Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/3138372e36332e3132362e302f32342d3234203d3e20323730373738.roa
File:                     3138372e36332e3132362e302f32342d3234203d3e20323730373738.roa (raw, json)
Hash identifier:          tDINC5gC1hTRoMPFusWS8Fs+A25eEIg7/xyJWhvE8DY=
Subject key identifier:   5B:BD:ED:98:20:37:AA:3C:DF:61:38:8B:10:84:2D:AB:1F:B9:4F:8F
Certificate issuer:       /CN=F4315E00F295861C1ED30C06EA1C17530762630E
Certificate serial:       7C1BDABDC33078EFA42629A35194E35791CBA700
Authority key identifier: F4:31:5E:00:F2:95:86:1C:1E:D3:0C:06:EA:1C:17:53:07:62:63:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4315E00F295861C1ED30C06EA1C17530762630E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/3138372e36332e3132362e302f32342d3234203d3e20323730373738.roa
Signing time:             Thu 17 Sep 2026 21:26:07 +0000
ROA not before:           Thu 17 Sep 2026 21:21:07 +0000
ROA not after:            Thu 16 Sep 2027 21:26:07 +0000
asID:                     270778
IP address blocks:        187.63.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/F4315E00F295861C1ED30C06EA1C17530762630E.crl
                          rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/F4315E00F295861C1ED30C06EA1C17530762630E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4315E00F295861C1ED30C06EA1C17530762630E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 06:33:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:1b:da:bd:c3:30:78:ef:a4:26:29:a3:51:94:e3:57:91:cb:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4315E00F295861C1ED30C06EA1C17530762630E
        Validity
            Not Before: Sep 17 21:21:07 2026 GMT
            Not After : Sep 16 21:26:07 2027 GMT
        Subject: CN=5BBDED982037AA3CDF61388B10842DAB1FB94F8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cc:8e:6e:13:1e:17:79:8f:7b:9d:eb:ff:cb:
                    a5:04:f3:f6:83:f8:30:4c:84:58:61:11:14:33:33:
                    45:20:33:66:f4:c4:7a:1c:b6:de:2d:a9:10:d8:d1:
                    d1:91:10:00:75:07:84:f2:63:6d:35:a4:87:3f:61:
                    02:89:c6:bf:48:87:c9:5f:fa:01:11:98:96:5a:66:
                    0c:74:7d:bf:11:83:e7:18:5c:94:ab:9f:7f:26:bb:
                    dc:eb:aa:88:8e:55:a0:1f:62:dc:28:0e:99:c5:0e:
                    5d:6a:b9:dd:04:84:6b:33:eb:2a:b5:03:e5:f6:51:
                    fc:6a:ad:90:22:8a:cb:a5:b2:c8:6b:17:63:f7:51:
                    03:07:a5:4e:bc:15:a2:9e:09:b9:38:46:74:68:e7:
                    66:03:54:70:f8:a2:d2:a4:1a:9d:e0:e6:52:92:75:
                    73:79:b9:52:85:d5:2b:7f:aa:76:40:63:ea:fb:bd:
                    69:e3:38:25:ef:ce:f6:31:70:74:b3:d5:bf:f7:c7:
                    a8:69:83:47:6c:7a:5b:7d:2e:f4:48:03:a0:08:6b:
                    eb:ea:0b:92:b3:22:1f:3a:a9:ff:81:be:8b:4a:d5:
                    bb:ac:31:df:4e:9f:5f:90:5c:6d:5a:cd:09:22:8a:
                    cc:6f:a1:ce:93:51:e8:27:8b:e3:53:07:2e:72:f9:
                    5f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:BD:ED:98:20:37:AA:3C:DF:61:38:8B:10:84:2D:AB:1F:B9:4F:8F
            X509v3 Authority Key Identifier:
                keyid:F4:31:5E:00:F2:95:86:1C:1E:D3:0C:06:EA:1C:17:53:07:62:63:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/F4315E00F295861C1ED30C06EA1C17530762630E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4315E00F295861C1ED30C06EA1C17530762630E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/3138372e36332e3132362e302f32342d3234203d3e20323730373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:2f:66:3f:f3:24:fb:b9:3d:9f:89:f1:3c:47:b6:80:6c:e0:
         bc:df:1f:db:5e:85:fe:a3:77:e8:9e:29:1a:7e:7e:eb:fc:6a:
         2f:1d:f8:8b:56:65:1c:06:ca:56:36:53:33:bd:e5:e3:e7:32:
         91:84:8b:2b:66:7b:ed:6e:0d:fc:8e:dc:7f:c6:2d:ff:0d:c7:
         92:d2:b0:7d:33:08:b6:30:11:dc:c4:08:c8:a3:55:f3:56:9f:
         39:7e:5e:51:1d:b5:02:40:2a:22:7c:2f:94:4b:f6:00:5f:91:
         f3:82:9c:ec:36:b4:ae:25:38:54:8e:72:93:ab:74:8a:e3:04:
         96:1d:cf:21:0f:43:6d:57:cb:d6:a4:82:54:f3:7a:d2:c5:9c:
         fc:5c:e7:2e:24:a6:e1:f0:79:28:a7:ad:ee:c0:73:07:cf:c2:
         ae:20:50:e7:00:26:3d:65:92:7c:ab:28:30:ac:43:8e:4a:7d:
         94:89:79:f2:9d:42:ee:9e:2f:d7:78:86:1e:19:36:4b:d8:9e:
         3f:44:0f:7b:e6:3e:a7:fb:fb:74:33:eb:1c:7b:85:48:5b:4c:
         32:e2:90:ba:4f:33:ab:e3:2b:73:22:ef:7e:e8:cd:8a:4c:d6:
         7b:48:9b:52:b7:42:61:2a:24:24:16:80:90:47:35:e4:c7:c7:
         e2:32:bd:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----