Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3138362e3233352e3136372e302f32342d3234203d3e20323632373834.roa
File:                     3138362e3233352e3136372e302f32342d3234203d3e20323632373834.roa (raw, json)
Hash identifier:          nOLGRUC64OSFOWtCJLPEf1eWI1WFZO4QYevedbD39qw=
Subject key identifier:   9D:B8:9F:23:A2:14:56:AF:F0:FB:67:64:4A:39:A7:0C:0B:9B:40:F6
Certificate issuer:       /CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Certificate serial:       65BA203A1B8A743DF13B3BD72605DC8E431B0BD0
Authority key identifier: 8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3138362e3233352e3136372e302f32342d3234203d3e20323632373834.roa
Signing time:             Thu 25 Jun 2026 12:00:01 +0000
ROA not before:           Thu 25 Jun 2026 11:55:01 +0000
ROA not after:            Thu 24 Jun 2027 12:00:01 +0000
asID:                     262784
IP address blocks:        186.235.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl
                          rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:11:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ba:20:3a:1b:8a:74:3d:f1:3b:3b:d7:26:05:dc:8e:43:1b:0b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
        Validity
            Not Before: Jun 25 11:55:01 2026 GMT
            Not After : Jun 24 12:00:01 2027 GMT
        Subject: CN=9DB89F23A21456AFF0FB67644A39A70C0B9B40F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:89:37:0f:a1:96:32:4b:ab:4a:1f:c1:48:51:
                    74:da:3c:c5:76:e0:34:1c:8d:7e:ce:dc:b8:2a:1f:
                    7c:36:d2:d2:a7:ff:c7:c3:cd:37:08:ae:ef:e5:87:
                    74:fd:5f:c9:dd:fb:4c:04:89:32:1d:d0:1f:36:c9:
                    5c:94:b8:a5:f7:97:45:b6:7b:3e:8a:f5:2f:e3:96:
                    ce:82:22:45:97:33:dd:78:10:c8:fd:fd:21:14:e3:
                    2e:df:2e:58:e1:e2:e0:b3:77:a9:7e:0f:d8:7a:e7:
                    a0:70:44:6a:07:4a:27:bd:a2:83:f9:cf:d9:ca:69:
                    92:cf:81:8c:15:07:20:9c:d7:26:5e:0c:2e:b0:74:
                    5a:a4:e2:7c:be:6a:cd:fa:9e:96:b5:c3:19:ff:d7:
                    9c:df:f3:06:81:2e:6d:1a:0a:39:3b:85:44:d6:c4:
                    cd:f5:44:b1:a3:bf:71:01:be:d8:8a:f8:0f:f7:99:
                    60:e2:12:28:f8:c9:b6:0a:c0:2d:33:e7:9f:c4:bf:
                    fe:62:70:58:fe:ed:56:83:61:5a:50:e8:3c:17:76:
                    3b:4b:65:dd:83:21:d4:fc:b1:c7:2c:df:67:96:b6:
                    3b:57:f4:ba:8d:32:59:86:97:39:e7:6a:d2:b6:33:
                    28:f6:50:bf:77:67:7e:8f:67:31:93:b3:83:5d:b3:
                    0e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:B8:9F:23:A2:14:56:AF:F0:FB:67:64:4A:39:A7:0C:0B:9B:40:F6
            X509v3 Authority Key Identifier:
                keyid:8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3138362e3233352e3136372e302f32342d3234203d3e20323632373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:07:a9:ac:6c:6a:3c:70:02:4c:03:b2:26:8a:26:00:30:37:
         c2:f0:93:a0:e0:3f:22:ef:f4:32:b3:86:47:00:d6:8f:ec:c2:
         32:08:f6:94:f5:fc:72:08:7e:07:43:e7:cd:17:dc:5a:4c:48:
         fa:d7:2c:5a:1b:54:09:2a:95:92:69:2c:8b:d1:06:2d:41:b9:
         ad:0d:db:95:54:84:06:3d:57:b7:61:f0:de:bf:b9:6d:2a:f8:
         82:bb:16:1e:98:d2:ca:b9:6d:ed:ed:d7:5b:1d:2e:31:0c:b2:
         bb:83:19:93:3d:3c:76:6e:44:d9:f9:c4:39:15:65:67:d3:c5:
         93:a9:6b:41:18:3f:9a:88:f1:3d:e6:0e:a2:a7:4a:e0:98:ae:
         09:5f:c4:81:bf:ff:fa:7e:5c:55:87:ba:2e:44:d9:9e:25:44:
         7c:9c:61:38:84:48:48:a1:c6:79:74:4e:88:b4:e8:ff:f3:56:
         2a:8e:8a:f3:80:b4:80:e9:0b:ae:9a:d2:13:5d:ea:1e:39:89:
         f6:46:bb:af:a7:d7:cd:3b:cc:c4:79:95:ba:26:8b:b9:e4:15:
         c9:53:3b:04:d1:31:df:9f:81:25:a2:b5:f1:06:06:a5:05:1c:
         45:cd:46:28:35:03:b1:02:f2:c9:51:89:e2:2e:14:c2:75:63:
         b1:13:74:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:21:20 2026 by rpki-client