Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/3138372e36312e3132302e302f32312d3332203d3e20323632393532.roa
File:                     3138372e36312e3132302e302f32312d3332203d3e20323632393532.roa (raw, json)
Hash identifier:          b6v+h4DwqP11gCIugRW+h4YZbV5k5TWQzd5ofVYlSws=
Subject key identifier:   53:26:E5:3A:87:87:46:9E:8D:00:72:DA:26:94:E5:EF:43:20:4F:19
Certificate issuer:       /CN=4F91864780E3C640327E24B527D2248C0C5CAD25
Certificate serial:       3706765762485EA7E74CFFDD1718557A13B001A5
Authority key identifier: 4F:91:86:47:80:E3:C6:40:32:7E:24:B5:27:D2:24:8C:0C:5C:AD:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F91864780E3C640327E24B527D2248C0C5CAD25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/3138372e36312e3132302e302f32312d3332203d3e20323632393532.roa
Signing time:             Tue 14 Jul 2026 13:18:22 +0000
ROA not before:           Tue 14 Jul 2026 13:13:22 +0000
ROA not after:            Tue 13 Jul 2027 13:18:22 +0000
asID:                     262952
IP address blocks:        187.61.120.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/4F91864780E3C640327E24B527D2248C0C5CAD25.crl
                          rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/4F91864780E3C640327E24B527D2248C0C5CAD25.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F91864780E3C640327E24B527D2248C0C5CAD25.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 12:59:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:06:76:57:62:48:5e:a7:e7:4c:ff:dd:17:18:55:7a:13:b0:01:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F91864780E3C640327E24B527D2248C0C5CAD25
        Validity
            Not Before: Jul 14 13:13:22 2026 GMT
            Not After : Jul 13 13:18:22 2027 GMT
        Subject: CN=5326E53A8787469E8D0072DA2694E5EF43204F19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:35:03:f7:80:15:25:99:ea:1b:6f:90:c3:81:
                    96:82:77:86:61:0f:dd:65:a3:0c:62:e4:b5:06:f9:
                    00:0e:05:07:df:5f:ab:93:65:84:e7:54:cd:0f:13:
                    65:f5:55:ee:93:29:d7:7a:8a:80:ca:2e:e2:6b:55:
                    66:02:46:d0:d9:e7:47:7e:5b:eb:a0:1a:d7:e5:1f:
                    64:29:6a:f1:e6:94:7c:a7:bd:2b:12:88:52:5f:cd:
                    77:4c:72:9a:d2:5b:a5:7e:45:ed:3a:59:6a:76:32:
                    1d:de:af:25:b3:30:5c:12:6f:a7:7c:aa:12:88:c2:
                    ea:23:3a:94:18:dd:a4:6b:3c:74:24:ed:e6:37:d7:
                    24:13:c2:f6:62:04:63:d5:14:19:91:bb:43:96:26:
                    a7:9b:8a:92:30:d7:0a:be:49:59:3c:d7:7b:5e:7d:
                    c5:09:a0:41:64:4d:c3:cf:f6:8c:4b:fe:f3:fb:a7:
                    8f:2a:ed:98:e9:6f:2c:83:99:b0:22:7b:ae:fd:1a:
                    8e:91:c6:35:a4:b5:bb:b1:9d:ed:3a:37:a4:35:06:
                    67:34:ab:c9:21:e9:e6:5b:55:0c:4a:b7:66:cc:01:
                    5c:a6:f2:83:3f:e7:90:20:44:2c:52:61:d5:d0:07:
                    c2:3f:31:67:92:7c:86:7c:be:39:fd:e5:5f:68:6d:
                    48:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:26:E5:3A:87:87:46:9E:8D:00:72:DA:26:94:E5:EF:43:20:4F:19
            X509v3 Authority Key Identifier:
                keyid:4F:91:86:47:80:E3:C6:40:32:7E:24:B5:27:D2:24:8C:0C:5C:AD:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/4F91864780E3C640327E24B527D2248C0C5CAD25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F91864780E3C640327E24B527D2248C0C5CAD25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/3138372e36312e3132302e302f32312d3332203d3e20323632393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         39:02:f1:cf:c9:ed:8a:89:3d:01:24:bb:1a:59:17:45:a7:90:
         56:78:e5:f5:e8:a2:8f:b0:22:9b:3a:48:20:92:97:30:68:c4:
         39:36:ba:8b:ed:da:37:19:26:3a:f7:d7:32:d8:df:00:62:cc:
         1e:d2:94:9c:e4:63:bd:31:0a:83:64:3b:3b:4b:37:9d:52:0f:
         f5:be:a9:64:25:97:f8:8e:f1:7a:e3:c7:21:8f:fc:9e:7a:2a:
         a9:b5:75:8a:7f:bc:f8:74:c7:d6:d0:96:75:0f:a9:7b:36:a6:
         b8:38:ce:c5:a8:c6:f9:0b:9d:9c:2a:0b:4e:95:1b:8f:f2:e7:
         20:d9:17:56:1c:49:0b:5a:1e:7b:10:f6:d2:7a:8a:0c:cc:95:
         19:21:9d:c3:b4:2a:d0:f4:27:6e:ed:78:90:c8:d2:80:3c:5a:
         a8:ee:f0:d5:d4:6d:4b:5c:b1:19:f2:e9:a6:46:e1:fd:46:45:
         a9:33:f5:87:f0:73:11:94:4b:4c:44:b1:0a:16:d7:98:4f:91:
         cd:59:68:90:07:3a:59:6e:26:be:e9:e3:31:b6:fc:49:9e:d7:
         fd:80:b1:89:9b:69:b3:a0:96:fd:d2:8d:4b:96:74:13:46:93:
         b8:47:94:94:63:54:69:6e:a6:9b:91:56:19:32:19:7f:16:06:
         09:5a:be:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:44:16 2026 by rpki-client