Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3138302e302f32332d3233203d3e203238313931.roa
File:                     3138362e3139332e3138302e302f32332d3233203d3e203238313931.roa (raw, json)
Hash identifier:          v/Q+7Wkr7efmSDGXvd9VpNOisjunu7p0QUm5Tj7qaFY=
Subject key identifier:   72:B1:2F:00:D3:9A:4C:2A:69:48:A0:03:97:96:7A:97:27:EF:76:25
Certificate issuer:       /CN=CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F
Certificate serial:       2B54B1C4E978DB12B806E225F86149CC021536AE
Authority key identifier: CF:62:B3:63:3D:C2:21:92:EE:1B:8A:D3:D2:E6:CC:9C:12:18:FA:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3138302e302f32332d3233203d3e203238313931.roa
Signing time:             Mon 15 Jun 2026 11:22:51 +0000
ROA not before:           Mon 15 Jun 2026 11:17:51 +0000
ROA not after:            Mon 14 Jun 2027 11:22:51 +0000
asID:                     28191
IP address blocks:        186.193.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.crl
                          rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 09:03:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:54:b1:c4:e9:78:db:12:b8:06:e2:25:f8:61:49:cc:02:15:36:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F
        Validity
            Not Before: Jun 15 11:17:51 2026 GMT
            Not After : Jun 14 11:22:51 2027 GMT
        Subject: CN=72B12F00D39A4C2A6948A00397967A9727EF7625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:4c:fe:22:3e:43:b6:0e:5c:8e:57:fb:33:a0:
                    2d:cc:56:a3:e4:91:a5:f9:5a:5e:b9:8e:c5:55:e9:
                    9d:6f:ee:18:cf:30:fb:ab:3c:d6:78:67:2e:8c:a3:
                    de:b8:6a:c1:d6:d8:a7:04:fe:f1:a0:e1:e7:8c:d0:
                    63:de:48:b1:f4:59:23:8d:94:34:67:7d:d6:e6:a1:
                    38:13:4c:3c:c9:68:79:5b:81:1f:0a:fe:70:da:99:
                    ff:37:30:d0:68:0e:36:a2:b4:3c:ad:d0:59:58:2e:
                    93:dd:ad:54:a2:64:3d:43:4e:d9:28:7d:fc:63:37:
                    b6:29:fa:56:e9:97:7e:47:0d:72:95:63:49:90:a7:
                    a4:96:03:76:51:7e:49:35:fd:0f:7f:33:c8:a1:54:
                    e2:1d:61:a5:53:f1:0d:0e:08:36:05:7c:c0:ef:2f:
                    76:3e:d1:4b:09:af:c1:c8:be:7b:ad:22:53:eb:4a:
                    89:f0:b4:4d:37:de:80:9f:e7:e4:1a:cc:a9:4a:12:
                    d7:b6:70:2b:2f:92:5a:1b:87:50:c0:2f:a2:55:fc:
                    a0:ae:eb:3a:dc:79:3b:59:e7:ab:5a:f4:16:e0:de:
                    e4:3a:fb:07:8d:9f:07:3d:ab:0b:86:f7:33:23:b9:
                    95:3e:3c:01:ba:28:f2:39:3b:57:00:64:dc:fd:92:
                    1b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B1:2F:00:D3:9A:4C:2A:69:48:A0:03:97:96:7A:97:27:EF:76:25
            X509v3 Authority Key Identifier:
                keyid:CF:62:B3:63:3D:C2:21:92:EE:1B:8A:D3:D2:E6:CC:9C:12:18:FA:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3138302e302f32332d3233203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:07:9c:fb:f6:db:27:e3:24:73:07:a8:1f:54:2f:b5:f0:8f:
         20:7c:ac:52:fa:e2:0c:76:37:ef:c7:32:94:05:55:e2:7d:a4:
         b4:99:43:fa:35:3f:37:d7:28:71:75:51:62:73:bc:88:e4:d8:
         e0:c6:96:09:58:82:41:00:3b:22:b8:b8:96:c1:e0:07:5f:d1:
         66:16:82:4e:b4:e7:0b:11:cd:44:0d:29:65:64:90:3d:32:b1:
         0d:61:91:6a:4e:8c:bc:7f:3d:9d:3b:8a:f3:d0:da:17:27:72:
         7d:51:53:c1:08:45:bc:e6:4c:5c:2d:70:52:2d:fa:fe:92:20:
         b5:1a:4d:fe:b9:82:f2:df:2d:26:6c:02:fa:94:75:47:38:e1:
         34:59:5f:b3:45:c8:d5:d1:10:3c:9b:d4:81:49:9c:58:06:bb:
         32:31:15:88:0f:be:11:38:f9:f8:86:1b:b6:5b:6b:8f:4a:48:
         73:4c:c8:4b:5d:95:5c:9a:cf:95:ad:f6:7a:56:e7:90:e0:aa:
         c8:64:53:09:1c:4d:13:2e:a6:b1:5a:c9:d6:e5:2b:95:a6:d0:
         57:10:6b:d4:51:38:b0:78:c3:22:37:b7:48:5b:26:a5:9f:a8:
         38:06:df:73:a0:68:fb:48:a8:5e:85:0d:0b:7a:ca:67:67:13:
         65:2f:84:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:37:40 2026 by rpki-client