Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3138362e3235312e3133362e302f32342d3234203d3e203533323235.roa
File:                     3138362e3235312e3133362e302f32342d3234203d3e203533323235.roa (raw, json)
Hash identifier:          grNQCy/IvPBkKu5o0takCiNbIWyoI5xsjbFCYdaIWSU=
Subject key identifier:   CD:60:C6:AF:E6:23:E1:73:4E:66:A9:EC:5F:B9:EF:92:D8:0D:36:2B
Certificate issuer:       /CN=3CA849ABB60256D8A6B30F907763AEF9CB3912EF
Certificate serial:       76FFE89E9D5D7492B81ABA440BA2A408AB7515A2
Authority key identifier: 3C:A8:49:AB:B6:02:56:D8:A6:B3:0F:90:77:63:AE:F9:CB:39:12:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3138362e3235312e3133362e302f32342d3234203d3e203533323235.roa
Signing time:             Wed 13 May 2026 12:40:14 +0000
ROA not before:           Wed 13 May 2026 12:35:14 +0000
ROA not after:            Wed 12 May 2027 12:40:14 +0000
asID:                     53225
IP address blocks:        186.251.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.crl
                          rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 00:56:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:ff:e8:9e:9d:5d:74:92:b8:1a:ba:44:0b:a2:a4:08:ab:75:15:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CA849ABB60256D8A6B30F907763AEF9CB3912EF
        Validity
            Not Before: May 13 12:35:14 2026 GMT
            Not After : May 12 12:40:14 2027 GMT
        Subject: CN=CD60C6AFE623E1734E66A9EC5FB9EF92D80D362B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b6:62:88:e8:e7:97:e2:27:3b:1e:47:5d:f6:
                    a7:d4:7d:78:f3:65:18:c4:cf:75:de:75:c3:5b:ed:
                    69:31:b9:57:ed:47:8d:36:e5:73:15:c9:0c:f3:06:
                    a7:e5:ae:3f:a1:d9:2d:db:c1:14:d3:86:fd:e1:c9:
                    c5:7c:d1:3a:9f:97:50:7b:e2:fc:19:f6:ac:ae:55:
                    09:63:46:5d:c8:3a:50:e9:6d:b3:11:74:09:43:ba:
                    3a:ac:04:32:10:e7:30:0e:4a:fd:b8:c4:5c:89:66:
                    fd:60:83:28:85:17:b6:94:59:22:6e:89:4b:b2:49:
                    e6:6d:bb:23:f6:09:bd:07:f3:d7:26:62:9a:da:e7:
                    5a:d9:c8:ea:1d:e7:88:24:5e:b7:ef:48:4a:a2:7c:
                    2d:cc:98:2b:9a:2e:ad:bf:7a:7e:13:9c:a5:99:d7:
                    64:56:67:94:3b:ba:cc:f5:b6:82:fb:40:9d:58:12:
                    66:1b:f9:c5:44:fc:91:88:55:15:50:04:48:57:e9:
                    6c:71:57:b8:f4:d7:08:25:c0:e2:05:c8:c2:ab:13:
                    52:e9:e5:82:46:6d:28:35:11:a7:71:18:da:f0:76:
                    56:fa:4f:43:fa:ae:18:3f:02:aa:8a:04:2d:0a:ba:
                    12:ce:8a:89:49:0c:5d:63:77:c0:71:d4:06:88:d0:
                    59:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:60:C6:AF:E6:23:E1:73:4E:66:A9:EC:5F:B9:EF:92:D8:0D:36:2B
            X509v3 Authority Key Identifier:
                keyid:3C:A8:49:AB:B6:02:56:D8:A6:B3:0F:90:77:63:AE:F9:CB:39:12:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3138362e3235312e3133362e302f32342d3234203d3e203533323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:0f:90:ca:1c:ab:bb:05:7f:48:06:ab:c7:10:5a:b8:28:27:
         6d:2d:bc:71:59:8e:01:60:2a:cb:20:29:73:c2:4d:7e:dd:76:
         46:cd:8d:0a:52:06:17:6e:df:a0:f7:42:b7:18:b0:78:2c:f1:
         09:24:79:5a:8e:33:90:4b:c9:21:d3:f0:ac:69:03:7b:12:e1:
         cd:06:fe:66:b8:25:ec:c5:ed:92:e0:0b:b5:da:d3:8f:5f:9b:
         25:ca:89:65:9a:62:dc:36:a0:e1:fb:a6:34:b4:98:1f:58:a5:
         b9:68:23:ec:17:05:ce:02:37:c0:0e:1c:64:45:9c:f1:29:5f:
         e3:cc:2e:b7:98:45:03:d8:4d:71:7b:80:c0:a2:05:ea:ec:2c:
         db:cb:10:3a:2b:c7:80:ee:76:30:63:d2:db:0b:d9:5f:2b:8e:
         59:4f:a6:d5:36:ee:ea:f3:72:0e:ca:67:e2:3b:38:51:cb:77:
         b2:65:d2:93:14:22:49:c4:bf:ae:b2:99:66:2d:6a:a5:a0:bb:
         c2:f4:76:89:01:09:88:fd:7d:c3:13:eb:46:06:90:44:83:30:
         8f:e9:2c:3b:b9:f2:16:11:2a:e6:f7:5b:73:db:6a:6b:27:21:
         d6:db:40:71:54:c7:fb:1a:20:a9:ea:9f:b3:2d:ca:cf:69:20:
         c3:79:09:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:56:43 2026 by rpki-client