Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dtw8RycRmT2JG7wtwEKvMYCotyXre44k2nxqF8SrhPpH/0/3138362e3235312e3136302e302f32312d3231203d3e203533323237.roa
File:                     3138362e3235312e3136302e302f32312d3231203d3e203533323237.roa (raw, json)
Hash identifier:          Ti4iN6XTwr6/Ua78ohnLtCffVNaDsgOBnDRg0jKU1nM=
Subject key identifier:   0B:1C:62:E1:C3:73:B9:74:7A:ED:2D:70:6D:42:8B:34:72:17:6B:9F
Certificate issuer:       /CN=658D66B1BD26D1C90CD3EB7ECF5740198F13027A
Certificate serial:       24D89A2330219B2CADDE720C5D48EF0403C7A7BE
Authority key identifier: 65:8D:66:B1:BD:26:D1:C9:0C:D3:EB:7E:CF:57:40:19:8F:13:02:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/658D66B1BD26D1C90CD3EB7ECF5740198F13027A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dtw8RycRmT2JG7wtwEKvMYCotyXre44k2nxqF8SrhPpH/0/3138362e3235312e3136302e302f32312d3231203d3e203533323237.roa
Signing time:             Thu 16 Jul 2026 15:46:13 +0000
ROA not before:           Thu 16 Jul 2026 15:41:13 +0000
ROA not after:            Thu 15 Jul 2027 15:46:13 +0000
asID:                     53227
IP address blocks:        186.251.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dtw8RycRmT2JG7wtwEKvMYCotyXre44k2nxqF8SrhPpH/0/658D66B1BD26D1C90CD3EB7ECF5740198F13027A.crl
                          rsync://rpki-repo.registro.br/repo/Dtw8RycRmT2JG7wtwEKvMYCotyXre44k2nxqF8SrhPpH/0/658D66B1BD26D1C90CD3EB7ECF5740198F13027A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/658D66B1BD26D1C90CD3EB7ECF5740198F13027A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 01:42:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:d8:9a:23:30:21:9b:2c:ad:de:72:0c:5d:48:ef:04:03:c7:a7:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=658D66B1BD26D1C90CD3EB7ECF5740198F13027A
        Validity
            Not Before: Jul 16 15:41:13 2026 GMT
            Not After : Jul 15 15:46:13 2027 GMT
        Subject: CN=0B1C62E1C373B9747AED2D706D428B3472176B9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3b:09:af:69:67:6f:fc:99:cc:13:13:e6:f3:
                    b2:48:0b:74:b6:9c:6e:2c:6b:e6:81:25:8b:71:0c:
                    d0:0d:69:b7:18:34:3c:67:f7:3c:81:68:0f:33:8a:
                    1e:46:b8:0b:55:5e:ec:07:7a:90:00:b2:a5:fe:c1:
                    58:6e:f7:0c:64:f3:97:e3:50:40:32:a7:c9:67:4c:
                    b8:85:5c:3a:a6:18:97:3a:1f:cc:9b:ac:fa:5d:35:
                    c5:64:60:75:4b:aa:4a:2a:9c:65:c7:a7:60:2c:0d:
                    28:88:b9:07:9e:86:92:21:3a:d0:b2:0e:91:b1:a4:
                    13:34:3c:6f:e7:3f:eb:e5:4f:f0:6b:6c:99:3c:88:
                    94:86:0d:32:88:1e:06:1e:63:30:21:f8:d9:bc:da:
                    17:e8:9a:45:71:12:e2:2a:6a:3b:07:ad:fe:c9:01:
                    9f:8c:6e:af:59:9f:e6:72:1e:09:ce:ea:25:78:6e:
                    e4:8e:0d:b3:0b:de:44:d4:05:b5:90:f6:c7:8a:06:
                    2b:83:71:b9:74:60:b0:b8:be:01:ce:71:e7:9d:d3:
                    72:2b:dc:3f:e6:7f:64:7a:c4:34:cd:d4:a9:fd:89:
                    a3:3d:a5:6b:c2:81:40:78:ec:b9:63:3d:87:a2:94:
                    da:44:b6:77:08:b8:9c:c7:26:d2:51:7a:e7:77:86:
                    b9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:1C:62:E1:C3:73:B9:74:7A:ED:2D:70:6D:42:8B:34:72:17:6B:9F
            X509v3 Authority Key Identifier:
                keyid:65:8D:66:B1:BD:26:D1:C9:0C:D3:EB:7E:CF:57:40:19:8F:13:02:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dtw8RycRmT2JG7wtwEKvMYCotyXre44k2nxqF8SrhPpH/0/658D66B1BD26D1C90CD3EB7ECF5740198F13027A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/658D66B1BD26D1C90CD3EB7ECF5740198F13027A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dtw8RycRmT2JG7wtwEKvMYCotyXre44k2nxqF8SrhPpH/0/3138362e3235312e3136302e302f32312d3231203d3e203533323237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3a:a3:fb:a5:c7:9a:75:78:e6:74:65:fa:31:0f:f7:af:df:37:
         97:59:90:48:3c:ab:11:10:0b:34:a0:b9:0c:10:06:ec:6f:f7:
         f2:3f:8d:4b:c4:46:e5:82:e0:44:1b:98:de:0a:26:49:47:f5:
         7b:6e:09:0c:b3:24:6c:c0:c2:14:96:3c:a5:a2:78:7b:c9:e5:
         14:55:ec:4c:40:13:16:43:e9:2f:4b:9a:8e:78:99:a3:a8:3b:
         e3:f1:fc:3e:9d:d4:43:5e:56:92:f8:ee:a8:95:e8:64:7d:25:
         f5:c9:70:8b:c5:aa:ec:3e:dc:ba:71:66:00:b1:f2:a8:2a:8b:
         32:57:16:46:53:f4:68:69:a7:9c:11:27:56:94:7d:7f:e7:55:
         e9:87:98:15:83:79:d6:20:24:67:96:84:b4:35:de:e3:66:18:
         95:54:38:00:0c:a5:e7:be:23:83:32:04:8b:15:f0:08:c2:cd:
         fb:69:a5:da:b8:72:ca:3d:6c:b4:ab:16:48:21:40:65:a6:0d:
         f3:b0:f8:2c:d4:ae:79:8f:c3:62:c3:8a:c6:59:f8:bc:82:f3:
         34:a5:c3:9c:31:5e:8a:6a:2d:bb:31:f4:77:4a:43:02:82:e0:
         15:d0:32:d4:4b:4a:67:39:cb:39:bf:4e:ad:85:56:41:02:87:
         ab:22:de:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:51:28 2026 by rpki-client