Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/3138372e31372e3138382e302f32342d3234203d3e203238323634.roa
File:                     3138372e31372e3138382e302f32342d3234203d3e203238323634.roa (raw, json)
Hash identifier:          MC0k3cGsswt5yy5zwwCKMWea/kjC/vHq7f0WrXiL+1A=
Subject key identifier:   D3:DE:6B:E4:BC:0C:D7:67:D3:D9:A2:57:6B:E4:5D:B0:FF:E7:06:EC
Certificate issuer:       /CN=4D3D5BA9F9B5356D2A4244549680670908498017
Certificate serial:       6E3B68B2B92C04BEA6AACE78F27C03E431C2D3A5
Authority key identifier: 4D:3D:5B:A9:F9:B5:35:6D:2A:42:44:54:96:80:67:09:08:49:80:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D3D5BA9F9B5356D2A4244549680670908498017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/3138372e31372e3138382e302f32342d3234203d3e203238323634.roa
Signing time:             Fri 06 Mar 2026 10:46:16 +0000
ROA not before:           Fri 06 Mar 2026 10:41:16 +0000
ROA not after:            Fri 05 Mar 2027 10:46:16 +0000
asID:                     28264
IP address blocks:        187.17.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/4D3D5BA9F9B5356D2A4244549680670908498017.crl
                          rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/4D3D5BA9F9B5356D2A4244549680670908498017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D3D5BA9F9B5356D2A4244549680670908498017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 05:35:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:3b:68:b2:b9:2c:04:be:a6:aa:ce:78:f2:7c:03:e4:31:c2:d3:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D3D5BA9F9B5356D2A4244549680670908498017
        Validity
            Not Before: Mar  6 10:41:16 2026 GMT
            Not After : Mar  5 10:46:16 2027 GMT
        Subject: CN=D3DE6BE4BC0CD767D3D9A2576BE45DB0FFE706EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a4:54:61:04:a9:0b:8b:2c:0f:9d:97:9c:7d:
                    70:cd:ca:40:2e:6d:b7:f4:5a:de:7d:c1:38:65:26:
                    ef:96:6b:93:7a:b7:74:b0:d3:b5:b2:4b:36:dd:3e:
                    90:9f:42:70:fb:26:ee:9c:a6:b0:82:87:0b:a8:b7:
                    de:11:87:9d:74:7b:b8:b0:04:aa:d7:d7:c2:25:6c:
                    cf:f3:bb:3c:7a:90:26:41:84:ee:76:aa:39:b1:53:
                    5b:16:fb:0c:f3:43:1f:5f:28:d7:e4:3c:24:95:ed:
                    96:51:a2:f5:3c:6b:7f:a5:8c:69:e1:f9:d3:df:68:
                    bb:d4:3a:a9:5a:91:c7:cd:f6:43:de:df:cd:d6:9a:
                    35:8d:a5:50:d1:f7:80:94:fe:f1:f2:53:a1:ac:b7:
                    7b:3b:b4:a3:09:34:45:c8:69:0a:84:05:6a:ac:04:
                    7e:a7:39:bf:9b:3a:a1:ca:f8:a3:df:df:7d:d7:5a:
                    28:e1:40:77:82:f1:7c:32:44:ab:5e:14:93:21:e3:
                    5c:7a:00:01:20:2a:ec:f7:23:15:0e:3b:7b:ff:90:
                    29:bb:31:4f:2a:6d:36:73:bb:ca:3b:d7:c2:db:d5:
                    6b:47:4b:95:ed:95:d8:93:cc:b7:83:c8:b1:de:17:
                    4a:b1:3e:9a:42:eb:4f:63:a3:c5:e4:2c:4d:2b:d5:
                    29:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:DE:6B:E4:BC:0C:D7:67:D3:D9:A2:57:6B:E4:5D:B0:FF:E7:06:EC
            X509v3 Authority Key Identifier:
                keyid:4D:3D:5B:A9:F9:B5:35:6D:2A:42:44:54:96:80:67:09:08:49:80:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/4D3D5BA9F9B5356D2A4244549680670908498017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D3D5BA9F9B5356D2A4244549680670908498017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/3138372e31372e3138382e302f32342d3234203d3e203238323634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.17.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:2f:f8:e4:d3:de:e3:39:68:8d:5e:4f:12:9f:5a:cf:b8:f0:
         c2:49:8f:b8:5c:9c:7c:0e:52:7d:ef:37:ea:a4:5f:86:fc:d2:
         2d:31:1a:2b:64:6c:8b:f7:22:5b:5c:3e:94:80:0c:03:1c:c7:
         f9:95:b7:fe:00:28:98:55:a2:b3:c7:a7:73:1b:c2:fb:e2:0d:
         86:da:85:0c:5f:d1:64:07:04:f5:25:23:5f:a1:37:33:2f:10:
         b4:c8:c2:5d:6c:5b:dc:e8:ed:71:d5:4a:2e:ef:be:b8:d3:f5:
         00:a6:76:48:10:d6:ec:c2:41:14:95:bd:ef:e8:bb:37:0a:ac:
         32:5a:90:dd:9b:ac:f3:f8:99:5b:50:cc:ab:67:2e:93:33:f2:
         df:10:8d:a6:55:fa:8a:39:3a:34:00:a6:0c:dd:67:af:0a:4b:
         fb:b8:9b:a8:0a:dc:46:b7:1f:ad:eb:64:ac:de:3e:a8:8e:db:
         07:ea:24:a3:62:39:37:f3:41:42:46:29:67:0f:f5:d6:e1:d8:
         37:56:42:38:07:0b:01:1e:b0:70:49:53:4f:45:37:6a:de:d0:
         b7:fe:32:3d:75:2b:33:66:9d:b0:62:cc:da:d6:b1:79:89:c3:
         fb:b5:06:f2:82:e1:bb:88:71:a0:4b:ca:ff:f8:73:97:97:83:
         f6:35:99:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:04:23 2026 by rpki-client