Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/3138362e3139342e302e302f32322d3232203d3e20323730383738.roa
File:                     3138362e3139342e302e302f32322d3232203d3e20323730383738.roa (raw, json)
Hash identifier:          8JaemSQpYfITP2b4QYH6E87LxDcWSBcYX2Dhev/xXzU=
Subject key identifier:   50:3A:6C:F1:22:AA:71:B7:CF:77:0E:3C:CB:35:DD:0A:60:34:87:F9
Certificate issuer:       /CN=4C3C8E91B1D1C28D4FE82E67165715503E9CA786
Certificate serial:       770D0B62A6DC6A9508A2FD6924204289AB54CBBE
Authority key identifier: 4C:3C:8E:91:B1:D1:C2:8D:4F:E8:2E:67:16:57:15:50:3E:9C:A7:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C3C8E91B1D1C28D4FE82E67165715503E9CA786.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/3138362e3139342e302e302f32322d3232203d3e20323730383738.roa
Signing time:             Thu 05 Mar 2026 15:58:32 +0000
ROA not before:           Thu 05 Mar 2026 15:53:32 +0000
ROA not after:            Thu 04 Mar 2027 15:58:32 +0000
asID:                     270878
IP address blocks:        186.194.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/4C3C8E91B1D1C28D4FE82E67165715503E9CA786.crl
                          rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/4C3C8E91B1D1C28D4FE82E67165715503E9CA786.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C3C8E91B1D1C28D4FE82E67165715503E9CA786.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 06:22:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:0d:0b:62:a6:dc:6a:95:08:a2:fd:69:24:20:42:89:ab:54:cb:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C3C8E91B1D1C28D4FE82E67165715503E9CA786
        Validity
            Not Before: Mar  5 15:53:32 2026 GMT
            Not After : Mar  4 15:58:32 2027 GMT
        Subject: CN=503A6CF122AA71B7CF770E3CCB35DD0A603487F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a1:b1:c5:d0:5c:b3:f8:17:e3:a1:fb:9f:1d:
                    f0:4b:c4:b5:b4:45:12:23:8e:e8:8c:a6:30:60:97:
                    15:8b:8d:b4:14:c7:3a:a9:0c:5e:e5:88:ce:44:b6:
                    89:4e:ca:1a:bd:c3:1a:00:77:39:af:4f:26:33:2f:
                    34:71:e4:3b:bf:54:38:77:90:db:5e:dd:50:52:80:
                    ef:55:7d:28:c7:fb:a7:14:08:99:ec:02:f7:f3:05:
                    68:00:e5:00:a7:3f:da:03:2a:f4:fb:89:35:30:d9:
                    4d:e1:74:bc:d2:37:27:09:4a:2a:42:df:9f:31:80:
                    ab:89:41:1a:16:b0:02:2c:1d:b6:e5:ce:3f:eb:48:
                    de:da:8e:66:51:77:97:da:a6:9d:f4:96:22:d6:45:
                    db:7a:ab:83:47:88:fa:5f:96:20:6b:e2:4f:9a:6b:
                    b9:f9:d1:1e:e8:b9:ed:64:b0:cc:e6:49:ea:8d:a6:
                    7c:fd:af:d2:16:83:0c:17:16:67:58:a7:d8:4c:5a:
                    0b:a1:bf:f1:b6:5b:16:c4:f4:df:f6:ca:08:69:59:
                    e9:4f:51:11:96:00:2f:e0:0c:de:31:2a:93:22:9d:
                    02:21:e6:aa:fb:c1:2e:ac:34:06:70:51:18:7c:d3:
                    83:ce:a2:7b:aa:b4:d8:d1:12:1f:17:c2:64:c6:c9:
                    f5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:3A:6C:F1:22:AA:71:B7:CF:77:0E:3C:CB:35:DD:0A:60:34:87:F9
            X509v3 Authority Key Identifier:
                keyid:4C:3C:8E:91:B1:D1:C2:8D:4F:E8:2E:67:16:57:15:50:3E:9C:A7:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/4C3C8E91B1D1C28D4FE82E67165715503E9CA786.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C3C8E91B1D1C28D4FE82E67165715503E9CA786.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/3138362e3139342e302e302f32322d3232203d3e20323730383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:a8:05:1e:5e:7b:29:44:64:4b:28:79:7d:d8:3c:6f:30:1c:
         c9:28:b5:0e:95:eb:b6:a5:5e:c5:a7:f2:9c:fc:36:38:56:c3:
         dc:d0:36:7f:dc:a1:2c:dd:2b:ce:f3:f3:e6:57:96:38:d6:e9:
         dc:a4:30:a5:6d:95:80:b9:2b:ad:d2:86:af:31:b9:58:97:79:
         67:e0:5a:4b:2e:e7:7f:85:57:c9:5f:6e:61:96:e9:40:cd:07:
         3a:a0:88:34:7e:be:45:39:75:d6:6e:91:be:cc:3f:0b:24:68:
         0e:8a:2e:13:a1:1d:8f:bc:3f:25:e3:72:4d:8d:5f:40:d9:5b:
         d0:71:83:f2:04:5e:d3:ae:18:92:33:96:a9:63:13:70:27:e2:
         d0:74:cb:ee:bb:9b:5f:c9:7c:ad:34:da:a5:bf:65:34:c1:ae:
         91:6d:e4:fa:a3:8e:5f:3e:33:b1:5d:60:75:da:9e:dd:30:89:
         17:c2:c5:bb:77:0e:ce:51:c5:74:79:ce:a6:41:c8:f5:d2:fd:
         bf:98:97:e2:81:8a:5c:a8:b4:e4:39:6f:80:7b:a2:c2:00:2c:
         f4:f0:78:a4:43:b8:b9:11:a8:d0:14:c0:63:35:7c:68:a5:a0:
         71:7d:b6:6f:bd:f8:b2:27:2e:eb:7a:d1:25:df:5c:eb:ef:82:
         20:49:5d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:31:10 2026 by rpki-client