Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3138362e3235312e3230302e302f32322d3234203d3e203238323031.roa
File:                     3138362e3235312e3230302e302f32322d3234203d3e203238323031.roa (raw, json)
Hash identifier:          AZu77LNAEhs4/rwtcBqNTX1zu1fSc+0AXRlF3EdSd/Q=
Subject key identifier:   22:FB:AC:3C:03:FC:32:8C:66:9E:A4:11:13:21:91:22:D1:82:5D:36
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       474A0130D79E8B6C1604B82128447C5715972BA6
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3138362e3235312e3230302e302f32322d3234203d3e203238323031.roa
Signing time:             Sat 04 Jul 2026 13:43:59 +0000
ROA not before:           Sat 04 Jul 2026 13:38:59 +0000
ROA not after:            Sat 03 Jul 2027 13:43:59 +0000
asID:                     28201
IP address blocks:        186.251.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 22:40:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:4a:01:30:d7:9e:8b:6c:16:04:b8:21:28:44:7c:57:15:97:2b:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Jul  4 13:38:59 2026 GMT
            Not After : Jul  3 13:43:59 2027 GMT
        Subject: CN=22FBAC3C03FC328C669EA41113219122D1825D36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:04:ac:dd:1d:3a:31:a9:d2:7d:9f:3a:7c:a2:
                    7d:a8:32:78:60:7a:67:65:d4:6a:72:4b:fb:3f:d3:
                    74:af:cc:91:9e:9e:0f:64:e0:b4:8e:22:97:59:11:
                    e7:93:9a:33:7e:30:8f:b4:60:ac:0e:bd:11:f3:87:
                    83:5b:0b:69:38:57:86:df:e2:dc:ab:3f:24:95:7d:
                    a1:99:73:56:32:8b:05:75:c5:81:37:2e:52:50:6f:
                    53:19:c4:ea:3f:00:fb:0f:fc:83:6f:48:f6:44:c7:
                    c1:29:fc:44:45:db:7f:f7:c8:f0:68:b0:0e:12:a2:
                    4b:d6:b0:d0:5d:01:e9:5f:12:2b:99:ce:d1:8d:7c:
                    3f:ab:da:11:24:39:48:ad:c3:b1:a5:70:f5:7b:b4:
                    6e:69:f5:d7:a8:74:e0:0c:fe:3f:48:dd:8d:10:14:
                    9d:ae:e2:a9:85:b8:30:f4:2d:82:39:92:44:66:60:
                    ec:ef:fa:41:f1:9c:70:50:45:c9:61:36:a1:e3:af:
                    a4:a1:49:20:34:41:ba:bd:1d:c3:4b:5c:84:61:f9:
                    14:2f:44:66:28:b2:15:51:4b:80:1c:ef:5c:dd:1d:
                    a4:f0:08:46:a1:61:74:4e:be:f2:d2:e0:07:a4:7d:
                    6f:5c:f0:57:39:ed:18:29:35:44:71:2f:97:50:6b:
                    58:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:FB:AC:3C:03:FC:32:8C:66:9E:A4:11:13:21:91:22:D1:82:5D:36
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3138362e3235312e3230302e302f32322d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:e7:4e:8f:ab:8f:7a:b5:27:ed:2d:3d:b9:3b:dc:ed:ea:65:
         c9:69:63:63:5d:55:e7:aa:8d:ab:db:04:d8:46:23:31:c3:62:
         59:52:21:c0:f3:d6:8a:04:f6:c8:3f:16:e5:f2:96:a9:5e:fe:
         34:60:b5:2f:c0:00:cd:ca:55:cc:86:4d:ae:6f:ed:91:b2:9e:
         51:c0:fa:26:ea:88:6a:f1:db:d8:ff:eb:70:49:7c:b7:0d:01:
         38:72:ab:19:c4:36:a8:75:29:80:9e:e0:fc:5e:39:69:a6:54:
         64:2d:2f:c4:68:58:86:43:e0:00:f2:81:41:1e:d7:2f:13:b0:
         d7:d6:5c:ea:27:be:0f:ef:6f:9d:af:28:8f:aa:1f:96:c5:c8:
         51:72:38:97:3e:4d:14:be:42:ef:7b:41:62:47:9b:c3:ee:b8:
         a9:f9:e9:22:04:41:55:cb:f1:09:fb:89:e2:e3:8e:4b:5a:76:
         a4:00:d4:88:6c:a1:06:a7:c3:cd:63:08:2a:34:1c:0f:1d:d6:
         8e:da:bd:e0:4b:48:86:75:b0:79:c7:a8:8e:37:69:a6:f2:12:
         1b:88:df:6f:c5:a0:70:06:35:e5:c9:29:e7:17:d1:79:f4:50:
         76:94:74:41:a0:93:d1:c1:23:40:f0:4a:4d:3d:e0:02:ea:70:
         8f:bd:a6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:48:33 2026 by rpki-client