Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138372e39352e3136302e302f32302d3332203d3e203238363439.roa
File:                     3138372e39352e3136302e302f32302d3332203d3e203238363439.roa (raw, json)
Hash identifier:          ARKMuOdwG+J0k1NZ96ud+t0PCF+mBto0y2HBqtIp1X0=
Subject key identifier:   F1:FC:47:CB:C1:C1:FD:05:4F:9B:F7:25:F3:D1:F4:03:43:D7:3D:5D
Certificate issuer:       /CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
Certificate serial:       283D803AC5537AFE52FAF0F407826259984EAB66
Authority key identifier: 01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138372e39352e3136302e302f32302d3332203d3e203238363439.roa
Signing time:             Fri 17 Jul 2026 21:01:10 +0000
ROA not before:           Fri 17 Jul 2026 20:56:10 +0000
ROA not after:            Fri 16 Jul 2027 21:01:10 +0000
asID:                     28649
IP address blocks:        187.95.160.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 00:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:3d:80:3a:c5:53:7a:fe:52:fa:f0:f4:07:82:62:59:98:4e:ab:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
        Validity
            Not Before: Jul 17 20:56:10 2026 GMT
            Not After : Jul 16 21:01:10 2027 GMT
        Subject: CN=F1FC47CBC1C1FD054F9BF725F3D1F40343D73D5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e4:1b:90:1a:84:7c:4f:49:0c:ad:d5:3d:e8:
                    89:7a:84:27:a2:04:97:1a:a0:ce:3c:9e:5b:27:d8:
                    92:fc:09:2b:a6:21:6a:d4:a8:80:f1:c9:f3:cb:b5:
                    2f:9b:d2:08:af:26:4f:e6:04:1d:30:2e:56:70:dd:
                    26:9a:bf:28:9a:ad:33:3a:b0:3f:f7:9e:b2:f7:83:
                    56:19:86:d6:ae:21:53:7f:22:31:83:c6:6b:3b:46:
                    1f:24:e4:c6:47:0b:94:e0:a1:b4:4d:7e:1f:f7:b7:
                    b4:9a:b0:84:2b:95:62:55:33:2c:53:89:e3:4d:9c:
                    bd:b5:a0:3e:b1:7c:7e:36:82:dc:0d:ba:7d:6d:be:
                    f8:7b:ad:fc:50:89:92:d2:b2:c2:93:86:f3:6c:32:
                    e0:8e:a1:db:ff:67:c5:5d:9e:bf:79:db:a1:63:e5:
                    a5:e9:68:15:39:a4:e4:9c:6c:75:fc:4a:a5:f8:6a:
                    28:5e:a3:b2:18:5e:84:f1:9b:b4:6d:bf:53:11:2f:
                    6d:41:a3:71:74:65:40:63:90:ab:5e:d0:89:75:71:
                    37:96:4c:26:d6:e4:ea:04:b5:bc:b1:8e:4a:d5:4e:
                    6e:66:3a:af:f4:6a:41:5e:7f:22:5a:17:c6:cf:8e:
                    ad:f0:a3:f4:2e:37:2d:04:43:94:ed:44:2f:93:2c:
                    49:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:FC:47:CB:C1:C1:FD:05:4F:9B:F7:25:F3:D1:F4:03:43:D7:3D:5D
            X509v3 Authority Key Identifier:
                keyid:01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138372e39352e3136302e302f32302d3332203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.95.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         01:37:da:d0:05:96:21:e4:ae:3f:4f:06:90:05:21:7e:be:af:
         82:49:2d:33:92:59:9d:f2:84:ff:0f:5d:90:32:e4:c5:46:eb:
         d9:44:d9:68:09:72:90:5e:24:cf:7b:54:cf:53:e9:4c:f4:00:
         20:b1:84:b9:72:4b:ac:e6:ba:8e:53:b0:f8:2d:59:b4:cb:4a:
         8e:6c:16:c8:10:10:1b:28:c7:67:d2:75:5b:e9:f2:ea:d3:4b:
         02:d7:7a:ba:05:54:90:b8:3e:4b:8e:fd:5d:7f:a3:03:13:50:
         f3:80:5f:93:de:45:15:5d:f7:2c:ab:1c:0c:b4:1b:57:24:72:
         f5:4b:91:2d:46:02:fe:cc:45:51:88:1c:0b:8a:2c:d1:6e:92:
         39:37:18:87:84:14:ce:5a:4f:8e:1d:69:65:da:5f:b5:45:82:
         ba:1a:84:7f:4f:e0:53:c6:df:fe:7b:be:b4:7a:d6:8a:d6:5d:
         a3:19:e0:9a:82:29:be:8b:fa:e7:cd:3e:78:ff:39:a2:a9:44:
         de:d0:18:bc:79:27:5d:9a:82:8a:c3:5b:cf:ef:2f:8d:eb:d7:
         56:44:7e:1a:e1:4f:5c:6b:7a:e6:a5:7a:75:b4:25:92:e0:32:
         8b:d7:1c:27:6a:15:ef:54:3e:0b:9c:c3:a9:bf:e8:42:39:ad:
         3b:0f:d1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:04:27 2026 by rpki-client