Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3138362e302f32332d3233203d3e203238313931.roa
File:                     3138362e3139332e3138362e302f32332d3233203d3e203238313931.roa (raw, json)
Hash identifier:          hxotyBeubDZbw7ItX5v0Fz4i0u92lI9CowyEOTtW1dM=
Subject key identifier:   31:FD:A2:8B:32:6E:2A:1E:32:A5:EC:6D:23:83:5E:E9:21:17:05:6C
Certificate issuer:       /CN=CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F
Certificate serial:       46C25EE7C63E1BA1B43ACD4C89DBE7C13A8DA724
Authority key identifier: CF:62:B3:63:3D:C2:21:92:EE:1B:8A:D3:D2:E6:CC:9C:12:18:FA:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3138362e302f32332d3233203d3e203238313931.roa
Signing time:             Mon 15 Jun 2026 11:22:40 +0000
ROA not before:           Mon 15 Jun 2026 11:17:40 +0000
ROA not after:            Mon 14 Jun 2027 11:22:40 +0000
asID:                     28191
IP address blocks:        186.193.186.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.crl
                          rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 09:03:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c2:5e:e7:c6:3e:1b:a1:b4:3a:cd:4c:89:db:e7:c1:3a:8d:a7:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F
        Validity
            Not Before: Jun 15 11:17:40 2026 GMT
            Not After : Jun 14 11:22:40 2027 GMT
        Subject: CN=31FDA28B326E2A1E32A5EC6D23835EE92117056C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c5:6e:eb:c9:90:b9:23:75:ff:0b:72:0a:0a:
                    f2:30:3b:11:11:5d:d9:65:c1:0c:b2:d9:0b:9b:ae:
                    72:78:d0:19:78:a1:2f:0b:6f:61:41:bc:16:04:7c:
                    af:e4:c0:8d:55:9c:d6:06:ce:e2:2d:3b:7c:72:f9:
                    51:79:0d:dc:a5:a2:5a:b8:41:57:09:d2:9a:79:04:
                    ee:b6:fb:11:58:b1:61:bb:c5:5c:64:03:d3:48:51:
                    b9:32:d2:1a:64:c1:7f:a3:ea:ff:ec:b1:48:75:5c:
                    42:5e:79:f9:c6:19:90:f6:05:52:67:27:48:a7:d3:
                    13:4d:9f:f1:7d:cf:25:3a:54:e5:aa:26:57:c3:0e:
                    3b:8a:ac:72:f8:d2:e2:6c:69:c6:42:39:1f:05:fb:
                    9c:a8:fb:8f:55:e5:2f:35:5a:3b:80:50:6a:08:25:
                    97:dd:86:27:6e:e3:0d:fc:89:2d:e0:5c:3b:db:41:
                    f4:4f:49:e9:37:7b:2d:8d:d7:73:cc:5f:41:f7:cc:
                    45:cc:aa:18:52:07:af:8b:0c:62:9c:5f:8e:37:0a:
                    f8:70:55:92:f4:5e:87:c3:be:69:41:47:92:d6:2b:
                    8a:40:fd:a3:cd:57:4c:f5:07:e7:95:d1:ac:73:6b:
                    30:4b:69:2c:45:db:ea:70:13:b5:b7:5b:00:2c:d9:
                    d5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:FD:A2:8B:32:6E:2A:1E:32:A5:EC:6D:23:83:5E:E9:21:17:05:6C
            X509v3 Authority Key Identifier:
                keyid:CF:62:B3:63:3D:C2:21:92:EE:1B:8A:D3:D2:E6:CC:9C:12:18:FA:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3138362e302f32332d3233203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:4a:e7:a9:14:69:86:54:85:40:5c:27:09:8e:f7:f0:4a:a3:
         ea:68:f1:0c:94:b4:52:aa:0f:90:a6:5c:b3:80:6b:04:00:a0:
         67:27:b8:62:bf:11:77:34:2c:e4:fe:37:8b:11:0f:d6:e3:9f:
         e3:f6:76:36:e5:a0:a2:79:57:bc:00:f1:fb:b2:ac:82:ec:95:
         5b:52:7d:70:19:aa:7d:cb:38:49:3d:92:38:18:03:0e:32:15:
         65:8b:f9:4f:49:10:11:2b:0a:0d:59:e3:77:5d:cf:bf:69:79:
         2d:6d:ae:55:0d:23:51:5f:77:75:89:5a:65:6e:5b:1b:b2:da:
         1a:80:f0:0a:a7:27:43:f1:17:7c:cf:d3:60:16:e3:52:60:06:
         4d:bc:53:96:57:c8:62:67:8d:d8:61:8c:00:70:80:7f:7a:94:
         d6:82:42:eb:55:ae:81:65:f0:9f:09:e3:11:c3:94:02:d5:81:
         d6:a4:de:ce:6b:87:4d:4e:fc:b1:89:ef:06:22:59:74:cb:78:
         da:f7:a1:5b:a1:fa:d1:ca:d8:fd:0d:74:4d:1f:36:ff:45:32:
         03:94:9f:49:b0:20:76:55:d1:78:9d:26:82:2c:ae:f8:b2:64:
         b4:19:90:94:7a:4f:ae:19:e0:80:8c:2a:48:c2:20:49:42:aa:
         79:e9:55:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:37:36 2026 by rpki-client