Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3138372e3130392e39362e302f32302d3234203d3e203238313538.roa
File:                     3138372e3130392e39362e302f32302d3234203d3e203238313538.roa (raw, json)
Hash identifier:          q9AVfBko+aoag0ZXWAzkiqiJFpJdQIri2GKIl8cx0ek=
Subject key identifier:   87:86:30:01:8F:74:91:A8:12:D0:F2:A4:DF:4D:5B:42:F6:90:04:9A
Certificate issuer:       /CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
Certificate serial:       6BD3DFAE199AC5E7F41BC116748FA5D8429F5151
Authority key identifier: B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3138372e3130392e39362e302f32302d3234203d3e203238313538.roa
Signing time:             Thu 23 Jul 2026 16:05:39 +0000
ROA not before:           Thu 23 Jul 2026 16:00:39 +0000
ROA not after:            Thu 22 Jul 2027 16:05:39 +0000
asID:                     28158
IP address blocks:        187.109.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl
                          rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 12:12:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:d3:df:ae:19:9a:c5:e7:f4:1b:c1:16:74:8f:a5:d8:42:9f:51:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
        Validity
            Not Before: Jul 23 16:00:39 2026 GMT
            Not After : Jul 22 16:05:39 2027 GMT
        Subject: CN=878630018F7491A812D0F2A4DF4D5B42F690049A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4a:75:94:88:27:f6:77:c3:0e:4d:47:f4:16:
                    99:0c:c7:74:9d:9c:44:08:e3:17:11:ec:89:99:39:
                    c7:0c:c7:0f:0a:76:01:36:2a:d2:34:63:a1:3d:23:
                    bd:24:e6:24:f9:ef:7f:12:9d:f5:15:9a:67:32:0d:
                    7c:5a:a6:e6:7c:59:96:8f:6a:86:20:ab:ec:09:26:
                    21:e7:30:cb:db:6c:ec:11:9f:f6:31:9f:b7:ea:d3:
                    d5:f3:75:d2:fc:7c:58:59:d1:c8:e2:9b:f3:3d:75:
                    cc:ab:d8:da:37:2b:0b:b6:eb:db:82:43:e0:cf:93:
                    67:88:d6:02:2a:1e:41:2a:80:40:a2:b9:5c:98:66:
                    24:a7:77:bc:18:33:db:7b:e6:68:6e:5f:dc:e9:62:
                    47:ba:26:3c:a0:c1:a3:0c:61:1b:d2:49:75:32:74:
                    b9:f4:5b:a7:5f:d5:a8:0c:a8:fa:c8:d6:4e:55:35:
                    f3:fb:95:87:da:45:bd:48:0d:e6:28:41:a7:a9:09:
                    a3:97:1d:e1:49:5e:d7:d8:07:38:72:21:ae:65:f6:
                    33:f7:65:cd:54:67:c9:e7:c3:f5:1b:c0:e7:a7:7c:
                    c5:a5:33:63:90:73:67:84:10:03:e6:9c:20:d8:df:
                    8d:f0:80:65:fb:3b:b6:4b:22:65:90:64:b7:b5:e0:
                    28:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:86:30:01:8F:74:91:A8:12:D0:F2:A4:DF:4D:5B:42:F6:90:04:9A
            X509v3 Authority Key Identifier:
                keyid:B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3138372e3130392e39362e302f32302d3234203d3e203238313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.109.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1b:fb:9a:75:c0:b0:6b:f8:97:e5:a4:2b:c0:35:d3:63:d0:a6:
         e9:d8:e1:c9:b4:e1:65:4d:c2:17:b1:f9:eb:da:20:9e:c4:00:
         87:c1:5f:16:1f:bc:55:78:27:bc:59:c1:46:4a:3a:ac:2a:2a:
         b0:18:d5:f1:5d:48:e6:e9:bb:dd:c2:01:d1:c3:d2:ea:bf:5c:
         8f:77:46:34:9d:92:2f:2c:75:ab:72:a2:34:a0:ce:f9:21:76:
         df:4a:49:14:d5:12:dd:bf:dd:84:4c:c7:9f:2e:e6:1b:aa:8c:
         1f:9d:92:84:c1:b9:2a:4c:92:9a:2c:02:72:64:7f:2b:9b:27:
         16:c0:ce:e0:bd:7c:59:48:f5:d2:16:7d:e1:ce:ef:71:54:95:
         08:e2:28:46:11:d7:74:bd:d7:2a:4a:0f:30:04:13:29:c4:e6:
         d2:bd:a7:38:86:3b:05:89:0c:74:e4:78:39:9d:47:e8:2d:12:
         49:df:57:58:62:64:b3:1b:cc:e2:ea:a1:c8:b7:a1:2e:3b:07:
         03:c0:91:5a:38:61:24:43:ed:f3:f3:f0:e5:9c:76:6a:02:c8:
         0b:09:bb:2d:e8:91:71:14:17:1b:fa:7b:c3:07:85:74:db:63:
         67:22:53:75:d6:48:8a:81:a6:f8:64:1b:c2:da:06:7a:e8:25:
         fa:86:37:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:06:52 2026 by rpki-client