Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GhFbqupDEC2ujSpFn4cQXAhpx2ypeSqePrKkpdzoo6ag/0/3138362e3232372e38382e302f32342d3234203d3e20323732323738.roa
File:                     3138362e3232372e38382e302f32342d3234203d3e20323732323738.roa (raw, json)
Hash identifier:          3/vcWtfIlJnkfTzQ6HX6Aa7NNLOdwY42v24vgBA4I0c=
Subject key identifier:   D6:F9:FE:7F:A8:09:88:EE:62:89:AF:62:98:59:91:7B:19:37:B7:B2
Certificate issuer:       /CN=04F82AB6D03AAC998F1C1C22272D92FD17905BDC
Certificate serial:       65A7F5F496CBA5815D5D8F8E1CA742CAC9EAACBE
Authority key identifier: 04:F8:2A:B6:D0:3A:AC:99:8F:1C:1C:22:27:2D:92:FD:17:90:5B:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04F82AB6D03AAC998F1C1C22272D92FD17905BDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GhFbqupDEC2ujSpFn4cQXAhpx2ypeSqePrKkpdzoo6ag/0/3138362e3232372e38382e302f32342d3234203d3e20323732323738.roa
Signing time:             Fri 08 May 2026 18:21:26 +0000
ROA not before:           Fri 08 May 2026 18:16:26 +0000
ROA not after:            Fri 07 May 2027 18:21:26 +0000
asID:                     272278
IP address blocks:        186.227.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GhFbqupDEC2ujSpFn4cQXAhpx2ypeSqePrKkpdzoo6ag/0/04F82AB6D03AAC998F1C1C22272D92FD17905BDC.crl
                          rsync://rpki-repo.registro.br/repo/GhFbqupDEC2ujSpFn4cQXAhpx2ypeSqePrKkpdzoo6ag/0/04F82AB6D03AAC998F1C1C22272D92FD17905BDC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04F82AB6D03AAC998F1C1C22272D92FD17905BDC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 02:42:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:a7:f5:f4:96:cb:a5:81:5d:5d:8f:8e:1c:a7:42:ca:c9:ea:ac:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04F82AB6D03AAC998F1C1C22272D92FD17905BDC
        Validity
            Not Before: May  8 18:16:26 2026 GMT
            Not After : May  7 18:21:26 2027 GMT
        Subject: CN=D6F9FE7FA80988EE6289AF629859917B1937B7B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:09:46:f3:48:52:2b:c9:c0:b7:0d:ef:33:96:
                    30:b5:a0:b6:85:09:0d:16:df:d9:3d:da:5c:3c:ef:
                    67:87:67:b5:5d:3f:4a:91:a6:ee:b0:14:8d:ff:87:
                    8d:f1:89:74:a2:df:46:74:bb:65:c6:cd:43:a7:45:
                    9a:ac:3f:8e:d2:18:0e:cd:0b:ae:35:63:4f:e6:65:
                    ed:c3:88:26:b4:62:9c:62:b7:55:c0:21:d3:02:73:
                    04:49:50:e4:59:5a:4d:93:f4:5b:d1:4a:cd:24:78:
                    3b:4f:ef:eb:d3:e9:32:7d:2c:20:50:81:73:b7:b9:
                    dd:67:b0:2d:62:21:7d:e8:af:a2:c9:26:3f:ba:37:
                    31:43:d7:3f:d0:03:fc:20:b2:68:fa:cf:c2:c6:db:
                    a5:d1:44:8a:90:ad:4a:37:0b:e6:ec:65:78:ca:6b:
                    d0:cc:66:68:58:33:a0:4c:62:ef:22:22:e5:e1:41:
                    2d:8d:dd:c7:40:b6:9e:ff:9a:c5:4d:00:2f:3b:af:
                    2e:da:60:9a:80:94:48:e2:ef:76:fd:e1:d3:e8:44:
                    c0:00:b6:d5:7d:e3:0f:39:29:c6:25:ae:a3:c6:56:
                    a1:ac:a1:30:29:6e:b3:e3:d3:67:93:8a:79:2e:7c:
                    ae:84:91:bd:3c:25:d6:e7:26:cb:0c:97:e8:a7:bf:
                    9d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F9:FE:7F:A8:09:88:EE:62:89:AF:62:98:59:91:7B:19:37:B7:B2
            X509v3 Authority Key Identifier:
                keyid:04:F8:2A:B6:D0:3A:AC:99:8F:1C:1C:22:27:2D:92:FD:17:90:5B:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GhFbqupDEC2ujSpFn4cQXAhpx2ypeSqePrKkpdzoo6ag/0/04F82AB6D03AAC998F1C1C22272D92FD17905BDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04F82AB6D03AAC998F1C1C22272D92FD17905BDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhFbqupDEC2ujSpFn4cQXAhpx2ypeSqePrKkpdzoo6ag/0/3138362e3232372e38382e302f32342d3234203d3e20323732323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:b9:76:f9:ae:67:b3:8d:29:77:b6:37:a1:b8:74:1f:7a:89:
         22:2e:a3:82:3f:1f:9b:26:0c:83:f7:d5:bc:aa:38:14:90:93:
         2d:28:2f:4c:e6:01:7f:ea:52:9b:58:f4:02:78:82:e4:42:5e:
         55:76:28:af:fa:b8:ce:c6:cc:c4:d9:70:a3:c7:d6:74:37:17:
         f6:d2:f9:20:c6:d8:98:6e:03:51:b5:8e:84:97:4e:a0:48:07:
         26:99:f7:1c:61:c4:b5:e0:26:57:99:46:c2:f8:3c:5c:0c:a8:
         2e:aa:16:e4:f8:0b:cb:db:a2:af:a2:23:d5:df:33:5b:ca:a3:
         eb:58:cc:2c:b3:6a:ef:3e:27:e0:2d:6f:29:e3:10:81:7b:b7:
         80:1c:56:e7:27:7a:d4:26:69:2a:a3:cc:5a:ea:e1:86:a5:e7:
         96:88:3f:5f:01:ed:ef:86:1b:39:77:ff:59:0f:80:1c:d8:f5:
         b7:5a:de:8e:70:5d:97:cc:0f:aa:3c:ca:cc:47:5f:ea:48:01:
         06:f9:c7:ff:6f:aa:0d:44:79:19:06:a0:ce:c9:0a:81:44:6f:
         40:49:79:71:df:b0:de:42:68:72:67:6d:e1:87:e3:dc:79:9d:
         d1:eb:68:60:fd:30:b8:7e:0f:5f:11:b2:e4:cd:1a:f8:ea:8d:
         21:6b:20:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:24:03 2026 by rpki-client