Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3138362e3233362e36342e302f32302d3234203d3e203237363933.roa
File:                     3138362e3233362e36342e302f32302d3234203d3e203237363933.roa (raw, json)
Hash identifier:          Qor+vhhxaV/iaJQRpS5Lue4dE27VE4ezLC32GIoT5oY=
Subject key identifier:   3B:51:B3:AD:59:D9:F4:B4:DB:BE:73:4E:25:DD:7B:20:6F:5C:47:A9
Certificate issuer:       /CN=3345439099C79C13F583D2238E3BB7D0D60D6877
Certificate serial:       38EC640DD26416876BA0F5993AEF64085E73F840
Authority key identifier: 33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3138362e3233362e36342e302f32302d3234203d3e203237363933.roa
Signing time:             Mon 08 Jun 2026 12:40:53 +0000
ROA not before:           Mon 08 Jun 2026 12:35:53 +0000
ROA not after:            Mon 07 Jun 2027 12:40:53 +0000
asID:                     27693
IP address blocks:        186.236.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl
                          rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 Jun 2026 22:11:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ec:64:0d:d2:64:16:87:6b:a0:f5:99:3a:ef:64:08:5e:73:f8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3345439099C79C13F583D2238E3BB7D0D60D6877
        Validity
            Not Before: Jun  8 12:35:53 2026 GMT
            Not After : Jun  7 12:40:53 2027 GMT
        Subject: CN=3B51B3AD59D9F4B4DBBE734E25DD7B206F5C47A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8c:5c:30:73:54:1b:99:7b:72:2c:39:30:8b:
                    0c:95:08:25:c5:e0:ee:5d:b3:61:64:45:3a:95:67:
                    4c:a0:e5:b1:a3:24:5b:49:11:78:dd:67:e1:5b:0d:
                    a8:96:55:e4:84:ab:f9:c9:6c:25:1d:4d:51:92:4d:
                    73:8b:48:b3:44:28:93:a6:d1:b8:37:ae:56:e6:c7:
                    70:6a:73:c8:31:56:c7:9a:6c:0c:17:04:c2:e3:7c:
                    50:f2:d6:ba:06:81:f1:6d:3f:f9:a6:db:33:b1:29:
                    01:be:e8:7e:70:3b:fa:95:ae:08:1e:d9:1e:f4:51:
                    69:05:89:34:32:5f:f1:82:d3:a8:6e:38:6e:28:97:
                    ff:ea:38:72:2c:d6:2c:0e:c9:6b:3c:d8:11:c7:e7:
                    1f:3a:07:09:6e:0a:77:ad:6a:3c:a9:0b:c1:69:5a:
                    5f:11:c6:50:df:89:3b:4d:d9:13:e3:df:f4:1b:29:
                    3a:39:1f:05:18:ed:fe:29:ca:18:f3:4e:7b:c2:89:
                    da:62:5c:dc:b2:45:95:86:56:09:9e:87:0e:49:df:
                    5f:23:91:44:06:f3:b4:3d:c3:84:06:7b:db:c5:ac:
                    dc:25:ff:d6:25:f2:74:36:17:fb:2f:2d:c9:a4:22:
                    eb:67:5f:07:85:e2:d9:f9:cf:c8:eb:4d:dc:88:21:
                    dc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:51:B3:AD:59:D9:F4:B4:DB:BE:73:4E:25:DD:7B:20:6F:5C:47:A9
            X509v3 Authority Key Identifier:
                keyid:33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3138362e3233362e36342e302f32302d3234203d3e203237363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         89:6e:ab:55:0d:1a:24:03:52:71:45:fb:6f:8a:56:76:c8:ec:
         98:ff:22:88:85:99:7e:ec:62:bc:fd:e9:bf:10:af:71:5e:cb:
         1a:d0:7a:d0:7d:ce:79:1b:44:28:7d:83:df:d1:5c:70:ea:5d:
         be:64:f6:f3:63:9c:59:7e:43:dd:49:13:82:60:1a:00:10:17:
         d7:e7:a2:67:dd:35:18:d6:c0:9f:5c:9a:5a:57:14:0e:73:76:
         43:6b:d2:ec:2e:96:79:e2:a9:1e:7e:42:d1:d1:15:42:39:ec:
         9e:b9:a0:6e:bb:fb:04:dc:37:5c:7b:a5:fa:8e:67:2b:c1:a3:
         0e:21:ca:a2:32:6b:48:45:f3:c0:82:47:d2:fe:21:23:ef:34:
         35:a1:ae:87:e4:58:9b:83:37:df:dc:0b:d6:9a:5d:f6:db:f3:
         14:de:cc:59:f4:be:fe:63:e9:b5:ba:c1:05:f4:a5:20:18:2d:
         35:d2:5f:d3:0c:cc:0a:0b:e3:7e:cb:e6:65:51:a5:4e:48:cd:
         69:1d:9e:b3:d8:a5:15:66:8e:10:63:ae:7e:cf:77:1e:fb:19:
         52:71:9a:66:46:3b:32:03:31:6b:a3:bb:7e:11:59:25:7c:7d:
         40:8c:da:3f:ed:56:03:1f:8e:29:c0:7d:1a:5a:eb:f7:45:46:
         9a:db:0f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:15:20 2026 by rpki-client