Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3139322e302f32342d3234203d3e20323636353332.roa
File:                     3138372e36322e3139322e302f32342d3234203d3e20323636353332.roa (raw, json)
Hash identifier:          b97Hdt9tm9Yg39T//qqwGHlOKOemZd9xV/09MKfPaak=
Subject key identifier:   23:FC:FC:09:3A:39:C1:F6:9F:48:13:34:2E:0D:64:9B:FA:B3:6A:E5
Certificate issuer:       /CN=60019B212552F2A8CDDA8A0E85CE072DC070502C
Certificate serial:       3FAB11F6E3E0968C02E6C004E170C9DF0BCB4D01
Authority key identifier: 60:01:9B:21:25:52:F2:A8:CD:DA:8A:0E:85:CE:07:2D:C0:70:50:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60019B212552F2A8CDDA8A0E85CE072DC070502C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3139322e302f32342d3234203d3e20323636353332.roa
Signing time:             Wed 01 Jul 2026 14:53:04 +0000
ROA not before:           Wed 01 Jul 2026 14:48:04 +0000
ROA not after:            Wed 30 Jun 2027 14:53:04 +0000
asID:                     266532
IP address blocks:        187.62.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/60019B212552F2A8CDDA8A0E85CE072DC070502C.crl
                          rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/60019B212552F2A8CDDA8A0E85CE072DC070502C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60019B212552F2A8CDDA8A0E85CE072DC070502C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 06:50:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:ab:11:f6:e3:e0:96:8c:02:e6:c0:04:e1:70:c9:df:0b:cb:4d:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60019B212552F2A8CDDA8A0E85CE072DC070502C
        Validity
            Not Before: Jul  1 14:48:04 2026 GMT
            Not After : Jun 30 14:53:04 2027 GMT
        Subject: CN=23FCFC093A39C1F69F4813342E0D649BFAB36AE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e7:25:61:c7:f8:09:e7:d0:f8:a9:12:41:f7:
                    c3:1e:20:6f:b5:91:90:98:e8:c4:26:f1:4d:25:21:
                    4e:48:91:fe:3c:83:a0:e4:73:2d:0f:12:03:68:bf:
                    8a:5f:78:6d:79:13:f5:6f:f7:92:5f:65:bd:78:0f:
                    81:11:d8:94:e0:19:f0:a2:fc:72:d8:9b:6b:ab:d3:
                    26:f7:ba:ed:24:0d:26:57:6f:b4:f6:61:94:a1:f2:
                    62:f1:09:33:8d:36:8c:d5:a0:86:c1:cf:f1:ee:6f:
                    96:11:48:fd:7e:a3:a0:46:ef:db:0c:4f:d8:95:d9:
                    d1:9b:f5:7d:47:49:e8:f2:2f:23:31:4c:5c:34:64:
                    cd:4b:a8:5d:b0:15:1f:7c:27:f0:83:23:e1:6d:db:
                    c8:00:b9:fa:14:47:62:f4:8c:01:75:bf:c4:03:97:
                    e1:a5:9e:7f:6e:0b:07:17:04:5d:f6:f1:70:6a:db:
                    3a:46:5f:65:14:c2:d3:3d:6a:5d:b2:69:3f:e1:68:
                    90:25:1e:96:be:9b:56:6a:c2:73:c9:8c:cb:20:a8:
                    52:d7:06:e0:8d:93:1e:06:20:e6:fb:7f:7c:8a:43:
                    ca:6c:7e:ad:cb:5b:c0:c3:5d:40:d2:9e:04:3a:1c:
                    79:7d:ab:7d:f0:3d:4c:33:16:2d:43:ce:ab:d6:18:
                    3d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:FC:FC:09:3A:39:C1:F6:9F:48:13:34:2E:0D:64:9B:FA:B3:6A:E5
            X509v3 Authority Key Identifier:
                keyid:60:01:9B:21:25:52:F2:A8:CD:DA:8A:0E:85:CE:07:2D:C0:70:50:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/60019B212552F2A8CDDA8A0E85CE072DC070502C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60019B212552F2A8CDDA8A0E85CE072DC070502C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3139322e302f32342d3234203d3e20323636353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:94:7e:96:3b:cb:c6:72:a2:9a:96:55:18:10:ad:f4:47:fd:
         06:b0:78:a9:6e:e1:c1:1e:f7:e6:90:e7:ac:7b:08:3a:3e:d0:
         81:0b:56:1d:ee:b4:44:89:c8:5b:2b:92:f1:75:60:86:bb:cc:
         ce:03:c6:b5:f0:a2:f4:83:95:3c:9a:00:be:4d:b8:91:72:4e:
         4b:57:80:b7:a8:17:c9:e6:87:dd:8d:8a:02:53:bc:79:6d:b0:
         47:d5:5d:1d:7e:7d:35:46:14:cc:d6:4f:d1:ca:77:33:a0:71:
         c8:91:48:e2:cb:36:5b:c4:b0:34:78:15:ab:24:32:34:11:55:
         78:87:9b:57:85:a6:04:0c:2f:e4:95:b3:b0:03:f8:3d:3a:5b:
         d1:94:84:ad:9c:33:dc:5d:45:66:7a:cc:a8:a3:dc:80:d0:05:
         45:d4:0d:ac:21:75:ca:4e:eb:6e:da:0a:80:22:15:27:f9:cd:
         5a:36:a1:d1:fe:2e:68:83:8f:d6:75:5f:4e:e2:27:35:3c:d7:
         99:df:63:6c:8a:66:dc:c9:0c:c2:3a:bc:b1:25:94:d6:36:0a:
         0f:82:a2:96:3d:f2:0c:49:02:fc:58:22:98:f5:28:66:2e:72:
         8a:02:e1:1f:b6:59:de:0e:45:cc:b3:f3:63:5e:ea:79:85:a6:
         81:88:29:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:00:51 2026 by rpki-client