Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/3138362e3139322e3232342e302f32302d3332203d3e203238313435.roa
File:                     3138362e3139322e3232342e302f32302d3332203d3e203238313435.roa (raw, json)
Hash identifier:          kTPr5opDH90biqNQRQmRsEKz6k3igd22M5z1/ezXxF8=
Subject key identifier:   8B:0F:80:B1:C6:A0:3A:DA:4B:0D:C0:D3:33:A8:48:E8:C5:F0:3F:8A
Certificate issuer:       /CN=A347F5D0945998093ADA03E9513EA096318126D4
Certificate serial:       3AA2B5A4041EFC44753AE98D32A84DAB0A738120
Authority key identifier: A3:47:F5:D0:94:59:98:09:3A:DA:03:E9:51:3E:A0:96:31:81:26:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A347F5D0945998093ADA03E9513EA096318126D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/3138362e3139322e3232342e302f32302d3332203d3e203238313435.roa
Signing time:             Wed 06 May 2026 19:50:07 +0000
ROA not before:           Wed 06 May 2026 19:45:07 +0000
ROA not after:            Wed 05 May 2027 19:50:07 +0000
asID:                     28145
IP address blocks:        186.192.224.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/A347F5D0945998093ADA03E9513EA096318126D4.crl
                          rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/A347F5D0945998093ADA03E9513EA096318126D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A347F5D0945998093ADA03E9513EA096318126D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 00:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:a2:b5:a4:04:1e:fc:44:75:3a:e9:8d:32:a8:4d:ab:0a:73:81:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A347F5D0945998093ADA03E9513EA096318126D4
        Validity
            Not Before: May  6 19:45:07 2026 GMT
            Not After : May  5 19:50:07 2027 GMT
        Subject: CN=8B0F80B1C6A03ADA4B0DC0D333A848E8C5F03F8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4a:e6:37:3f:4f:a0:0e:3d:a4:a5:fd:ae:ea:
                    b6:cf:92:7f:4b:00:e3:b0:6e:d6:1f:6a:20:aa:a8:
                    31:c8:d7:c0:9f:52:ef:d0:2d:cf:00:e6:60:b8:99:
                    26:30:21:f5:05:fe:dd:ef:c0:1d:18:d3:d2:6b:c5:
                    c3:f7:69:25:4c:55:eb:e0:22:78:7e:98:97:2b:1b:
                    97:e3:18:e6:e9:27:6a:00:14:a9:c8:b7:80:87:1c:
                    ae:9e:80:0c:1e:01:2d:e8:22:a7:61:68:50:cc:1e:
                    db:72:72:6e:b8:5f:45:cd:57:63:6e:52:d2:f5:cd:
                    37:43:18:33:6d:25:d6:67:f5:83:0d:49:ac:8b:db:
                    40:64:f3:67:fd:f4:c0:f9:c7:2d:0b:8f:61:f3:6c:
                    e4:1f:fa:7e:32:7e:8e:9a:cb:97:6e:e4:d0:2f:5f:
                    da:a3:f6:c8:d4:d9:66:10:01:dc:33:b7:51:38:5d:
                    b3:70:b9:44:4a:02:56:c0:15:50:a3:45:e2:1e:1e:
                    55:7c:5d:1b:6d:47:7c:19:a1:6d:aa:9c:75:f7:f6:
                    10:12:28:59:cb:2e:36:78:b8:85:74:14:c4:41:b3:
                    bf:6a:f5:60:c5:7d:39:b8:80:fd:68:bd:e5:1b:f8:
                    e4:83:bb:2c:5d:80:f7:d7:35:47:1a:3a:2e:21:33:
                    7c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:0F:80:B1:C6:A0:3A:DA:4B:0D:C0:D3:33:A8:48:E8:C5:F0:3F:8A
            X509v3 Authority Key Identifier:
                keyid:A3:47:F5:D0:94:59:98:09:3A:DA:03:E9:51:3E:A0:96:31:81:26:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/A347F5D0945998093ADA03E9513EA096318126D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A347F5D0945998093ADA03E9513EA096318126D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/3138362e3139322e3232342e302f32302d3332203d3e203238313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.192.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         08:c0:2d:b0:58:36:0f:9a:34:f3:44:6b:ed:40:58:e7:ac:06:
         86:cb:72:be:f9:29:27:77:e8:d5:17:95:71:70:e2:8f:ff:1f:
         65:d7:17:26:8b:2b:8c:0f:8d:11:f8:d1:c7:c7:6f:c5:3e:2a:
         79:e2:a8:aa:87:9e:16:c2:9c:cc:af:a5:36:96:c9:4b:62:05:
         3b:84:87:67:67:1d:e5:15:ad:88:e9:88:ef:50:49:50:5a:c2:
         61:39:d9:75:fc:6b:fa:79:96:54:d5:1c:ff:fe:98:c8:96:7d:
         c6:de:da:42:2e:fe:bd:9c:8c:61:bf:7a:73:5d:95:c5:1c:30:
         96:68:0e:90:bc:5f:34:80:e1:04:db:da:43:84:cd:2e:b0:a6:
         63:bc:66:f7:17:00:aa:24:59:d0:a1:59:5a:a6:26:43:0c:9a:
         76:54:c3:01:5a:74:dc:e3:69:40:e9:f9:1b:8b:5c:9b:d4:5e:
         6c:50:76:59:aa:d7:69:25:2b:8b:e6:41:ea:55:87:75:5d:bb:
         8e:b6:40:49:85:98:ab:be:9b:2f:38:f2:18:dd:af:ad:50:0f:
         c7:d0:45:1a:87:29:7f:f1:fa:a0:4f:42:2b:f6:28:7d:6e:d4:
         53:9b:99:47:16:dd:59:dc:b1:d0:b7:24:f0:0c:5d:e6:fd:32:
         14:8d:08:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:13:15 2026 by rpki-client