Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/3138362e3232342e38332e302f32342d3234203d3e20323632393938.roa
File:                     3138362e3232342e38332e302f32342d3234203d3e20323632393938.roa (raw, json)
Hash identifier:          IWsL8ZOrMLBSrhrbKRfgoGWjCv9qdZcKPq8E7dMmp90=
Subject key identifier:   86:77:5E:AD:7B:C7:C4:68:97:BE:FB:2B:E8:F9:F4:03:47:30:C1:B9
Certificate issuer:       /CN=2431B5DDF8166029A0033562C55895BEC665B28A
Certificate serial:       08AD3DF422AF5A67D12B83E9F020C694124E4826
Authority key identifier: 24:31:B5:DD:F8:16:60:29:A0:03:35:62:C5:58:95:BE:C6:65:B2:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B5DDF8166029A0033562C55895BEC665B28A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/3138362e3232342e38332e302f32342d3234203d3e20323632393938.roa
Signing time:             Thu 08 Oct 2026 13:39:40 +0000
ROA not before:           Thu 08 Oct 2026 13:34:40 +0000
ROA not after:            Thu 07 Oct 2027 13:39:40 +0000
asID:                     262998
IP address blocks:        186.224.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.crl
                          rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B5DDF8166029A0033562C55895BEC665B28A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 06:11:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ad:3d:f4:22:af:5a:67:d1:2b:83:e9:f0:20:c6:94:12:4e:48:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2431B5DDF8166029A0033562C55895BEC665B28A
        Validity
            Not Before: Oct  8 13:34:40 2026 GMT
            Not After : Oct  7 13:39:40 2027 GMT
        Subject: CN=86775EAD7BC7C46897BEFB2BE8F9F4034730C1B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:45:7c:1b:f2:16:03:45:43:82:66:6e:0c:ba:
                    ad:d2:e5:9c:8c:43:59:ac:b5:f6:a2:44:fc:bb:05:
                    9c:51:83:83:d1:0e:32:55:86:18:bf:2c:4e:f5:88:
                    4c:82:d6:bd:7e:93:92:e4:a6:02:59:e0:3a:48:94:
                    45:f7:d8:ff:79:1e:c6:f6:91:90:00:76:c4:f3:9f:
                    2a:98:93:95:6e:ce:f0:0c:7b:86:62:5d:e1:32:20:
                    d5:0d:7c:ca:85:d4:65:0d:fc:ff:7a:b3:88:88:e8:
                    fe:d6:0a:09:db:61:5b:f6:b5:eb:ee:3d:f1:4d:d0:
                    10:fc:93:ab:99:a3:a3:7a:d7:81:97:34:c1:68:24:
                    98:a4:f1:22:99:41:15:d4:5f:7f:c3:5f:89:dc:bb:
                    95:d9:93:56:0f:10:02:06:5d:ec:40:5e:e6:4a:06:
                    35:71:d9:b0:c6:10:b4:c5:28:63:04:4a:70:ee:89:
                    74:67:db:dc:cc:d4:4e:39:a3:de:a6:4c:cc:bd:1c:
                    78:46:9a:cb:ab:98:33:8c:3b:04:ff:ea:6e:09:6a:
                    39:4a:90:0c:84:c7:8f:b8:d5:fe:ba:a9:b2:23:36:
                    0b:c0:22:43:7d:14:60:99:ab:aa:9c:99:b4:82:f8:
                    c1:0e:4f:bf:58:11:cb:c6:91:a2:d1:41:1a:b1:43:
                    95:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:77:5E:AD:7B:C7:C4:68:97:BE:FB:2B:E8:F9:F4:03:47:30:C1:B9
            X509v3 Authority Key Identifier:
                keyid:24:31:B5:DD:F8:16:60:29:A0:03:35:62:C5:58:95:BE:C6:65:B2:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B5DDF8166029A0033562C55895BEC665B28A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/3138362e3232342e38332e302f32342d3234203d3e20323632393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:27:24:78:de:2f:df:e7:b5:e1:d9:a8:5d:4a:c1:39:96:77:
         9f:a1:2f:41:f7:17:d6:f9:58:1b:ff:c4:22:5a:4e:0d:5f:a9:
         c1:a1:e6:f3:dc:97:33:f4:1a:94:e3:18:5a:c1:3d:ed:d3:f9:
         44:aa:c8:5a:2c:df:1c:13:28:63:99:03:18:48:6a:27:5b:40:
         df:4b:04:a8:5e:a9:ee:58:a5:93:2d:fd:2c:e2:a9:81:56:8d:
         5f:7d:6e:ea:08:80:2b:34:00:dd:4b:69:a1:99:26:3e:5a:47:
         6f:66:75:f7:e1:e9:2a:21:60:18:cf:2e:18:4a:71:88:9b:c8:
         53:36:a7:f6:0c:74:95:22:e1:78:cd:1a:3d:ff:8a:f8:a9:2b:
         54:5e:39:1d:24:63:d0:aa:95:61:f7:df:17:47:e6:1d:a5:c7:
         df:de:32:dd:94:28:27:a5:4c:ed:c9:e1:55:93:4f:51:55:13:
         b5:6d:25:c1:95:7e:a1:1d:11:28:91:3e:fa:50:90:df:cb:1b:
         65:7a:2c:72:18:2a:4c:ee:4f:d2:85:94:70:b1:77:02:32:b5:
         4e:0d:76:63:1f:4f:95:02:39:72:1a:8f:ab:1b:ea:50:6d:8d:
         10:ff:7e:31:20:20:d4:ab:f9:06:16:97:16:35:f8:7c:90:aa:
         7e:c3:b7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 17:57:09 2026 by rpki-client