Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/3138362e3233352e3137362e302f32312d3231203d3e203238313339.roa
File:                     3138362e3233352e3137362e302f32312d3231203d3e203238313339.roa (raw, json)
Hash identifier:          yFrt397lv3XEhCkHPJHg2oLRKKSaa6ogSqSaSLGwa4E=
Subject key identifier:   FB:BB:7E:6C:0A:DD:2E:FF:57:59:61:72:81:0C:7E:21:EB:68:66:21
Certificate issuer:       /CN=8DCB7831617AC9209CC97DB36614C6B05759A03B
Certificate serial:       045C601A19EB0D4E6B41D71CD93A3EC39A11AD0A
Authority key identifier: 8D:CB:78:31:61:7A:C9:20:9C:C9:7D:B3:66:14:C6:B0:57:59:A0:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DCB7831617AC9209CC97DB36614C6B05759A03B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/3138362e3233352e3137362e302f32312d3231203d3e203238313339.roa
Signing time:             Mon 02 Mar 2026 19:15:57 +0000
ROA not before:           Mon 02 Mar 2026 19:10:57 +0000
ROA not after:            Mon 01 Mar 2027 19:15:57 +0000
asID:                     28139
IP address blocks:        186.235.176.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/8DCB7831617AC9209CC97DB36614C6B05759A03B.crl
                          rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/8DCB7831617AC9209CC97DB36614C6B05759A03B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DCB7831617AC9209CC97DB36614C6B05759A03B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 12:45:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:5c:60:1a:19:eb:0d:4e:6b:41:d7:1c:d9:3a:3e:c3:9a:11:ad:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DCB7831617AC9209CC97DB36614C6B05759A03B
        Validity
            Not Before: Mar  2 19:10:57 2026 GMT
            Not After : Mar  1 19:15:57 2027 GMT
        Subject: CN=FBBB7E6C0ADD2EFF57596172810C7E21EB686621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:54:a5:6d:ce:60:fd:7e:7f:a5:f1:e3:d4:e3:
                    b0:6c:d6:74:6b:ca:2a:68:c8:1b:84:21:a9:ce:b3:
                    b7:3e:9a:e8:56:f9:7d:55:f4:22:5d:b6:51:bc:df:
                    27:ce:d6:a9:81:d6:a7:3f:fe:8d:40:33:be:2d:ab:
                    70:c2:08:13:96:c4:b4:08:e7:e0:09:2a:97:ed:90:
                    fb:37:d0:1c:a6:b2:cd:30:6c:f5:01:11:68:25:a6:
                    ad:2f:c7:08:46:6f:d2:fc:c1:31:5a:4e:c6:29:d9:
                    f4:13:3b:e4:ee:38:64:79:cb:a0:cf:50:13:30:18:
                    f8:ff:d7:37:03:d1:18:fb:ab:64:bf:56:e4:52:7d:
                    c2:81:f5:fa:e5:c7:c9:ca:2b:68:39:45:8a:ca:4b:
                    5b:c6:d7:25:f7:55:f1:f5:75:60:5a:22:5f:81:2d:
                    40:aa:c3:79:45:cb:54:1c:ba:ec:b3:e6:90:94:72:
                    75:0d:23:15:9d:6c:27:d4:a5:a9:0e:ab:17:ee:11:
                    2a:9c:5d:1d:02:37:d7:9d:13:50:71:dc:86:a5:4e:
                    90:02:a5:68:5d:04:67:6d:58:6b:cb:66:cd:20:af:
                    4a:1a:29:6a:ed:f5:6f:80:ff:02:92:7c:d2:cc:98:
                    29:99:8e:e5:00:8f:ca:59:39:39:75:ea:92:1b:28:
                    0c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:BB:7E:6C:0A:DD:2E:FF:57:59:61:72:81:0C:7E:21:EB:68:66:21
            X509v3 Authority Key Identifier:
                keyid:8D:CB:78:31:61:7A:C9:20:9C:C9:7D:B3:66:14:C6:B0:57:59:A0:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/8DCB7831617AC9209CC97DB36614C6B05759A03B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DCB7831617AC9209CC97DB36614C6B05759A03B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/3138362e3233352e3137362e302f32312d3231203d3e203238313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         12:0c:cf:93:d6:fc:95:27:05:f9:bf:22:3e:29:c0:63:cf:e7:
         47:cd:22:9d:2c:ba:e4:29:c3:3c:44:e4:8a:60:bf:12:a1:56:
         3b:b3:fa:50:e0:22:5b:6f:50:8e:92:1a:b0:d7:f3:41:e6:5d:
         7b:b1:eb:4f:04:cf:f8:e4:b0:ce:c6:eb:26:12:bc:b8:22:96:
         15:aa:06:e8:15:58:86:00:9d:05:0a:45:f3:4a:36:97:bd:ff:
         6f:a5:1e:ce:57:63:75:b1:09:ba:e7:fb:63:07:1e:e4:b4:98:
         fd:00:a0:02:2a:3c:20:31:4d:e1:0e:36:00:66:c5:f7:4e:e4:
         6f:90:4f:a5:5f:ad:39:1a:1e:f9:b6:38:b8:e6:6d:56:d1:20:
         5e:f4:a1:d3:a8:5c:95:72:f8:3c:30:96:cb:5c:37:64:9b:68:
         9a:0c:22:6e:62:74:8e:c8:0d:75:48:5a:e4:87:e7:96:b2:95:
         3e:6b:5e:cc:11:85:9c:5c:dc:84:42:13:80:98:5d:a7:74:77:
         ad:c4:05:70:8d:08:a9:39:52:90:81:94:bb:24:a6:22:f3:25:
         94:e2:2e:a2:6c:ea:c7:63:3b:5e:74:f6:46:d9:14:b0:82:ee:
         3a:10:1f:e6:fa:90:a3:21:3b:35:bc:3c:4c:ba:87:d3:af:9a:
         fb:d6:06:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:42:19 2026 by rpki-client