Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138372e39342e3136302e302f32302d3332203d3e203238363439.roa
File:                     3138372e39342e3136302e302f32302d3332203d3e203238363439.roa (raw, json)
Hash identifier:          Qcr9+0zlGbK9+pH1YJ/IWnvACafLC7w82vxS/cXQvLY=
Subject key identifier:   96:1F:00:BF:6D:E3:B6:E7:2D:4B:F3:6C:36:D1:B6:9F:D0:AC:64:47
Certificate issuer:       /CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
Certificate serial:       52A2B841FA5E6D8273F1C9B5E8C55C8EF2B83359
Authority key identifier: 01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138372e39342e3136302e302f32302d3332203d3e203238363439.roa
Signing time:             Fri 17 Jul 2026 21:01:11 +0000
ROA not before:           Fri 17 Jul 2026 20:56:11 +0000
ROA not after:            Fri 16 Jul 2027 21:01:11 +0000
asID:                     28649
IP address blocks:        187.94.160.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 00:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:a2:b8:41:fa:5e:6d:82:73:f1:c9:b5:e8:c5:5c:8e:f2:b8:33:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
        Validity
            Not Before: Jul 17 20:56:11 2026 GMT
            Not After : Jul 16 21:01:11 2027 GMT
        Subject: CN=961F00BF6DE3B6E72D4BF36C36D1B69FD0AC6447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:47:ff:ec:d8:04:7d:c4:79:38:c0:ce:8a:72:
                    15:9e:06:96:ed:9b:b2:33:2a:7b:e6:82:5d:32:40:
                    99:cb:a6:2d:23:a0:b5:89:04:ce:fa:f9:cd:e2:2b:
                    d3:0f:41:be:45:78:6b:e4:9f:bb:f0:69:09:6d:45:
                    3d:25:af:8b:17:52:2e:cf:b4:f3:ab:2b:45:2c:42:
                    70:99:84:95:17:7c:98:cd:5b:96:5c:0b:d2:d3:c1:
                    a4:01:4f:90:7c:38:6c:a7:9e:6e:eb:0e:9e:af:bf:
                    b1:85:72:01:62:4a:99:78:32:d0:2e:7e:3c:93:0c:
                    e2:c6:6e:27:80:72:2a:fd:55:84:f6:42:c2:b6:cb:
                    5e:d5:01:e3:df:f4:af:45:e0:f3:5c:dc:11:dc:d0:
                    85:c2:5b:d7:dc:06:0f:7b:e0:1c:69:a1:d3:80:78:
                    8f:15:e3:ff:61:53:4f:1d:6b:6c:98:c0:7b:72:a3:
                    48:ab:1d:b6:f1:ef:42:0c:4d:5c:87:7c:22:39:87:
                    c2:ab:ad:8b:40:6f:23:d8:75:0d:cf:14:94:62:f9:
                    9a:76:46:95:d6:23:ff:95:33:9b:85:dd:f8:ab:90:
                    13:61:08:f6:27:8d:5c:7d:1f:96:39:ef:13:7a:b6:
                    e8:53:70:bb:7b:57:75:fb:a8:97:1e:16:2f:83:1f:
                    44:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:1F:00:BF:6D:E3:B6:E7:2D:4B:F3:6C:36:D1:B6:9F:D0:AC:64:47
            X509v3 Authority Key Identifier:
                keyid:01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138372e39342e3136302e302f32302d3332203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bb:cd:31:d8:f5:25:fe:58:fa:41:c1:f5:10:0b:6a:06:cf:9f:
         92:6c:bf:ca:57:1a:3a:c4:31:51:44:ec:cc:df:de:f1:02:90:
         49:bc:c0:04:9e:cd:c2:16:f8:93:d4:4b:43:75:6d:2e:45:34:
         ed:50:96:f9:5a:7a:66:49:b8:5d:38:1f:c4:bf:d0:21:c3:6c:
         d5:5b:65:a6:ce:f9:09:f1:be:cb:ba:87:87:bc:1b:98:1c:04:
         6c:58:e9:02:89:23:ff:f3:ce:ba:50:0a:ea:73:f7:59:17:f6:
         31:95:a6:43:43:0b:6e:94:47:ca:4d:83:04:a4:9d:db:28:44:
         c3:48:f7:3e:c2:88:c0:be:9d:b7:04:9e:cd:18:a6:d4:38:c3:
         13:8b:96:9d:d1:cb:f7:88:4b:64:5a:a5:56:95:ec:d3:46:ed:
         31:ba:31:f9:ff:d1:8f:3b:01:41:0b:c2:bc:35:24:d4:41:9e:
         3e:f1:5d:71:f0:d7:8d:d5:6a:72:f6:c5:9a:2e:41:03:a5:53:
         ba:83:b4:67:a8:26:ff:12:38:33:08:e2:53:e2:64:1a:4e:b6:
         31:ff:5c:27:39:5d:1f:8a:da:2a:fb:be:eb:ad:6b:47:21:7d:
         cb:b5:83:8c:88:1d:b9:a2:0c:7c:c6:e4:c8:a5:6f:4c:f0:e3:
         40:8e:50:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:04:18 2026 by rpki-client