Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/3138372e302e3233362e302f32332d3234203d3e203631363039.roa
File:                     3138372e302e3233362e302f32332d3234203d3e203631363039.roa (raw, json)
Hash identifier:          gWI1L1w2GpTKSNO92Za+iQzJHI0o6AFra9mb92rBZQY=
Subject key identifier:   63:EE:F1:CF:58:7A:DE:79:8E:66:18:F7:3F:56:24:1E:77:F8:56:4A
Certificate issuer:       /CN=9E3215C480F080F897B1BC29041417B2B2F0668D
Certificate serial:       68135025BB1BAC0790049C5F2846B2318289CA2F
Authority key identifier: 9E:32:15:C4:80:F0:80:F8:97:B1:BC:29:04:14:17:B2:B2:F0:66:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E3215C480F080F897B1BC29041417B2B2F0668D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/3138372e302e3233362e302f32332d3234203d3e203631363039.roa
Signing time:             Thu 30 Apr 2026 13:30:45 +0000
ROA not before:           Thu 30 Apr 2026 13:25:45 +0000
ROA not after:            Thu 29 Apr 2027 13:30:45 +0000
asID:                     61609
IP address blocks:        187.0.236.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/9E3215C480F080F897B1BC29041417B2B2F0668D.crl
                          rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/9E3215C480F080F897B1BC29041417B2B2F0668D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E3215C480F080F897B1BC29041417B2B2F0668D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 01:39:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:13:50:25:bb:1b:ac:07:90:04:9c:5f:28:46:b2:31:82:89:ca:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E3215C480F080F897B1BC29041417B2B2F0668D
        Validity
            Not Before: Apr 30 13:25:45 2026 GMT
            Not After : Apr 29 13:30:45 2027 GMT
        Subject: CN=63EEF1CF587ADE798E6618F73F56241E77F8564A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:13:d6:ef:c2:65:8f:ce:22:5d:bb:68:f0:28:
                    81:30:81:46:b1:b8:6f:15:cb:18:18:4e:03:03:74:
                    f6:87:fe:aa:bf:7f:ce:27:05:de:5b:47:b9:f6:d6:
                    e5:74:e7:69:ed:0d:5e:9e:89:f4:f5:62:da:9d:c7:
                    29:c4:4e:2d:05:ce:73:37:b8:f4:be:79:2a:b2:69:
                    c6:2d:94:58:36:1e:18:1e:50:03:6c:8a:85:ec:51:
                    20:c2:cd:68:d3:cd:f8:b4:86:b1:be:7b:c0:7b:b6:
                    d7:dc:09:ea:51:48:2c:64:2b:b0:96:f4:9c:7c:6c:
                    85:06:81:6c:38:60:a8:8e:41:be:cc:d6:1a:ca:4a:
                    63:e1:63:90:33:bc:cb:71:f2:93:37:9e:b9:df:89:
                    0e:0d:ed:20:0e:e8:20:e1:ea:2c:8b:89:aa:f0:4d:
                    2e:54:2a:aa:d3:92:1f:3c:39:3e:7a:97:d8:84:80:
                    2a:aa:8f:1a:c5:cd:21:d6:34:ad:69:d0:c9:a8:fc:
                    e5:e6:cb:47:e3:9a:8d:39:2c:08:8d:f9:23:a5:8e:
                    4d:aa:b1:5f:0a:22:37:e1:27:79:8d:e8:0f:b8:22:
                    0a:26:05:c8:6a:3a:8f:f8:b0:85:ed:54:de:d6:48:
                    6a:ed:52:94:ab:e7:d8:d4:4a:b2:57:7c:85:2c:1f:
                    35:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:EE:F1:CF:58:7A:DE:79:8E:66:18:F7:3F:56:24:1E:77:F8:56:4A
            X509v3 Authority Key Identifier:
                keyid:9E:32:15:C4:80:F0:80:F8:97:B1:BC:29:04:14:17:B2:B2:F0:66:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/9E3215C480F080F897B1BC29041417B2B2F0668D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E3215C480F080F897B1BC29041417B2B2F0668D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/3138372e302e3233362e302f32332d3234203d3e203631363039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:92:d1:bf:d6:b1:6b:96:7a:47:00:ce:e3:eb:7b:d1:26:06:
         07:c6:47:ed:7e:f2:73:e4:d0:31:1e:9e:92:fb:6d:1b:f9:08:
         a6:f6:44:0c:69:81:9f:27:7a:64:59:58:72:49:57:a9:22:1c:
         2c:d3:8b:bd:d2:35:7e:8d:de:9d:9c:2c:d3:90:2d:78:44:dd:
         94:8f:d5:12:61:c0:5c:1e:a7:3b:4c:25:ba:18:ca:c6:f0:4e:
         74:63:b8:94:1d:ab:05:61:ee:2a:4c:c8:bf:ce:2a:2b:fa:35:
         b7:37:b3:f9:7d:70:82:a8:db:e0:0b:02:c3:91:a3:58:29:ac:
         8b:51:e4:c0:ad:9d:b9:52:b9:3d:68:41:66:9b:76:c6:ff:ba:
         15:62:5a:fb:bc:14:5a:b7:ea:7c:35:fc:0e:e1:e1:a4:8a:94:
         b6:0d:7f:91:ec:55:6e:5d:cc:b3:0e:2c:31:c2:68:c6:b1:6f:
         6b:ac:5c:c1:fd:96:52:ab:6b:2b:c9:dd:5b:aa:0d:2b:71:b1:
         2f:0a:5a:2e:0e:8f:e4:62:48:40:9b:f8:75:ec:00:13:99:43:
         44:94:11:ba:22:9d:18:5c:99:3e:af:f5:84:88:c1:58:56:e5:
         90:7d:c8:1d:dc:3a:9a:ff:d6:a8:45:75:c1:ad:67:64:06:e7:
         b7:33:35:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:55:44 2026 by rpki-client