Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/1/3138372e3130392e3139362e302f32342d3234203d3e20323632333232.roa
File:                     3138372e3130392e3139362e302f32342d3234203d3e20323632333232.roa (raw, json)
Hash identifier:          ZL5QkdDj3E2McJnzuXK/HpWj7rQ2o9/XyAlx9kpHmEY=
Subject key identifier:   AE:DE:17:7F:7E:29:26:A8:A1:9E:C4:AE:63:E4:06:00:20:EE:4D:5E
Certificate issuer:       /CN=600921937E8C82CCBB357FE8103E7D3356A4C6BE
Certificate serial:       1AE762B4DEA164A425E985C931B409E0D3258936
Authority key identifier: 60:09:21:93:7E:8C:82:CC:BB:35:7F:E8:10:3E:7D:33:56:A4:C6:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/600921937E8C82CCBB357FE8103E7D3356A4C6BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/1/3138372e3130392e3139362e302f32342d3234203d3e20323632333232.roa
Signing time:             Fri 17 Jul 2026 20:48:31 +0000
ROA not before:           Fri 17 Jul 2026 20:43:31 +0000
ROA not after:            Fri 16 Jul 2027 20:48:31 +0000
asID:                     262322
IP address blocks:        187.109.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/1/600921937E8C82CCBB357FE8103E7D3356A4C6BE.crl
                          rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/1/600921937E8C82CCBB357FE8103E7D3356A4C6BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/600921937E8C82CCBB357FE8103E7D3356A4C6BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 09:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e7:62:b4:de:a1:64:a4:25:e9:85:c9:31:b4:09:e0:d3:25:89:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600921937E8C82CCBB357FE8103E7D3356A4C6BE
        Validity
            Not Before: Jul 17 20:43:31 2026 GMT
            Not After : Jul 16 20:48:31 2027 GMT
        Subject: CN=AEDE177F7E2926A8A19EC4AE63E4060020EE4D5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:41:59:83:2d:7e:41:83:c3:bb:c6:94:50:d1:
                    0d:e9:2f:9e:89:4c:8b:1e:cc:2b:07:04:df:99:ef:
                    5b:4b:9f:40:0c:81:87:25:0e:81:51:13:19:f8:80:
                    5d:65:13:cf:eb:e5:9c:13:ef:94:93:c9:04:40:97:
                    12:3d:49:18:82:a4:f3:3b:e9:cc:29:27:7a:0c:a9:
                    73:af:12:93:c9:db:74:b7:cf:81:c6:d8:04:02:42:
                    7e:ba:17:16:61:40:a3:d7:48:fd:70:46:f5:b2:af:
                    21:18:2e:c4:0e:8e:28:eb:9f:8d:70:33:35:1f:df:
                    f8:d9:a4:aa:85:56:12:44:7f:32:09:b2:0f:52:f3:
                    bb:84:63:ae:24:d7:83:d6:ce:aa:8e:6c:fb:9f:a6:
                    14:70:b3:fb:02:6f:88:c9:c5:fa:80:8c:56:91:2d:
                    c7:17:40:f2:13:3d:b2:58:a1:1e:9b:c0:40:2c:ea:
                    07:69:b8:99:db:01:ee:b6:ee:e8:1a:c3:69:c3:0d:
                    98:83:8a:97:b7:4c:98:39:d8:16:f2:35:d8:4c:4a:
                    2a:61:50:05:2f:67:69:5c:8e:0d:b6:f4:6e:b8:41:
                    d9:cd:e8:ba:6b:8c:fc:7c:a7:0a:2d:c5:0f:c4:e7:
                    88:ef:23:d3:90:e6:87:29:ef:88:67:ee:9e:e8:82:
                    4d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:DE:17:7F:7E:29:26:A8:A1:9E:C4:AE:63:E4:06:00:20:EE:4D:5E
            X509v3 Authority Key Identifier:
                keyid:60:09:21:93:7E:8C:82:CC:BB:35:7F:E8:10:3E:7D:33:56:A4:C6:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/1/600921937E8C82CCBB357FE8103E7D3356A4C6BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/600921937E8C82CCBB357FE8103E7D3356A4C6BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/1/3138372e3130392e3139362e302f32342d3234203d3e20323632333232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.109.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:8f:06:47:79:87:99:49:00:90:38:ce:32:8d:77:11:5d:b3:
         54:ed:5f:c4:32:2b:e3:f5:cd:a1:f8:21:12:f7:59:ef:8d:d2:
         0b:5d:30:64:05:16:d6:5c:ed:7b:8a:33:f3:2f:53:24:35:90:
         4d:9f:96:7b:77:45:35:ca:1a:c2:c5:b4:0c:b7:99:ed:d6:27:
         8c:2e:96:d5:b7:e8:9d:ed:16:44:bc:f5:d5:64:91:04:bb:06:
         86:3e:a9:d1:c8:f7:8e:3e:f2:81:fa:20:66:f7:ad:5c:46:e7:
         3a:02:a4:8a:66:17:a8:3e:96:ce:a9:a1:f7:d1:12:f5:c7:4f:
         4f:f8:25:ae:c7:d5:30:5d:95:eb:94:1c:1e:85:9e:05:27:b3:
         fb:42:1e:a4:36:7c:5f:72:a7:9a:7a:80:d1:95:90:cf:d5:10:
         4a:2d:10:dc:47:52:c0:de:c6:17:15:33:b0:5e:4e:f1:74:d4:
         8b:98:ff:95:7e:9b:6f:89:e2:f5:cb:a2:5b:7c:cd:96:c0:3c:
         48:27:c0:0f:a2:30:12:ca:09:96:67:bc:9f:4a:bf:78:8c:3c:
         d9:04:26:e2:40:5b:9b:dc:5c:e4:31:6b:3f:d5:55:f4:90:64:
         29:54:d3:8d:70:98:ad:2e:4f:f6:80:27:f2:67:a5:c3:f5:12:
         78:1d:26:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:35:12 2026 by rpki-client