Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/3138362e3139342e302e302f32332d3233203d3e20323730383738.roa
File:                     3138362e3139342e302e302f32332d3233203d3e20323730383738.roa (raw, json)
Hash identifier:          N++qvqMWqypLC2nBGgOlDpr30wb5fAqGHpkT2FpI6CI=
Subject key identifier:   38:7B:3B:AE:13:A7:18:07:9A:93:3B:E5:7A:03:51:F5:8C:4D:38:79
Certificate issuer:       /CN=4C3C8E91B1D1C28D4FE82E67165715503E9CA786
Certificate serial:       1DADF03713B416184ED364B8BC181E3EE95837E2
Authority key identifier: 4C:3C:8E:91:B1:D1:C2:8D:4F:E8:2E:67:16:57:15:50:3E:9C:A7:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C3C8E91B1D1C28D4FE82E67165715503E9CA786.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/3138362e3139342e302e302f32332d3233203d3e20323730383738.roa
Signing time:             Thu 05 Mar 2026 15:58:34 +0000
ROA not before:           Thu 05 Mar 2026 15:53:34 +0000
ROA not after:            Thu 04 Mar 2027 15:58:34 +0000
asID:                     270878
IP address blocks:        186.194.0.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/4C3C8E91B1D1C28D4FE82E67165715503E9CA786.crl
                          rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/4C3C8E91B1D1C28D4FE82E67165715503E9CA786.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C3C8E91B1D1C28D4FE82E67165715503E9CA786.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 06:22:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ad:f0:37:13:b4:16:18:4e:d3:64:b8:bc:18:1e:3e:e9:58:37:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C3C8E91B1D1C28D4FE82E67165715503E9CA786
        Validity
            Not Before: Mar  5 15:53:34 2026 GMT
            Not After : Mar  4 15:58:34 2027 GMT
        Subject: CN=387B3BAE13A718079A933BE57A0351F58C4D3879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:af:6f:e8:fd:37:a0:f1:75:2f:36:9b:69:f2:
                    cf:a9:7b:4f:d1:6e:b3:b1:16:64:e6:9b:f2:e4:a6:
                    8f:f0:46:ea:b5:73:e9:2e:c2:14:66:e2:27:26:f7:
                    76:e2:04:87:1e:bf:ec:ae:a1:a3:0b:d0:40:61:f5:
                    20:25:b7:97:51:bc:59:21:f2:7b:84:a5:4b:a6:91:
                    cb:15:91:f9:db:ad:cc:1a:75:6e:f2:08:3a:5c:bc:
                    8e:f3:3a:d2:6b:f0:87:c3:79:e9:03:62:6d:ac:27:
                    ab:1f:50:91:29:28:66:6f:d6:4f:4d:49:67:70:b2:
                    62:fe:57:60:a3:26:c1:12:81:4d:fd:34:42:c8:64:
                    7d:75:12:8b:1b:27:ef:60:f0:86:bf:6b:67:c2:7b:
                    3a:4e:93:14:b7:33:74:6f:04:7a:18:9b:bf:77:b5:
                    9c:2c:06:6a:19:3c:eb:17:e9:52:b3:29:9b:62:28:
                    ad:13:72:97:be:b2:b3:e2:26:ce:ba:ee:31:12:fe:
                    2f:9c:15:de:6b:b6:82:64:dc:fe:9a:67:04:82:f0:
                    5e:02:15:59:63:c2:c7:82:0b:6a:16:ef:26:12:5f:
                    5d:be:9e:dd:99:78:42:11:af:cc:4c:f4:2c:92:15:
                    63:3d:69:75:78:e4:e0:b3:8b:48:51:c2:33:4d:f6:
                    eb:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:7B:3B:AE:13:A7:18:07:9A:93:3B:E5:7A:03:51:F5:8C:4D:38:79
            X509v3 Authority Key Identifier:
                keyid:4C:3C:8E:91:B1:D1:C2:8D:4F:E8:2E:67:16:57:15:50:3E:9C:A7:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/4C3C8E91B1D1C28D4FE82E67165715503E9CA786.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C3C8E91B1D1C28D4FE82E67165715503E9CA786.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/3138362e3139342e302e302f32332d3233203d3e20323730383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ac:9c:ba:b4:51:10:5c:8b:98:67:6f:6a:6e:74:ec:ad:77:0d:
         1e:72:b1:a8:28:d7:05:54:59:88:ad:3c:24:8b:9e:d7:90:11:
         f4:06:14:00:3e:1e:ad:c6:ef:0a:ba:1c:01:29:75:be:1a:12:
         72:96:8c:36:97:76:b9:f5:42:4a:3c:93:08:4a:d3:fd:7f:c3:
         59:37:04:78:e7:0e:c1:14:fc:ef:ab:cc:eb:67:95:b3:b8:ea:
         2a:70:40:4d:31:18:3e:fc:1e:87:55:b4:bd:a6:c4:ec:5c:1d:
         df:de:45:89:f8:1b:30:3a:e6:d5:16:cf:cf:c2:6e:48:e3:d7:
         a0:ad:eb:da:d9:26:c4:d3:14:b0:3a:62:af:28:07:cc:64:06:
         34:c9:3a:1c:e9:84:1f:03:5f:98:80:ae:76:8d:9b:96:17:e0:
         0d:0a:0e:a2:d5:8b:9f:78:06:81:45:78:2c:b2:7b:92:df:cc:
         c2:42:25:36:9d:da:6f:e1:bb:f6:3f:46:48:5d:d9:9e:42:21:
         fa:02:02:1f:03:8b:5d:a5:ba:2f:32:c6:af:58:ee:1d:da:8e:
         4d:9b:91:f8:c8:64:36:b5:b9:45:3d:58:1d:56:84:d7:6a:aa:
         7f:f2:04:74:29:d4:f6:c2:b7:9a:1f:8f:49:7c:19:f2:27:22:
         31:bf:ec:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:32:30 2026 by rpki-client