Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/3138372e38362e32312e302f32342d3234203d3e20323733343433.roa
File:                     3138372e38362e32312e302f32342d3234203d3e20323733343433.roa (raw, json)
Hash identifier:          2fB3FXvMVdVs3Ouv4ByW/GqEhR6qPxiTz2Z4H33D/pw=
Subject key identifier:   9B:12:D8:7B:58:21:8B:A1:B9:4F:E8:AB:24:2B:82:DC:CE:32:A8:26
Certificate issuer:       /CN=601AB4C2CB27698A7EF0684324D416B8646A9B75
Certificate serial:       16B7D1A2AB876371227806F771D8673CB1301FC0
Authority key identifier: 60:1A:B4:C2:CB:27:69:8A:7E:F0:68:43:24:D4:16:B8:64:6A:9B:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/3138372e38362e32312e302f32342d3234203d3e20323733343433.roa
Signing time:             Tue 05 May 2026 14:06:35 +0000
ROA not before:           Tue 05 May 2026 14:01:35 +0000
ROA not after:            Tue 04 May 2027 14:06:35 +0000
asID:                     273443
IP address blocks:        187.86.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.crl
                          rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 04:51:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b7:d1:a2:ab:87:63:71:22:78:06:f7:71:d8:67:3c:b1:30:1f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601AB4C2CB27698A7EF0684324D416B8646A9B75
        Validity
            Not Before: May  5 14:01:35 2026 GMT
            Not After : May  4 14:06:35 2027 GMT
        Subject: CN=9B12D87B58218BA1B94FE8AB242B82DCCE32A826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f4:ec:56:ab:62:85:42:e7:73:b3:ca:3f:b6:
                    49:7a:53:1f:50:f8:71:49:69:ad:8b:0b:25:76:fd:
                    9a:54:7f:15:9d:a3:30:1a:c2:bb:fb:17:0d:e9:10:
                    3a:43:96:df:36:91:5a:89:21:61:2c:0f:aa:02:75:
                    6d:cd:37:f4:4f:18:5f:65:ca:14:c3:3f:d0:61:56:
                    5d:48:84:a5:ac:23:cd:70:81:75:71:6d:20:e8:c0:
                    b7:95:82:37:8b:97:d1:f8:7c:fa:fd:0e:80:df:94:
                    1f:08:8f:5d:85:9d:cc:a6:a8:e3:09:7f:90:88:4a:
                    32:26:0b:dd:4d:ab:3a:8d:22:16:06:ef:95:65:35:
                    6e:31:8e:fc:3b:d9:5f:28:aa:63:14:be:81:55:49:
                    29:5b:a9:1e:46:46:f4:24:88:7d:07:9a:80:6e:4a:
                    22:18:cf:73:a0:5b:06:d3:c5:db:a5:c2:18:7e:68:
                    40:51:fc:0a:09:58:96:79:42:da:c9:ea:68:19:a0:
                    f2:4a:cf:b8:2b:ce:db:b3:d2:9a:6c:27:74:b9:27:
                    fe:6f:a4:aa:44:8d:85:93:8e:61:fe:09:7a:50:50:
                    5c:0b:80:cd:cf:17:2f:c7:6c:80:65:00:63:5e:17:
                    aa:cf:05:86:08:91:47:07:bb:f2:a9:b9:d4:2e:7c:
                    f8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:12:D8:7B:58:21:8B:A1:B9:4F:E8:AB:24:2B:82:DC:CE:32:A8:26
            X509v3 Authority Key Identifier:
                keyid:60:1A:B4:C2:CB:27:69:8A:7E:F0:68:43:24:D4:16:B8:64:6A:9B:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/3138372e38362e32312e302f32342d3234203d3e20323733343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:9e:aa:67:be:7f:25:56:36:ce:f4:5c:5e:d3:b8:f7:47:9b:
         44:63:b1:a6:4c:9b:66:1b:01:5c:a6:3f:a0:89:4f:f8:25:e3:
         79:3e:cc:be:58:aa:5e:49:d0:13:43:2b:09:d2:15:6d:1a:e5:
         36:8b:d6:f6:db:e7:db:7d:c1:57:2c:67:d2:c0:bb:b2:8f:00:
         50:2b:af:b4:a8:25:08:0a:83:a5:43:96:73:51:50:5e:77:99:
         39:06:9f:68:1c:45:fd:0e:e3:16:91:09:07:ef:59:23:ca:52:
         78:d3:06:ad:6d:59:35:56:51:a3:9f:aa:b0:ee:ae:f0:01:c9:
         e5:41:bc:49:c6:84:23:c5:52:3b:85:4e:57:df:3c:4b:b3:0e:
         de:17:5b:cb:3c:d3:0a:3f:4c:7b:fb:3e:ae:15:49:12:ee:86:
         5e:00:95:18:64:22:10:95:b2:ed:ed:29:c8:4c:85:2f:13:fe:
         32:f1:45:5d:fc:b2:ea:ea:3a:d5:84:05:42:77:84:e3:cd:2b:
         b7:22:7e:98:14:03:6b:2f:b9:9b:4d:86:cf:83:ac:eb:9d:2f:
         20:6d:bc:fd:4a:df:a6:3c:cc:0f:33:00:34:83:ce:70:98:94:
         0f:98:7b:d0:6f:b9:f2:56:51:5c:e8:94:28:5f:e3:03:c5:d6:
         b0:58:ec:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:58:30 2026 by rpki-client