Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8CdNyVQQ6YVbknmENwsDusXZPQcRApdnYKiRh3uCnGCy/0/3138362e3139352e3136362e302f32342d3234203d3e20323734343631.roa
File:                     3138362e3139352e3136362e302f32342d3234203d3e20323734343631.roa (raw, json)
Hash identifier:          Wa+N5p7/ULdaL4+vJp/NlgU54S4iO+oXBgpbIBsOzog=
Subject key identifier:   C3:0B:16:72:9E:DA:ED:0E:EB:2A:28:CB:FB:0B:C0:6B:4B:1E:75:3E
Certificate issuer:       /CN=67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53
Certificate serial:       6DFBA515394091F7DCB105B45837B8F1A1E0A528
Authority key identifier: 67:B2:A3:33:36:25:25:C9:EC:D5:AE:47:B1:BD:12:E1:E2:FC:BC:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8CdNyVQQ6YVbknmENwsDusXZPQcRApdnYKiRh3uCnGCy/0/3138362e3139352e3136362e302f32342d3234203d3e20323734343631.roa
Signing time:             Tue 07 Jul 2026 14:14:22 +0000
ROA not before:           Tue 07 Jul 2026 14:09:22 +0000
ROA not after:            Tue 06 Jul 2027 14:14:22 +0000
asID:                     274461
IP address blocks:        186.195.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8CdNyVQQ6YVbknmENwsDusXZPQcRApdnYKiRh3uCnGCy/0/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.crl
                          rsync://rpki-repo.registro.br/repo/8CdNyVQQ6YVbknmENwsDusXZPQcRApdnYKiRh3uCnGCy/0/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 06:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:fb:a5:15:39:40:91:f7:dc:b1:05:b4:58:37:b8:f1:a1:e0:a5:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53
        Validity
            Not Before: Jul  7 14:09:22 2026 GMT
            Not After : Jul  6 14:14:22 2027 GMT
        Subject: CN=C30B16729EDAED0EEB2A28CBFB0BC06B4B1E753E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c5:c7:9a:8d:7c:f9:38:40:be:e2:32:55:bd:
                    95:85:92:97:7f:5c:40:12:81:20:16:31:8f:16:61:
                    6f:6f:41:7e:08:1e:34:37:4b:c3:42:36:cf:6c:6f:
                    6c:1b:82:5f:78:45:41:47:f2:59:c3:fe:65:70:3e:
                    61:aa:40:87:96:2e:a1:2b:10:e7:b8:18:a6:aa:6b:
                    b7:18:0b:5a:d9:3f:6a:4f:f1:64:51:89:e2:1a:27:
                    80:8a:0c:a9:b2:01:3c:7b:49:a6:fe:45:a0:15:b3:
                    f3:8f:49:41:76:31:c3:6c:f0:c3:cf:85:84:13:1b:
                    16:d2:c1:47:9c:3b:b2:42:49:15:90:7b:c1:dd:36:
                    e7:bd:a6:02:19:1d:dc:f2:0e:2e:32:75:a8:d4:97:
                    85:49:58:f9:73:2c:c6:14:cd:56:23:c5:26:12:5d:
                    89:13:f1:19:9c:40:8e:92:40:78:ea:c0:6f:a6:7b:
                    f4:78:0d:05:fd:3c:b6:9f:a9:4a:97:2a:34:91:bc:
                    d1:74:20:ba:38:50:f3:fb:ae:75:36:87:6c:eb:d1:
                    33:d0:5b:ac:0f:43:ac:c1:4e:41:fa:9d:30:a7:01:
                    f9:a2:28:99:f0:6e:ee:c4:fa:d6:b5:7c:cf:1a:e9:
                    98:7e:1d:7a:8b:f6:fe:ee:1c:9c:8e:c1:0e:2b:f7:
                    96:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:0B:16:72:9E:DA:ED:0E:EB:2A:28:CB:FB:0B:C0:6B:4B:1E:75:3E
            X509v3 Authority Key Identifier:
                keyid:67:B2:A3:33:36:25:25:C9:EC:D5:AE:47:B1:BD:12:E1:E2:FC:BC:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8CdNyVQQ6YVbknmENwsDusXZPQcRApdnYKiRh3uCnGCy/0/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8CdNyVQQ6YVbknmENwsDusXZPQcRApdnYKiRh3uCnGCy/0/3138362e3139352e3136362e302f32342d3234203d3e20323734343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:28:75:b9:e1:ef:89:cf:9a:a6:c1:00:d4:fb:48:b9:a8:41:
         44:e7:82:0d:09:8b:9c:74:85:d2:a5:db:ec:52:dc:1e:ae:d2:
         13:94:66:ac:5c:1b:2b:4f:58:47:7a:4e:aa:7f:07:3a:12:c9:
         0f:59:d4:cc:45:bf:f7:a6:f5:8d:3d:02:89:b6:89:a9:02:d3:
         dc:73:60:a8:f7:c9:9b:3a:89:78:1c:37:89:95:3c:7f:8d:f9:
         18:f8:01:0a:b1:6b:34:9d:ac:9c:61:17:5b:c2:1d:5c:09:eb:
         3d:56:84:e3:88:cb:39:eb:ef:8d:c6:ce:39:3b:07:a6:74:a2:
         96:09:d6:c4:17:1d:9c:e2:57:b6:8a:ae:cd:27:32:f2:84:7e:
         71:a1:18:9e:c0:b4:39:f4:2f:5e:88:d4:b6:d6:ac:53:9d:5c:
         dd:28:c9:f0:1d:44:8c:c0:64:6a:2f:05:d6:38:2e:f8:35:c3:
         08:82:f1:b9:c6:dc:a9:d2:c7:31:ce:07:06:95:4e:1d:d3:fa:
         31:93:cc:d2:4e:5e:27:d6:f7:43:a4:e5:31:66:6b:20:3f:bc:
         50:2d:c8:f5:82:66:13:c6:d9:eb:90:fc:80:86:c9:9e:ca:1e:
         6f:f4:53:56:6f:fb:6e:0c:75:2a:d2:28:62:49:6c:63:76:51:
         ea:fc:58:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:36:04 2026 by rpki-client