Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/3138372e38342e39362e302f32302d3234203d3e2038303535.roa
File:                     3138372e38342e39362e302f32302d3234203d3e2038303535.roa (raw, json)
Hash identifier:          LV+/fj6k6BwWSBzwtRSHmlXlTcH9RqX5MYs/9X3JAg8=
Subject key identifier:   4E:7D:AC:EE:CE:28:49:A1:2D:19:54:A9:0A:21:3B:19:98:3A:7D:E5
Certificate issuer:       /CN=E3A05660BB6F81841BB49DE532F64F592B23928E
Certificate serial:       3A68DA15538911FA86128680356C691468F26BA8
Authority key identifier: E3:A0:56:60:BB:6F:81:84:1B:B4:9D:E5:32:F6:4F:59:2B:23:92:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A05660BB6F81841BB49DE532F64F592B23928E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/3138372e38342e39362e302f32302d3234203d3e2038303535.roa
Signing time:             Fri 20 Mar 2026 15:30:32 +0000
ROA not before:           Fri 20 Mar 2026 15:25:32 +0000
ROA not after:            Fri 19 Mar 2027 15:30:32 +0000
asID:                     8055
IP address blocks:        187.84.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/E3A05660BB6F81841BB49DE532F64F592B23928E.crl
                          rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/E3A05660BB6F81841BB49DE532F64F592B23928E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A05660BB6F81841BB49DE532F64F592B23928E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 16:43:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:68:da:15:53:89:11:fa:86:12:86:80:35:6c:69:14:68:f2:6b:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3A05660BB6F81841BB49DE532F64F592B23928E
        Validity
            Not Before: Mar 20 15:25:32 2026 GMT
            Not After : Mar 19 15:30:32 2027 GMT
        Subject: CN=4E7DACEECE2849A12D1954A90A213B19983A7DE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:04:c9:cf:fd:2d:19:c0:27:da:a8:6e:55:71:
                    bb:da:c6:e6:5a:8a:d1:28:ab:78:58:b4:cd:48:56:
                    a0:65:aa:f2:45:57:b0:a7:6f:f3:c3:6d:2d:1b:29:
                    c7:71:f1:be:0d:d8:ad:a6:fd:6f:ec:0e:19:ac:03:
                    db:6e:6a:63:6f:66:30:bc:f4:b4:a4:4d:87:27:19:
                    7c:af:8c:4f:12:0a:e9:23:90:f7:cc:bb:a3:08:68:
                    7b:be:e3:62:63:bd:be:3d:6b:34:d8:05:db:a9:c5:
                    5a:2b:9b:d9:33:ac:40:2e:71:26:a5:a7:a1:71:f8:
                    2d:bf:1e:5f:61:66:8a:a5:93:15:41:b2:75:05:f5:
                    12:ce:4c:7f:e2:9f:54:49:15:47:4d:e3:62:5e:44:
                    b7:15:57:8e:d5:7c:34:75:37:ff:db:bb:96:fe:60:
                    34:fa:ed:21:22:a0:4d:a9:35:b3:4d:a8:50:df:15:
                    49:ee:8d:6d:02:3d:0d:7c:13:39:08:de:45:63:78:
                    ce:04:9b:e2:69:bb:13:55:1f:89:27:40:09:ae:9d:
                    35:d9:63:b3:f5:c9:5d:c4:b8:b4:77:15:60:1b:99:
                    70:2f:00:4d:dc:3f:e8:6c:98:5f:2e:4d:66:99:10:
                    70:a6:32:f1:be:6d:15:ac:6b:37:3e:80:bd:b9:56:
                    02:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:7D:AC:EE:CE:28:49:A1:2D:19:54:A9:0A:21:3B:19:98:3A:7D:E5
            X509v3 Authority Key Identifier:
                keyid:E3:A0:56:60:BB:6F:81:84:1B:B4:9D:E5:32:F6:4F:59:2B:23:92:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/E3A05660BB6F81841BB49DE532F64F592B23928E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A05660BB6F81841BB49DE532F64F592B23928E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/3138372e38342e39362e302f32302d3234203d3e2038303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         70:91:14:28:1a:77:59:46:b0:53:f6:6f:a3:34:cb:f0:88:9c:
         0e:e5:33:05:f0:15:63:12:c5:e2:4e:b1:f1:8e:6d:5f:04:c7:
         4e:b1:ed:89:42:bb:3b:25:5f:22:e9:ae:4a:6b:c2:81:77:f6:
         cb:bc:1a:c6:a4:12:2a:f0:ae:e4:a8:21:43:b3:59:0c:96:17:
         44:76:a3:a8:90:ec:4b:89:11:2c:c4:16:68:15:eb:28:f4:66:
         79:86:88:58:6e:08:10:56:e3:ee:72:e2:f6:c1:eb:c4:9f:f2:
         21:ac:2d:19:34:02:13:e1:c6:56:7b:d1:12:6f:8e:5f:52:bb:
         bd:8d:64:9f:ff:0e:65:e2:1d:d0:8f:14:63:b1:50:3b:ed:88:
         3c:41:a8:80:1a:43:3c:42:34:79:bc:15:fd:0d:9a:6a:aa:e6:
         ba:3a:fc:0b:56:da:bc:c7:11:2d:36:31:f6:d4:e2:63:17:79:
         fd:7c:dc:b2:5e:68:55:ef:0d:5f:2c:f2:cf:a8:b1:c8:72:99:
         fe:9d:b7:91:5b:5d:0b:23:aa:99:ef:31:0b:27:dd:47:fd:12:
         d1:28:0d:87:3d:15:6d:f7:f1:cc:89:5a:71:f5:3a:38:c8:fe:
         33:46:16:34:56:ba:4a:cb:48:a8:5e:26:6e:6f:6c:d3:f2:3b:
         7a:80:53:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:06:43 2026 by rpki-client