Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3138362e3235312e3133372e302f32342d3234203d3e203533323235.roa
File:                     3138362e3235312e3133372e302f32342d3234203d3e203533323235.roa (raw, json)
Hash identifier:          yehKEUgZhuB+dYmlF+K3vAmdQ031ZK62TfLX3IIKRzs=
Subject key identifier:   F2:7B:7D:03:03:59:55:09:32:F2:7B:1B:7F:79:31:02:B5:07:DE:BC
Certificate issuer:       /CN=3CA849ABB60256D8A6B30F907763AEF9CB3912EF
Certificate serial:       68B27DE4E3F39AD1685E549AC05F6AB1E1890FCC
Authority key identifier: 3C:A8:49:AB:B6:02:56:D8:A6:B3:0F:90:77:63:AE:F9:CB:39:12:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3138362e3235312e3133372e302f32342d3234203d3e203533323235.roa
Signing time:             Wed 13 May 2026 12:40:21 +0000
ROA not before:           Wed 13 May 2026 12:35:21 +0000
ROA not after:            Wed 12 May 2027 12:40:21 +0000
asID:                     53225
IP address blocks:        186.251.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.crl
                          rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 00:56:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:b2:7d:e4:e3:f3:9a:d1:68:5e:54:9a:c0:5f:6a:b1:e1:89:0f:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CA849ABB60256D8A6B30F907763AEF9CB3912EF
        Validity
            Not Before: May 13 12:35:21 2026 GMT
            Not After : May 12 12:40:21 2027 GMT
        Subject: CN=F27B7D030359550932F27B1B7F793102B507DEBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3b:68:97:9a:78:82:51:9c:65:aa:00:2e:67:
                    a1:ce:9c:7d:cb:ad:1b:6e:c2:37:5a:17:3c:7b:35:
                    21:2f:c7:8c:85:cb:1a:7d:75:a4:83:86:fe:61:51:
                    e1:16:c8:4c:ee:63:8b:f1:62:55:43:f5:82:1c:5a:
                    f9:61:cc:5d:f1:55:12:c9:a8:c2:52:27:c5:d1:73:
                    cc:fe:09:43:a6:c9:d4:82:28:33:a1:59:75:8f:2d:
                    52:ec:7c:12:c4:c9:90:be:53:f4:c1:69:e6:d8:db:
                    f9:43:b7:21:a3:88:de:1b:e1:e5:b6:28:68:5c:f2:
                    7a:85:ae:75:dd:59:2c:4e:c0:2c:10:46:30:8c:ee:
                    13:0c:57:0d:18:f6:81:8f:2b:27:ba:10:0d:09:d9:
                    dc:dc:5a:38:4b:d3:a2:fd:f9:ae:b1:56:6c:50:86:
                    37:a0:a9:19:dd:94:52:51:66:0f:7d:73:1b:17:bf:
                    98:67:02:5e:20:53:ca:59:de:08:b0:c3:68:74:42:
                    a8:8d:4a:6f:39:57:36:da:05:a0:7c:ce:60:8a:6a:
                    59:39:d3:36:74:11:e8:96:b3:b3:e0:8c:28:6c:4c:
                    99:e7:e2:0a:63:a8:88:24:e8:3e:7b:7f:26:1e:0b:
                    ba:87:c7:db:b6:45:d5:3d:69:df:94:b5:aa:65:bd:
                    e3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:7B:7D:03:03:59:55:09:32:F2:7B:1B:7F:79:31:02:B5:07:DE:BC
            X509v3 Authority Key Identifier:
                keyid:3C:A8:49:AB:B6:02:56:D8:A6:B3:0F:90:77:63:AE:F9:CB:39:12:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3138362e3235312e3133372e302f32342d3234203d3e203533323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:32:f0:6a:f0:a8:48:d5:d1:a7:93:f9:51:f0:e6:63:fe:e0:
         c2:50:70:cf:c5:5b:32:9f:92:13:95:37:a0:f5:d3:4a:82:e8:
         45:94:e5:d5:f6:f2:2b:a1:62:57:78:ad:b3:14:bd:ab:00:32:
         e4:28:72:4b:a8:52:55:cf:f3:00:44:d9:cb:97:9b:c3:52:9c:
         03:56:6c:c2:46:83:b6:09:c3:74:a2:d3:1c:6f:56:66:d4:49:
         c6:77:1b:5a:11:d6:fc:06:55:2c:98:66:3c:47:c8:a5:a8:23:
         9a:f8:bd:ce:2e:ad:de:77:09:8d:47:14:56:f9:ab:07:f1:73:
         4b:ff:13:c3:d7:85:d2:0d:45:b3:e9:84:d8:ff:9e:25:dd:a8:
         b6:6a:19:ae:95:da:85:c8:3d:4f:21:5f:9e:30:6c:03:08:40:
         3e:0c:53:44:d0:ee:a2:81:e7:7e:22:c3:d4:15:c3:ea:d2:1f:
         75:b3:a5:be:59:b3:55:5b:b5:ad:36:a5:20:82:01:c1:1f:fc:
         52:62:dd:84:66:84:e1:78:9a:5c:88:1b:13:22:56:b7:bd:b4:
         d7:9b:3c:c3:71:95:c0:16:e2:87:31:7b:ca:c4:5e:bb:69:92:
         50:db:05:d7:d4:92:1b:4d:a6:b6:c1:98:e2:a1:a4:54:1f:4f:
         34:27:b5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:56:44 2026 by rpki-client