Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3138362e3232362e36342e302f32302d3332203d3e203238333239.roa
File:                     3138362e3232362e36342e302f32302d3332203d3e203238333239.roa (raw, json)
Hash identifier:          kLb1XtTyXRy/eNJrismWLvss+kvo9X6OczZAI6g4K64=
Subject key identifier:   D4:B7:1C:1B:4C:75:14:3C:E7:25:03:07:84:53:5E:E0:C2:43:41:97
Certificate issuer:       /CN=617ABB72EF15B21D2E59DAB9087F83A02F381271
Certificate serial:       17CDB9F5DE12F058E62E89967E711E933078EFB0
Authority key identifier: 61:7A:BB:72:EF:15:B2:1D:2E:59:DA:B9:08:7F:83:A0:2F:38:12:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/617ABB72EF15B21D2E59DAB9087F83A02F381271.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3138362e3232362e36342e302f32302d3332203d3e203238333239.roa
Signing time:             Tue 28 Apr 2026 22:36:24 +0000
ROA not before:           Tue 28 Apr 2026 22:31:24 +0000
ROA not after:            Tue 27 Apr 2027 22:36:24 +0000
asID:                     28329
IP address blocks:        186.226.64.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/617ABB72EF15B21D2E59DAB9087F83A02F381271.crl
                          rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/617ABB72EF15B21D2E59DAB9087F83A02F381271.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/617ABB72EF15B21D2E59DAB9087F83A02F381271.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 04:07:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:cd:b9:f5:de:12:f0:58:e6:2e:89:96:7e:71:1e:93:30:78:ef:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=617ABB72EF15B21D2E59DAB9087F83A02F381271
        Validity
            Not Before: Apr 28 22:31:24 2026 GMT
            Not After : Apr 27 22:36:24 2027 GMT
        Subject: CN=D4B71C1B4C75143CE725030784535EE0C2434197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ef:00:8a:ea:9d:19:b5:93:80:60:46:68:65:
                    11:05:3b:e5:2e:01:86:66:71:5c:57:c1:3b:ac:c4:
                    06:b7:a7:65:eb:dd:bd:d5:bb:2d:19:29:61:3f:8a:
                    09:f2:e8:ec:8f:9a:86:99:5d:12:f3:05:97:7f:9f:
                    ce:04:cd:f6:4b:ab:fe:6c:c7:ed:e8:67:ee:74:32:
                    3f:c8:d6:69:72:eb:6c:b7:d2:9c:d8:31:99:53:89:
                    1e:42:d2:34:c9:9f:aa:10:cb:57:80:32:fb:50:70:
                    c6:e4:68:4c:03:31:52:ab:fd:0d:d2:2a:95:21:74:
                    42:f0:dc:2c:40:db:ee:0c:c9:d6:30:dd:9f:aa:9d:
                    b6:dd:e0:bd:f6:aa:56:21:36:eb:34:36:b2:af:f8:
                    f2:9d:e4:09:ed:d8:82:ab:0c:e4:04:4d:55:13:25:
                    2d:d8:07:a9:49:30:bf:16:ed:fa:61:50:fb:c6:b2:
                    2e:ac:51:84:a1:c1:89:e3:51:fc:8c:4a:c8:9a:0a:
                    a7:3b:ef:0b:56:42:80:b0:8d:79:dd:d2:fd:9f:f4:
                    31:41:0a:d9:2f:0d:cf:47:fc:94:95:b0:06:2e:a9:
                    1d:82:0e:7c:da:7d:ef:69:29:62:b5:50:f1:e5:55:
                    0f:da:d3:4d:3f:c0:2b:da:60:79:39:d0:4d:80:f1:
                    16:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:B7:1C:1B:4C:75:14:3C:E7:25:03:07:84:53:5E:E0:C2:43:41:97
            X509v3 Authority Key Identifier:
                keyid:61:7A:BB:72:EF:15:B2:1D:2E:59:DA:B9:08:7F:83:A0:2F:38:12:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/617ABB72EF15B21D2E59DAB9087F83A02F381271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/617ABB72EF15B21D2E59DAB9087F83A02F381271.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3138362e3232362e36342e302f32302d3332203d3e203238333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.226.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6d:20:5f:aa:3b:01:89:bb:3a:fc:ec:22:9b:99:e4:fd:06:48:
         92:78:2c:de:7f:7a:d8:4b:46:eb:85:52:48:43:b6:88:f5:14:
         e7:67:ba:1c:79:34:85:19:c1:82:a7:26:80:d7:70:bd:02:c4:
         9c:42:d8:88:e8:b9:c6:eb:07:25:63:5f:6b:b6:e8:e4:de:d6:
         4c:4d:6c:54:bb:5c:1a:3d:6e:fe:86:7a:39:e6:5a:a2:81:31:
         d7:d6:1d:1a:f2:ae:77:dc:fb:d7:5e:aa:ea:c9:60:39:7a:1d:
         9d:f8:49:02:ea:47:db:5e:ea:31:00:be:a4:49:89:42:09:67:
         55:f3:84:5e:6e:7d:64:23:02:27:93:85:e2:93:d3:10:67:1d:
         e4:d0:f0:d8:92:6e:f5:cb:78:3e:f2:59:de:01:ec:da:af:50:
         25:68:d1:a7:dd:b5:b7:15:d1:9b:d1:c2:24:21:d5:f7:2c:ed:
         70:6d:c8:1b:37:ae:25:ab:ec:14:02:43:39:74:27:b5:68:af:
         9a:9f:8c:90:94:d1:b0:0f:62:1c:5d:ee:a2:e7:4a:56:34:4d:
         6c:a4:10:88:c5:ac:29:90:e0:4c:c3:3c:4a:23:99:0d:24:a2:
         8d:48:90:0a:e0:18:59:43:14:ab:21:b3:21:93:80:31:21:26:
         8c:04:97:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:01:39 2026 by rpki-client