Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3138362e3235312e3132382e302f32342d3234203d3e203533323235.roa
File:                     3138362e3235312e3132382e302f32342d3234203d3e203533323235.roa (raw, json)
Hash identifier:          u0SuqMPYgQOR0eRLpGuaFhjtLWdr2eW7MXevnFfOAa0=
Subject key identifier:   C4:44:B6:EB:57:6C:6F:9F:5B:4E:57:99:05:72:AE:22:1D:E5:D2:3D
Certificate issuer:       /CN=3CA849ABB60256D8A6B30F907763AEF9CB3912EF
Certificate serial:       32AD3EECAC43E2EF63B7A67C761E422EF2A4D904
Authority key identifier: 3C:A8:49:AB:B6:02:56:D8:A6:B3:0F:90:77:63:AE:F9:CB:39:12:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3138362e3235312e3132382e302f32342d3234203d3e203533323235.roa
Signing time:             Wed 13 May 2026 12:39:09 +0000
ROA not before:           Wed 13 May 2026 12:34:09 +0000
ROA not after:            Wed 12 May 2027 12:39:09 +0000
asID:                     53225
IP address blocks:        186.251.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.crl
                          rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 00:56:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:ad:3e:ec:ac:43:e2:ef:63:b7:a6:7c:76:1e:42:2e:f2:a4:d9:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CA849ABB60256D8A6B30F907763AEF9CB3912EF
        Validity
            Not Before: May 13 12:34:09 2026 GMT
            Not After : May 12 12:39:09 2027 GMT
        Subject: CN=C444B6EB576C6F9F5B4E57990572AE221DE5D23D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8b:75:05:cf:b9:2b:bb:b7:10:cc:e7:87:1a:
                    8a:08:86:a9:d5:c0:71:02:bd:d8:25:5b:a2:e7:dd:
                    cd:cc:eb:15:bd:50:31:bd:79:25:ad:a1:ae:a4:84:
                    0e:a5:37:8a:79:15:f5:f3:ea:47:64:72:a5:1d:f9:
                    2b:28:e9:87:87:be:24:a9:a0:86:2b:c1:71:8a:58:
                    99:f8:f0:42:99:35:c6:87:77:64:fd:b3:ef:72:db:
                    11:27:19:b4:76:b4:80:6b:08:a6:7e:6d:9b:3f:6b:
                    1e:8c:26:4c:1d:50:c8:b8:5d:7f:7d:f9:28:60:67:
                    65:ec:06:47:0e:86:01:a3:8b:6b:7a:72:08:3d:b5:
                    0c:63:07:e9:aa:25:c7:a4:b8:85:10:6b:4f:e7:ea:
                    15:24:90:fc:c4:9e:ef:4c:6f:94:e9:6f:fa:7c:df:
                    e7:40:dc:97:1a:cc:ef:69:4f:79:2e:83:a8:02:3e:
                    3e:2f:24:3a:2c:d6:70:97:10:a9:75:e4:6f:0b:87:
                    c2:8b:c2:8e:21:2f:0f:0c:70:0e:73:71:03:52:1b:
                    63:1c:df:7b:ec:09:86:e7:28:f8:2c:9c:b1:07:ca:
                    4d:a9:8a:e0:e5:1d:ea:87:76:e7:3a:cb:f6:da:59:
                    90:7b:c8:74:7c:8d:77:26:f0:09:b5:63:0f:07:52:
                    df:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:44:B6:EB:57:6C:6F:9F:5B:4E:57:99:05:72:AE:22:1D:E5:D2:3D
            X509v3 Authority Key Identifier:
                keyid:3C:A8:49:AB:B6:02:56:D8:A6:B3:0F:90:77:63:AE:F9:CB:39:12:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3138362e3235312e3132382e302f32342d3234203d3e203533323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:1a:0d:dd:8b:ba:86:3b:26:9e:ec:cf:77:f4:b8:25:29:dc:
         ee:f2:ac:5a:04:88:1a:d0:0c:67:18:16:7c:1a:e4:06:1a:5e:
         b2:7a:a2:81:4c:7b:66:2a:46:11:62:49:32:e5:78:9e:42:08:
         47:c6:e0:20:6c:ba:20:89:05:26:c7:31:80:d4:c2:4a:6b:44:
         44:d7:80:2e:b3:b9:4f:44:82:49:e4:48:a9:de:57:94:e6:02:
         6a:41:ce:fb:41:d7:c4:e1:b0:5b:18:b8:00:61:b5:09:e6:60:
         d2:3b:5b:9e:c6:50:1e:90:b1:33:cf:c9:e2:ee:8e:42:d0:81:
         ba:57:03:00:9c:b0:2b:0c:df:05:53:5b:b2:5b:3c:ed:69:0a:
         51:c2:96:70:53:95:f1:a4:65:5e:be:1d:30:75:c4:b0:06:53:
         7f:c7:ae:79:f1:95:4b:3d:2d:7a:31:9a:dc:27:f5:d8:ee:10:
         7c:98:7e:86:47:e9:c7:9c:dd:c2:29:d1:97:e1:30:01:36:5d:
         32:30:08:77:54:7d:42:2f:ec:cf:93:8a:15:8f:41:f1:2d:8a:
         f5:8f:b1:2a:f2:e9:a7:a4:35:f8:8d:83:e7:0f:9c:bf:d8:27:
         4e:9f:f6:40:fd:99:bf:b3:5d:a1:75:37:52:ab:da:5e:b9:65:
         50:98:83:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:56:43 2026 by rpki-client