Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/3138362e3231312e39362e302f32302d3234203d3e203533303632.roa
File:                     3138362e3231312e39362e302f32302d3234203d3e203533303632.roa (raw, json)
Hash identifier:          1JwePadF+PHKoVHKBOdaOWkg4Rk9K9hgQtUh0Xpq2w8=
Subject key identifier:   A9:6A:0D:6F:08:9C:CA:80:8E:39:2C:63:A1:CD:A6:43:AC:B8:9D:DA
Certificate issuer:       /CN=D23A9AB74382168B4B0E0F5772B4F25A461F8B60
Certificate serial:       6455C8B6BB51A768DEDCCE72A1A3EE0FF1310DB8
Authority key identifier: D2:3A:9A:B7:43:82:16:8B:4B:0E:0F:57:72:B4:F2:5A:46:1F:8B:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23A9AB74382168B4B0E0F5772B4F25A461F8B60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/3138362e3231312e39362e302f32302d3234203d3e203533303632.roa
Signing time:             Mon 02 Mar 2026 20:34:37 +0000
ROA not before:           Mon 02 Mar 2026 20:29:37 +0000
ROA not after:            Mon 01 Mar 2027 20:34:37 +0000
asID:                     53062
IP address blocks:        186.211.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/D23A9AB74382168B4B0E0F5772B4F25A461F8B60.crl
                          rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/D23A9AB74382168B4B0E0F5772B4F25A461F8B60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23A9AB74382168B4B0E0F5772B4F25A461F8B60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 13:08:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:55:c8:b6:bb:51:a7:68:de:dc:ce:72:a1:a3:ee:0f:f1:31:0d:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D23A9AB74382168B4B0E0F5772B4F25A461F8B60
        Validity
            Not Before: Mar  2 20:29:37 2026 GMT
            Not After : Mar  1 20:34:37 2027 GMT
        Subject: CN=A96A0D6F089CCA808E392C63A1CDA643ACB89DDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:45:53:fe:af:64:31:33:25:6a:41:0d:c4:f0:
                    26:84:b5:99:6f:8c:8b:29:18:47:bb:8f:01:fc:8c:
                    dc:a4:eb:c6:9c:ca:4f:44:3e:e8:c0:72:05:d0:75:
                    e6:37:13:7b:dc:d6:d5:25:90:44:9e:89:a8:85:36:
                    78:6e:27:f4:69:a1:6d:64:8e:13:83:d3:87:fb:c3:
                    44:87:44:a8:89:88:07:8d:06:3e:ff:75:38:2b:74:
                    bf:05:f1:52:83:bd:ec:35:d5:b6:55:d3:86:8c:8d:
                    9c:0a:18:b8:05:a7:2b:c0:bc:97:f5:99:56:bf:32:
                    8d:31:15:c6:19:e7:da:5c:3a:e9:b7:b3:20:c5:d0:
                    49:d6:73:a5:1d:36:45:b8:86:5b:2c:57:78:a5:d5:
                    51:e8:8d:87:1f:c8:65:7c:a5:70:af:61:e1:ed:e0:
                    ba:06:bf:66:25:88:f0:5c:96:f3:17:7f:b6:cc:4d:
                    f7:19:f9:c9:2b:52:d7:99:dc:d1:f4:d9:09:df:73:
                    12:c4:db:22:3d:90:02:71:4b:0b:b1:1e:5c:b1:79:
                    b0:84:db:e2:e8:a5:d2:55:c7:cb:f1:48:4d:37:b1:
                    fa:c8:f5:22:be:94:40:af:57:0c:c8:5e:df:d9:27:
                    bb:8c:31:8f:a3:79:f1:c3:b0:03:2f:35:a6:fe:0b:
                    53:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:6A:0D:6F:08:9C:CA:80:8E:39:2C:63:A1:CD:A6:43:AC:B8:9D:DA
            X509v3 Authority Key Identifier:
                keyid:D2:3A:9A:B7:43:82:16:8B:4B:0E:0F:57:72:B4:F2:5A:46:1F:8B:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/D23A9AB74382168B4B0E0F5772B4F25A461F8B60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23A9AB74382168B4B0E0F5772B4F25A461F8B60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/3138362e3231312e39362e302f32302d3234203d3e203533303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.211.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8e:bf:bf:0f:13:b7:dd:e2:19:14:16:75:4f:ba:94:97:53:d9:
         c2:30:11:59:1c:14:60:c9:21:b4:4b:ec:22:6e:16:67:61:49:
         4b:21:ad:df:14:dc:40:ed:90:9f:b6:5b:85:36:8e:f6:31:14:
         98:e4:3a:4c:de:6e:58:7d:ef:a5:d7:c9:b8:3e:eb:24:25:e8:
         f4:04:2a:67:f2:b1:85:17:ff:92:72:b3:b5:3f:40:39:e6:ca:
         59:a0:a2:ea:81:0a:ac:61:ec:0c:b6:27:90:f2:3d:ab:cb:b5:
         8c:f7:04:94:9a:e2:5d:97:9d:3e:d0:c9:7a:30:57:44:62:3a:
         1a:54:a6:09:fa:de:f0:95:54:8e:49:27:fd:ae:50:40:b2:e1:
         2a:23:1f:d2:bf:c1:d7:6f:5b:3a:e2:83:a8:76:23:e8:61:3c:
         59:a2:d6:cb:c2:a2:6d:eb:ef:e0:60:02:a0:ce:67:a5:04:23:
         07:3e:b9:a4:92:3c:88:a6:72:02:43:f9:cc:b2:76:92:17:dc:
         e0:26:b7:8d:e6:25:68:4b:33:a8:0d:d0:7f:fa:a9:fc:49:44:
         c5:5a:b5:f5:e4:d2:04:d0:b0:71:30:7e:c7:51:1e:d0:81:b1:
         09:45:0e:fa:73:a7:3d:93:6f:5b:24:5f:c9:84:b5:13:19:0f:
         9e:98:d3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:18:10 2026 by rpki-client