Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9RW8WFmZc9sF7yybFLBUvroEv5N4ExUkpaeniKkubWZx/0/3138362e3232372e31362e302f32302d3234203d3e203533313832.roa
File:                     3138362e3232372e31362e302f32302d3234203d3e203533313832.roa (raw, json)
Hash identifier:          F04f82so6Wo+pfVO2UsOcaoz9H0mgXlUERDl9cANNDs=
Subject key identifier:   C5:5C:31:28:CC:28:14:6D:2E:A7:57:82:F1:A1:0F:36:8E:9F:8D:84
Certificate issuer:       /CN=13859B0BB4F0468D0BA8B5FE506B90E1ACC1F804
Certificate serial:       3ECCC69B9E31A2E0CA7DF88B85BC0A93700715BD
Authority key identifier: 13:85:9B:0B:B4:F0:46:8D:0B:A8:B5:FE:50:6B:90:E1:AC:C1:F8:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13859B0BB4F0468D0BA8B5FE506B90E1ACC1F804.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RW8WFmZc9sF7yybFLBUvroEv5N4ExUkpaeniKkubWZx/0/3138362e3232372e31362e302f32302d3234203d3e203533313832.roa
Signing time:             Wed 14 Oct 2026 18:33:42 +0000
ROA not before:           Wed 14 Oct 2026 18:28:42 +0000
ROA not after:            Wed 13 Oct 2027 18:33:42 +0000
asID:                     53182
IP address blocks:        186.227.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9RW8WFmZc9sF7yybFLBUvroEv5N4ExUkpaeniKkubWZx/0/13859B0BB4F0468D0BA8B5FE506B90E1ACC1F804.crl
                          rsync://rpki-repo.registro.br/repo/9RW8WFmZc9sF7yybFLBUvroEv5N4ExUkpaeniKkubWZx/0/13859B0BB4F0468D0BA8B5FE506B90E1ACC1F804.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13859B0BB4F0468D0BA8B5FE506B90E1ACC1F804.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 03:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:cc:c6:9b:9e:31:a2:e0:ca:7d:f8:8b:85:bc:0a:93:70:07:15:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13859B0BB4F0468D0BA8B5FE506B90E1ACC1F804
        Validity
            Not Before: Oct 14 18:28:42 2026 GMT
            Not After : Oct 13 18:33:42 2027 GMT
        Subject: CN=C55C3128CC28146D2EA75782F1A10F368E9F8D84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:97:55:a3:69:11:53:66:ea:69:30:f7:84:a9:
                    ef:b3:d5:40:a8:38:a1:12:e0:71:c1:d8:14:8f:39:
                    07:a9:53:86:d8:0d:f0:90:8f:f8:e8:c0:bb:c6:9e:
                    ca:25:d8:f5:34:0c:a2:83:7d:ec:17:5f:f1:a3:ad:
                    95:3b:e4:8d:e9:41:50:04:08:96:52:e0:e6:51:2d:
                    3b:82:f1:01:cf:7b:6b:98:a9:f2:70:78:f7:70:39:
                    c9:f9:54:2b:e0:b9:99:25:45:51:5d:4b:3d:55:b1:
                    bc:a6:c7:2c:a7:3d:73:b8:0e:69:39:87:e0:b3:2c:
                    19:f6:bc:08:1c:7c:f2:cf:62:25:60:2d:53:21:ba:
                    d1:0f:68:c8:c6:9e:35:9b:fd:ba:47:c6:64:fd:79:
                    43:df:0d:ee:56:2d:e8:97:f2:87:a3:08:2b:2c:0d:
                    20:44:e2:5c:98:99:c5:33:e6:b0:24:5e:60:a3:dc:
                    27:b8:52:f9:49:20:84:8b:9a:dd:97:f6:4b:2a:4a:
                    50:d0:88:85:6a:98:3a:b7:9a:d5:26:12:93:48:79:
                    20:eb:e8:83:d3:2b:1e:b3:44:72:1d:c4:40:ae:65:
                    0c:c3:ef:c6:f8:e6:b8:31:87:ee:9f:17:4b:f5:7b:
                    4b:ed:19:d9:6e:02:aa:4d:0f:bb:de:6a:56:85:1b:
                    e6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:5C:31:28:CC:28:14:6D:2E:A7:57:82:F1:A1:0F:36:8E:9F:8D:84
            X509v3 Authority Key Identifier:
                keyid:13:85:9B:0B:B4:F0:46:8D:0B:A8:B5:FE:50:6B:90:E1:AC:C1:F8:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RW8WFmZc9sF7yybFLBUvroEv5N4ExUkpaeniKkubWZx/0/13859B0BB4F0468D0BA8B5FE506B90E1ACC1F804.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13859B0BB4F0468D0BA8B5FE506B90E1ACC1F804.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RW8WFmZc9sF7yybFLBUvroEv5N4ExUkpaeniKkubWZx/0/3138362e3232372e31362e302f32302d3234203d3e203533313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         69:93:09:7f:9f:b1:00:c3:d2:31:52:cc:66:56:89:43:05:40:
         41:6c:bb:ab:d7:14:1e:a3:1c:c0:56:57:7a:40:c5:f0:b5:ae:
         ed:75:4f:7f:5d:6f:53:a2:6f:f6:3c:ec:a0:95:b8:c7:c8:20:
         bc:9c:0c:23:e2:4f:33:ff:fc:04:45:8d:3c:49:05:96:6e:eb:
         ac:25:5b:0f:6a:d7:e7:28:5e:a2:3b:33:67:4a:db:39:67:e6:
         0e:15:5d:b3:ae:24:2c:39:ad:4a:20:81:cf:b9:48:d6:a9:68:
         55:68:4e:6d:4e:6e:3f:3d:85:8a:09:0d:bf:2e:02:4a:a5:52:
         ea:a6:4d:a3:d4:9e:06:9d:f6:f5:25:7e:d3:da:da:04:eb:85:
         8a:a0:48:2c:74:05:35:5a:8c:d4:a5:4c:2a:66:5b:5c:3a:e1:
         9a:78:e0:b5:c6:de:af:63:08:50:98:7c:57:93:d6:c5:13:c1:
         87:54:b1:23:dd:1c:65:17:6d:35:15:64:bb:d3:ac:7a:c7:2b:
         c4:79:11:ca:ba:9c:2c:8a:5a:0d:77:ed:68:e2:9d:65:59:4e:
         a5:f5:ba:c3:15:5d:9a:33:41:7d:5f:8a:ef:f9:b4:a4:23:a7:
         5c:f7:60:76:c0:74:5e:d8:ae:d4:a1:d7:70:26:09:98:f5:e3:
         1b:cb:82:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:56:15 2026 by rpki-client