Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3138372e31372e3234302e302f32302d3234203d3e203238323031.roa
File:                     3138372e31372e3234302e302f32302d3234203d3e203238323031.roa (raw, json)
Hash identifier:          ORabTaCsK7LqT4JuAeCIzWMouXTVm630MfexKbnT1hk=
Subject key identifier:   C3:B3:0A:F9:32:E3:51:71:69:A7:6C:38:19:6D:94:2B:F0:1C:C1:E5
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       14CD9CA7338CB265DC46EB2F1125740EBC58099F
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3138372e31372e3234302e302f32302d3234203d3e203238323031.roa
Signing time:             Sat 04 Jul 2026 13:43:53 +0000
ROA not before:           Sat 04 Jul 2026 13:38:53 +0000
ROA not after:            Sat 03 Jul 2027 13:43:53 +0000
asID:                     28201
IP address blocks:        187.17.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 22:40:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:cd:9c:a7:33:8c:b2:65:dc:46:eb:2f:11:25:74:0e:bc:58:09:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Jul  4 13:38:53 2026 GMT
            Not After : Jul  3 13:43:53 2027 GMT
        Subject: CN=C3B30AF932E3517169A76C38196D942BF01CC1E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cd:12:c5:be:e1:85:cc:f5:43:9c:a2:37:74:
                    37:52:ef:93:bd:d3:3b:d3:6d:ff:cb:e5:e9:0d:e1:
                    89:f3:e0:5c:af:72:0a:41:c2:a5:2b:4f:db:e0:a6:
                    7c:f0:9d:8f:0f:cc:21:77:56:51:9c:66:2e:31:c5:
                    e1:60:d5:0e:35:c4:30:f1:31:9c:34:9d:d8:e1:55:
                    28:e9:1a:40:66:a1:62:1d:22:e4:a6:db:57:0a:93:
                    6c:e7:b8:1e:4e:0f:73:06:29:f9:1b:7a:65:c8:95:
                    ff:06:93:60:91:85:36:d6:44:3c:71:e1:60:a2:51:
                    2f:db:39:12:d9:00:60:26:82:cf:db:93:d3:63:96:
                    ca:13:13:ef:b3:02:9a:c0:8e:29:70:58:ee:f1:7c:
                    14:72:94:84:34:eb:6b:01:f3:b9:fa:13:c4:69:ef:
                    c0:af:cf:76:a8:58:ee:62:fa:d4:47:7f:84:12:24:
                    f3:f8:0c:cb:63:92:ff:2e:ec:46:5a:32:6a:bd:ba:
                    92:8b:f8:57:d9:7a:99:0e:84:79:55:00:90:8e:bd:
                    5d:9a:7e:d9:5d:e7:1b:fb:7e:e8:df:bc:ab:f5:f1:
                    42:8d:42:86:3e:31:ed:a2:fa:79:55:bd:84:44:e7:
                    74:07:38:89:dd:ba:8c:50:6e:53:bc:f1:54:cd:41:
                    fa:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B3:0A:F9:32:E3:51:71:69:A7:6C:38:19:6D:94:2B:F0:1C:C1:E5
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3138372e31372e3234302e302f32302d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.17.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         29:d0:a8:6b:c2:e9:fe:d1:ad:bc:cf:92:40:64:00:ac:08:08:
         59:a1:81:22:b5:d0:ea:44:a8:c0:92:d8:b4:54:6c:49:e6:77:
         f9:0c:1d:c3:42:c7:17:e2:7d:65:d0:9c:79:67:99:bc:4e:e3:
         9f:65:6c:ba:34:07:5c:23:c8:ca:c4:25:43:ab:56:08:6e:da:
         36:5d:d3:ec:46:f4:72:47:c4:9b:fb:5a:97:4f:87:56:ea:d5:
         96:32:f9:7b:8e:a5:1c:93:71:28:43:4e:46:fb:a2:36:46:9d:
         d3:2b:84:b0:fb:cb:25:ae:f1:1b:d2:7b:17:7b:d4:90:8c:a9:
         5d:9a:26:bb:05:2b:74:53:b3:e9:40:64:a6:48:d5:66:c8:60:
         dc:fc:1d:a0:10:79:ce:0f:9d:87:41:30:2e:21:a3:3b:47:e4:
         88:d9:eb:99:28:3a:a0:6b:c1:3a:df:61:8e:ff:bb:6b:c7:59:
         13:2a:6d:13:30:8a:79:e0:12:3f:37:78:07:50:54:a1:45:c4:
         67:20:06:7d:d4:e2:05:70:77:c3:50:7b:27:8f:04:b1:fe:07:
         43:28:01:86:74:e6:86:19:2f:22:15:a3:01:eb:eb:5b:e1:e6:
         14:a0:ea:45:a3:90:ba:3c:7e:3b:36:a8:74:00:d4:02:27:e9:
         9d:57:c0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:47:11 2026 by rpki-client