Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3138362e3235312e3134312e302f32342d3234203d3e203533323235.roa
File:                     3138362e3235312e3134312e302f32342d3234203d3e203533323235.roa (raw, json)
Hash identifier:          9K35yjfF1J+G7PJsQjvRwfx5+F07KRQTAEngC9HM7t0=
Subject key identifier:   3A:96:7F:5B:D8:78:81:58:A4:DC:EE:44:76:EA:1D:F3:74:AA:BD:F2
Certificate issuer:       /CN=3CA849ABB60256D8A6B30F907763AEF9CB3912EF
Certificate serial:       20423B2239CE8B04BC637ABEF61634563574D9CC
Authority key identifier: 3C:A8:49:AB:B6:02:56:D8:A6:B3:0F:90:77:63:AE:F9:CB:39:12:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3138362e3235312e3134312e302f32342d3234203d3e203533323235.roa
Signing time:             Wed 13 May 2026 12:41:19 +0000
ROA not before:           Wed 13 May 2026 12:36:19 +0000
ROA not after:            Wed 12 May 2027 12:41:19 +0000
asID:                     53225
IP address blocks:        186.251.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.crl
                          rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 00:56:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:42:3b:22:39:ce:8b:04:bc:63:7a:be:f6:16:34:56:35:74:d9:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CA849ABB60256D8A6B30F907763AEF9CB3912EF
        Validity
            Not Before: May 13 12:36:19 2026 GMT
            Not After : May 12 12:41:19 2027 GMT
        Subject: CN=3A967F5BD8788158A4DCEE4476EA1DF374AABDF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8f:f8:da:34:19:06:3f:75:2e:98:1d:13:c8:
                    34:29:e3:7f:61:99:5a:d1:c5:78:cf:7f:c2:99:2a:
                    ab:98:88:8a:4a:7b:ef:87:5f:7e:c1:5b:9e:ba:51:
                    7c:bc:da:fa:fa:aa:ee:17:3c:42:68:da:aa:bc:17:
                    11:5d:ca:bb:20:81:d9:ac:8f:dc:c4:ea:e9:4c:1c:
                    85:2f:78:9a:ea:d8:4c:98:a4:77:11:ae:f1:9d:d8:
                    a1:cd:ca:eb:e5:16:25:be:e1:b0:94:d1:47:09:f8:
                    f1:e8:7b:9b:ee:6a:84:10:5f:8b:67:7b:11:91:6b:
                    8d:cb:1e:52:4f:12:ee:50:cb:8a:62:a9:a2:28:83:
                    02:39:27:ca:26:b4:fa:0e:8d:dc:34:60:e8:97:35:
                    9f:52:ff:fa:2a:e7:5e:bf:7a:4c:5e:7b:4e:b8:59:
                    02:a3:36:ca:33:b3:46:2a:68:16:2d:5b:60:db:b4:
                    97:18:22:e0:02:8a:9b:80:af:7f:9f:af:4f:ba:1b:
                    93:4e:a6:05:04:f7:95:39:98:af:49:c8:ab:bb:cc:
                    37:70:76:19:4a:de:0f:5e:27:a9:e4:09:20:88:8e:
                    2a:3f:58:2c:64:d6:90:cc:94:a0:64:77:e8:83:a3:
                    35:f5:81:65:ee:9e:4f:70:06:a3:74:d0:f9:f3:12:
                    91:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:96:7F:5B:D8:78:81:58:A4:DC:EE:44:76:EA:1D:F3:74:AA:BD:F2
            X509v3 Authority Key Identifier:
                keyid:3C:A8:49:AB:B6:02:56:D8:A6:B3:0F:90:77:63:AE:F9:CB:39:12:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3138362e3235312e3134312e302f32342d3234203d3e203533323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:9b:b9:26:ee:ff:7e:5c:be:2b:60:6b:24:5e:a4:18:c5:2d:
         7c:12:d2:55:f4:03:ab:81:de:53:60:e1:07:60:42:e8:a1:6a:
         81:2e:fb:36:00:c9:b7:c6:99:71:f6:12:5c:dc:38:02:e6:4b:
         a6:8c:ad:15:4e:d5:a4:58:22:90:c7:0d:82:d3:51:7d:70:53:
         17:39:3b:cb:de:b7:58:bb:ef:b4:fe:eb:25:46:22:8d:b4:92:
         a7:cd:af:40:a9:69:20:df:94:ae:8b:11:72:0b:e5:32:14:a5:
         28:df:43:6f:5e:e6:c6:d2:85:8b:f2:a7:10:28:71:0a:5d:93:
         eb:d3:29:65:b9:b9:db:d9:7b:65:0c:2f:8a:88:65:26:c4:47:
         65:bb:e9:8d:84:07:88:63:f9:5b:36:cc:e6:6d:cf:90:49:ce:
         e6:c4:aa:9f:b3:04:37:30:e4:c3:39:6f:cb:c4:1c:0d:68:b1:
         c0:a9:9e:ed:ae:38:90:37:6d:4b:27:3b:66:e6:bc:05:bc:7d:
         66:f0:99:de:6d:9b:fe:25:7a:38:2e:90:2f:c6:36:07:16:0a:
         a2:cd:54:e3:31:c1:78:b5:5f:89:5c:2e:bb:4b:ac:18:a7:c5:
         ed:c1:d4:22:96:81:a6:8e:e6:99:ca:69:b5:a4:d4:0a:a3:80:
         07:36:7d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:56:46 2026 by rpki-client