Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/3138362e3231392e3235322e302f32332d3332203d3e203631373435.roa
File:                     3138362e3231392e3235322e302f32332d3332203d3e203631373435.roa (raw, json)
Hash identifier:          2abFHT2AVZt3X/CgmxGlkjyZB5x9fTDuQHPOM8GNa8o=
Subject key identifier:   EC:F5:70:1D:BA:98:5C:1E:97:FC:E3:D6:EB:D2:19:B1:CC:34:77:CF
Certificate issuer:       /CN=103C563F76C2FC07B4105E588114D30162C3DB49
Certificate serial:       4A46B221B48675F9BD06707D3367EE7784A367B2
Authority key identifier: 10:3C:56:3F:76:C2:FC:07:B4:10:5E:58:81:14:D3:01:62:C3:DB:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/103C563F76C2FC07B4105E588114D30162C3DB49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/3138362e3231392e3235322e302f32332d3332203d3e203631373435.roa
Signing time:             Thu 03 Sep 2026 19:26:07 +0000
ROA not before:           Thu 03 Sep 2026 19:21:07 +0000
ROA not after:            Thu 02 Sep 2027 19:26:07 +0000
asID:                     61745
IP address blocks:        186.219.252.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/103C563F76C2FC07B4105E588114D30162C3DB49.crl
                          rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/103C563F76C2FC07B4105E588114D30162C3DB49.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/103C563F76C2FC07B4105E588114D30162C3DB49.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 03:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:46:b2:21:b4:86:75:f9:bd:06:70:7d:33:67:ee:77:84:a3:67:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=103C563F76C2FC07B4105E588114D30162C3DB49
        Validity
            Not Before: Sep  3 19:21:07 2026 GMT
            Not After : Sep  2 19:26:07 2027 GMT
        Subject: CN=ECF5701DBA985C1E97FCE3D6EBD219B1CC3477CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0f:dd:ab:96:10:aa:d7:0e:8c:16:53:79:b6:
                    98:b3:6c:de:b5:38:4f:02:3b:cb:ff:05:93:0f:94:
                    23:6b:fc:af:12:ab:d9:9c:cb:2b:14:61:f2:cb:e9:
                    6f:7e:72:19:8b:d4:09:48:98:17:0e:4a:48:44:db:
                    32:1a:7c:82:83:6a:9b:99:99:bf:09:eb:33:4f:72:
                    ef:ae:0e:62:23:a9:f1:f8:da:0d:fc:a0:ef:b1:79:
                    b5:2b:06:ad:78:0c:3c:a5:2f:99:59:75:13:45:7a:
                    01:52:23:2a:b4:a2:d7:da:dd:ab:3f:fc:a3:ff:4f:
                    36:b5:1e:c7:b1:71:2a:ef:5d:f7:4c:b3:0b:4e:4c:
                    35:d0:4c:12:59:38:4d:12:82:7e:1c:db:53:d9:9d:
                    73:04:43:03:b0:9e:9a:c9:5a:f2:85:77:a5:15:3b:
                    9b:8e:01:17:9c:9b:38:f9:08:8b:5d:45:57:16:28:
                    af:21:a5:5b:59:6e:0f:cb:17:12:e4:42:5f:47:5d:
                    c4:ad:6b:c8:e5:77:36:c9:b5:f4:1e:19:0e:70:0c:
                    45:57:f4:f0:c5:af:e6:70:b4:80:45:8f:0a:ed:19:
                    7c:a7:5d:17:ed:fa:3d:3d:3f:5c:79:c3:9f:19:15:
                    36:8f:8d:cf:5a:0c:ee:b8:52:e2:4d:2d:b9:eb:a8:
                    83:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F5:70:1D:BA:98:5C:1E:97:FC:E3:D6:EB:D2:19:B1:CC:34:77:CF
            X509v3 Authority Key Identifier:
                keyid:10:3C:56:3F:76:C2:FC:07:B4:10:5E:58:81:14:D3:01:62:C3:DB:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/103C563F76C2FC07B4105E588114D30162C3DB49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/103C563F76C2FC07B4105E588114D30162C3DB49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/3138362e3231392e3235322e302f32332d3332203d3e203631373435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:db:c9:f8:8d:b2:a8:b1:00:90:39:0b:47:2d:8a:24:c5:4f:
         cb:d6:4f:a3:84:ab:97:07:cb:b4:6c:68:f0:64:f8:d9:c9:ab:
         52:13:b0:b2:36:64:79:b7:51:95:5b:e0:a2:78:30:7b:7c:82:
         68:d2:03:ff:6e:2c:03:06:8a:49:b2:f5:9d:7b:4c:c2:5b:af:
         8a:c2:88:2d:18:95:e3:e5:b1:bc:e7:19:55:3c:21:58:59:30:
         b5:cd:67:6b:b0:27:f6:3f:4f:1a:0d:c6:91:7a:0b:ca:95:de:
         3f:45:c3:c9:52:ef:3e:a6:16:b0:32:d2:4e:47:46:e4:76:94:
         23:84:da:2a:66:75:9f:3f:57:b4:99:dd:18:68:18:79:61:94:
         e0:3e:8d:8a:9d:7a:76:dc:4b:f9:9e:78:62:b5:96:b1:66:7f:
         a2:57:74:59:fe:5b:35:f7:7d:6e:72:14:ef:c7:76:03:23:4a:
         1b:09:54:fc:78:ff:ed:d6:ff:26:80:5a:d3:77:f2:f3:d1:24:
         84:d2:2b:f5:f6:fe:06:da:3f:66:5a:9f:ea:b4:5b:67:26:8d:
         ee:95:11:93:41:5e:5f:bc:7c:f9:3d:a9:f5:92:cc:7f:bb:20:
         3c:7d:9a:a1:cd:d4:76:cc:fe:f7:00:ab:35:37:05:cd:3e:11:
         16:0a:85:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 06:23:17 2026 by rpki-client