki-client