Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3138362e3231392e35362e302f32322d3234203d3e20323632343137.roa
File:                     3138362e3231392e35362e302f32322d3234203d3e20323632343137.roa (raw, json)
Hash identifier:          4iHGbdBXzcoWg9QwEAZkniWTNbvPVlPS782OnVuyMOo=
Subject key identifier:   ED:01:E1:5E:FA:90:FD:68:1F:79:58:AC:76:C6:56:A8:21:07:79:A0
Certificate issuer:       /CN=EA761FA2871FFFD44557E40A3C25F810017487F2
Certificate serial:       76AD0E0F152AEC21FD962FB3F1D462F844CBD356
Authority key identifier: EA:76:1F:A2:87:1F:FF:D4:45:57:E4:0A:3C:25:F8:10:01:74:87:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA761FA2871FFFD44557E40A3C25F810017487F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3138362e3231392e35362e302f32322d3234203d3e20323632343137.roa
Signing time:             Tue 30 Jun 2026 14:21:49 +0000
ROA not before:           Tue 30 Jun 2026 14:16:49 +0000
ROA not after:            Tue 29 Jun 2027 14:21:49 +0000
asID:                     262417
IP address blocks:        186.219.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/EA761FA2871FFFD44557E40A3C25F810017487F2.crl
                          rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/EA761FA2871FFFD44557E40A3C25F810017487F2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA761FA2871FFFD44557E40A3C25F810017487F2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 15:40:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:ad:0e:0f:15:2a:ec:21:fd:96:2f:b3:f1:d4:62:f8:44:cb:d3:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA761FA2871FFFD44557E40A3C25F810017487F2
        Validity
            Not Before: Jun 30 14:16:49 2026 GMT
            Not After : Jun 29 14:21:49 2027 GMT
        Subject: CN=ED01E15EFA90FD681F7958AC76C656A8210779A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b9:60:4f:0d:8b:fc:ee:fc:4e:a8:c1:98:f5:
                    49:97:bf:b0:09:09:74:de:77:3c:55:28:0a:6f:33:
                    59:5a:91:27:a2:d2:00:10:b7:7b:62:de:16:d9:00:
                    8e:6f:26:ec:33:b1:56:4b:2c:c5:ee:1b:7b:b5:89:
                    b7:8a:e8:4c:ec:ac:3a:be:4f:aa:ad:46:fc:7b:1a:
                    e7:91:63:f2:f4:f5:6a:da:be:ef:2a:c1:52:5b:5e:
                    13:da:46:0a:e4:50:17:c2:79:ab:ee:9f:f1:94:b9:
                    ab:54:4e:89:43:67:ae:2d:9f:53:09:a0:38:7a:e7:
                    da:d0:1b:98:05:56:b9:28:36:1f:59:17:a8:0b:bf:
                    47:07:c8:37:b1:ad:7d:fb:48:d3:f0:09:4f:cf:38:
                    e4:e4:35:66:6e:5c:68:58:b4:70:d7:5c:00:1b:3b:
                    30:0c:be:33:0b:8f:b8:1f:0f:84:44:44:01:c0:cb:
                    70:c7:93:ad:c7:6f:13:51:55:0d:8c:e4:8a:2f:2c:
                    b0:3a:07:07:d7:7f:c6:a2:bd:30:03:6c:d6:35:49:
                    5f:dc:b9:43:97:c8:25:a8:f3:33:24:95:49:f9:d6:
                    c7:6f:c0:93:0d:b1:5b:b8:1b:b0:66:31:8b:49:ae:
                    48:b5:c0:74:46:72:bf:ef:32:f1:78:89:6a:d8:41:
                    12:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:01:E1:5E:FA:90:FD:68:1F:79:58:AC:76:C6:56:A8:21:07:79:A0
            X509v3 Authority Key Identifier:
                keyid:EA:76:1F:A2:87:1F:FF:D4:45:57:E4:0A:3C:25:F8:10:01:74:87:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/EA761FA2871FFFD44557E40A3C25F810017487F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA761FA2871FFFD44557E40A3C25F810017487F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3138362e3231392e35362e302f32322d3234203d3e20323632343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:ed:8d:75:cf:29:16:fe:6b:6b:48:57:33:50:35:7f:f2:8e:
         e4:6c:ee:ac:8c:8f:33:7f:d8:80:dc:ef:c1:d6:79:92:75:3f:
         70:3d:66:09:18:69:6d:7b:7f:1b:7e:62:6d:41:6a:2d:1e:8b:
         93:6d:fa:7b:db:fa:1d:01:7d:7a:93:bf:56:01:8a:90:9d:0f:
         ae:0c:4d:18:f8:10:09:4e:e7:fd:89:2d:cb:3c:db:67:aa:45:
         34:fa:97:13:52:6d:72:8a:28:85:36:1d:61:a3:a1:e6:6f:7e:
         97:a7:58:6d:dc:ba:b4:e2:c6:36:54:f7:aa:98:1d:11:9e:d7:
         47:60:6b:0b:ab:c5:a4:e1:6a:53:f8:24:38:a9:cc:ab:3a:db:
         00:22:e0:71:48:a7:8f:81:29:44:9f:4a:24:fb:44:ce:12:13:
         8e:8f:53:14:f4:d4:22:4c:b1:bd:e2:8b:d7:62:74:72:d5:5b:
         71:d8:82:a2:ca:0e:74:e6:65:79:ea:ca:d8:a3:97:12:68:3a:
         69:10:ab:02:4d:da:11:e5:70:13:f7:43:2a:75:6f:2b:c1:f0:
         df:f3:5b:1a:72:12:68:c3:a6:b1:4c:81:02:48:78:d7:9a:07:
         e4:32:4a:80:2d:02:d8:14:3b:1f:65:c8:95:ed:d7:f5:38:d1:
         a7:8f:62:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:00:58 2026 by rpki-client