Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/3138362e3234392e3234382e302f32312d3332203d3e20323633353730.roa
File:                     3138362e3234392e3234382e302f32312d3332203d3e20323633353730.roa (raw, json)
Hash identifier:          nrEwT053pogidRNNf8jXOaCJr6ieSUGX1cXSr3u4pHE=
Subject key identifier:   BD:43:51:F8:09:35:8C:78:84:8E:29:FA:6B:E4:9F:7B:01:8E:51:E5
Certificate issuer:       /CN=9F2D5768FE59056E586124EFA58C5F96D60C7722
Certificate serial:       0EF22E4FC2FEA45B51445918801781996DED9B48
Authority key identifier: 9F:2D:57:68:FE:59:05:6E:58:61:24:EF:A5:8C:5F:96:D6:0C:77:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F2D5768FE59056E586124EFA58C5F96D60C7722.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/3138362e3234392e3234382e302f32312d3332203d3e20323633353730.roa
Signing time:             Tue 10 Mar 2026 20:35:51 +0000
ROA not before:           Tue 10 Mar 2026 20:30:51 +0000
ROA not after:            Tue 09 Mar 2027 20:35:51 +0000
asID:                     263570
IP address blocks:        186.249.248.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/9F2D5768FE59056E586124EFA58C5F96D60C7722.crl
                          rsync://rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/9F2D5768FE59056E586124EFA58C5F96D60C7722.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F2D5768FE59056E586124EFA58C5F96D60C7722.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 14:57:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:f2:2e:4f:c2:fe:a4:5b:51:44:59:18:80:17:81:99:6d:ed:9b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F2D5768FE59056E586124EFA58C5F96D60C7722
        Validity
            Not Before: Mar 10 20:30:51 2026 GMT
            Not After : Mar  9 20:35:51 2027 GMT
        Subject: CN=BD4351F809358C78848E29FA6BE49F7B018E51E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:27:0c:cf:0e:cc:ff:d2:20:20:15:89:b3:a8:
                    68:ba:4a:2f:06:f4:a6:4a:4e:aa:76:ef:e5:95:28:
                    0e:ae:d1:c7:1a:40:50:7c:92:d7:7e:97:88:8c:54:
                    34:70:5a:bf:3a:48:3d:92:47:ab:88:c5:fc:f5:22:
                    4e:3a:58:41:a2:84:87:24:a0:fb:f9:99:71:2d:9e:
                    cb:be:09:7c:12:f4:c5:03:6f:13:0a:37:91:d5:ee:
                    86:eb:b8:84:93:cf:46:b7:7f:eb:42:76:15:04:96:
                    ed:4c:d1:37:fe:64:08:ec:6e:b3:05:c6:42:16:39:
                    65:ef:58:10:84:4c:73:b6:2d:f6:f0:20:ad:38:8b:
                    af:32:b0:68:65:2c:8e:6f:98:05:ec:4c:35:1e:56:
                    97:ed:f9:13:7d:b4:f3:4c:c6:af:be:1a:d3:bc:72:
                    ba:d3:6c:6a:e4:26:d1:57:b7:3f:b4:01:0a:be:0d:
                    bd:09:ee:e9:3e:09:4c:4e:7c:f6:32:73:f3:8c:7d:
                    e6:a7:07:74:1b:96:3e:81:ec:f0:3d:8a:a7:14:2d:
                    30:91:77:01:bf:7a:c3:4d:13:03:64:72:ed:19:75:
                    c2:3f:31:ed:b1:a6:63:58:6b:e2:4d:41:d6:18:93:
                    90:d4:8d:92:36:16:19:fc:bc:c6:98:48:e2:68:17:
                    51:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:43:51:F8:09:35:8C:78:84:8E:29:FA:6B:E4:9F:7B:01:8E:51:E5
            X509v3 Authority Key Identifier:
                keyid:9F:2D:57:68:FE:59:05:6E:58:61:24:EF:A5:8C:5F:96:D6:0C:77:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/9F2D5768FE59056E586124EFA58C5F96D60C7722.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F2D5768FE59056E586124EFA58C5F96D60C7722.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/3138362e3234392e3234382e302f32312d3332203d3e20323633353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7c:9b:fb:63:d7:73:1f:6a:a3:76:67:91:09:b3:ec:43:0d:16:
         d4:f3:82:2f:c4:92:4c:04:4c:48:60:26:03:60:ee:7f:27:12:
         34:69:1e:21:f0:bc:10:ad:44:dd:6e:a4:f2:d2:84:ef:c3:70:
         0d:d0:68:0e:40:fc:da:3a:13:b9:52:1b:06:38:be:66:02:83:
         7c:71:f8:fc:05:0b:1f:cd:09:2e:f3:e2:08:dc:b0:d0:a2:66:
         a8:98:d3:61:c1:8d:45:28:86:22:30:f3:55:71:d6:c6:cf:bc:
         39:0b:aa:5d:82:68:1f:75:26:9e:28:f6:57:27:a0:86:e8:73:
         b8:ee:ec:de:6c:ec:35:bf:2f:d3:65:c7:d0:5f:cf:af:23:95:
         c4:22:16:48:c6:8a:14:eb:bb:99:a0:16:33:ca:79:39:0e:ed:
         ba:f6:aa:76:72:56:0f:5a:5c:60:df:f9:2d:95:a2:b2:34:24:
         23:34:03:a9:09:56:b9:57:9f:71:47:46:2e:8a:11:c3:65:24:
         a1:f2:1e:e4:65:f1:ea:94:09:14:19:ff:24:d9:9d:a4:38:45:
         57:b3:62:39:ea:7d:a0:41:9d:71:e7:3f:92:80:85:40:3c:0d:
         15:ba:eb:17:48:ad:60:76:f8:40:01:29:16:c7:81:20:ac:a6:
         d4:fa:05:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:46:03 2026 by rpki-client