Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GhFbqupDEC2ujSpFn4cQXAhpx2ypeSqePrKkpdzoo6ag/0/3138362e3232372e38392e302f32342d3234203d3e20323734333430.roa
File:                     3138362e3232372e38392e302f32342d3234203d3e20323734333430.roa (raw, json)
Hash identifier:          kpe/wgbPeJfu5OnZz05xbtxiMeGom7c+NcJxa+as+1E=
Subject key identifier:   9E:AF:D9:FA:E9:C9:6D:C2:C8:75:B9:DD:F0:AA:43:79:C5:5B:41:80
Certificate issuer:       /CN=04F82AB6D03AAC998F1C1C22272D92FD17905BDC
Certificate serial:       12D9BA2355A90FEBE550D543363A0EF70743333C
Authority key identifier: 04:F8:2A:B6:D0:3A:AC:99:8F:1C:1C:22:27:2D:92:FD:17:90:5B:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04F82AB6D03AAC998F1C1C22272D92FD17905BDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GhFbqupDEC2ujSpFn4cQXAhpx2ypeSqePrKkpdzoo6ag/0/3138362e3232372e38392e302f32342d3234203d3e20323734333430.roa
Signing time:             Fri 08 May 2026 18:21:25 +0000
ROA not before:           Fri 08 May 2026 18:16:25 +0000
ROA not after:            Fri 07 May 2027 18:21:25 +0000
asID:                     274340
IP address blocks:        186.227.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GhFbqupDEC2ujSpFn4cQXAhpx2ypeSqePrKkpdzoo6ag/0/04F82AB6D03AAC998F1C1C22272D92FD17905BDC.crl
                          rsync://rpki-repo.registro.br/repo/GhFbqupDEC2ujSpFn4cQXAhpx2ypeSqePrKkpdzoo6ag/0/04F82AB6D03AAC998F1C1C22272D92FD17905BDC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04F82AB6D03AAC998F1C1C22272D92FD17905BDC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 02:42:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:d9:ba:23:55:a9:0f:eb:e5:50:d5:43:36:3a:0e:f7:07:43:33:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04F82AB6D03AAC998F1C1C22272D92FD17905BDC
        Validity
            Not Before: May  8 18:16:25 2026 GMT
            Not After : May  7 18:21:25 2027 GMT
        Subject: CN=9EAFD9FAE9C96DC2C875B9DDF0AA4379C55B4180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:30:15:50:1e:e9:58:7b:ad:0d:04:75:ef:a7:
                    77:ed:b5:53:6b:a4:7f:64:90:39:6e:8e:8f:bd:5f:
                    84:b3:44:49:ef:32:af:85:a0:a1:d4:32:59:d5:0c:
                    e2:f7:14:a6:5b:63:6c:fd:2e:28:28:77:4d:d7:34:
                    07:f1:f5:c8:be:90:8e:d6:e5:ff:33:dc:dd:ec:e4:
                    e7:e4:37:47:7a:33:33:ce:dd:bb:c5:0c:bb:a1:2d:
                    cc:49:90:b1:df:29:81:fe:52:a4:e7:48:01:7a:fa:
                    69:21:92:53:a4:55:bb:fb:64:5f:39:27:e9:af:28:
                    45:c0:2f:2a:2f:cc:5a:5b:34:db:a9:38:d5:e4:04:
                    44:00:64:62:d9:6e:8a:5b:46:37:34:27:48:78:26:
                    4a:11:a9:38:44:42:4e:4b:d9:05:0c:92:24:79:e7:
                    71:9f:4a:7f:59:90:5a:8e:f5:6b:67:87:42:5a:57:
                    b8:3c:d3:0d:e5:09:ac:df:09:50:75:9e:59:25:21:
                    b7:a3:44:1f:1c:c1:11:03:2f:2e:94:53:9b:63:c5:
                    4b:33:82:3a:f5:0c:69:c9:37:95:6d:24:43:82:44:
                    95:04:26:73:58:b2:be:d3:9c:38:c4:41:cc:2f:8b:
                    ac:10:d9:4a:83:30:01:d7:97:56:0d:02:aa:c6:ee:
                    40:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:AF:D9:FA:E9:C9:6D:C2:C8:75:B9:DD:F0:AA:43:79:C5:5B:41:80
            X509v3 Authority Key Identifier:
                keyid:04:F8:2A:B6:D0:3A:AC:99:8F:1C:1C:22:27:2D:92:FD:17:90:5B:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GhFbqupDEC2ujSpFn4cQXAhpx2ypeSqePrKkpdzoo6ag/0/04F82AB6D03AAC998F1C1C22272D92FD17905BDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04F82AB6D03AAC998F1C1C22272D92FD17905BDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhFbqupDEC2ujSpFn4cQXAhpx2ypeSqePrKkpdzoo6ag/0/3138362e3232372e38392e302f32342d3234203d3e20323734333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:9f:26:18:01:29:32:bb:83:0d:ee:91:43:fb:c9:6d:ff:e6:
         c5:2e:b2:ea:50:a6:86:83:59:93:de:53:35:9c:1d:4f:fe:45:
         7d:52:dd:f8:0a:fb:9a:d8:66:52:d2:27:8e:69:8b:99:5b:39:
         e6:97:24:f1:4d:c7:ff:cd:19:18:96:c2:31:21:fb:de:c8:5b:
         23:ac:5c:d9:a8:c6:2d:d7:bf:eb:ec:29:80:9c:74:a7:8e:ca:
         d3:8d:1c:b1:38:ad:85:6b:fc:75:2e:c1:c8:e6:6c:87:f8:e2:
         4d:d3:67:30:af:b9:1c:04:b0:e5:5e:11:1d:70:da:e9:c7:6b:
         ac:1a:8d:21:8c:95:ac:f8:be:c1:a3:b8:14:45:db:80:f9:c2:
         77:23:51:72:f6:47:61:29:38:86:fe:b7:b1:ea:f2:b5:0c:62:
         83:d8:6d:82:d8:1a:32:0a:f2:39:21:a3:61:d0:19:ea:5d:ee:
         d9:69:99:f5:02:df:54:88:61:b9:58:d1:c5:58:59:a0:fa:8b:
         52:b1:81:e1:ff:9b:18:4b:5e:30:81:f3:8c:75:63:3b:25:07:
         2a:d0:41:2c:23:5e:86:6c:58:7b:d7:7b:5a:8d:3d:42:f7:ec:
         59:26:fb:ab:01:a6:77:a1:b9:0d:bd:55:89:8a:b8:ea:3e:62:
         e6:d6:74:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:43:51 2026 by rpki-client