Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6X1NNYU28c13ohAYpAnmfcNPPPKPeo7nDqGqrikn5cDa/0/3138362e3230392e3137362e302f32312d3332203d3e20313938393439.roa
File:                     3138362e3230392e3137362e302f32312d3332203d3e20313938393439.roa (raw, json)
Hash identifier:          b12WD8wl+yEYp9n80/fvjcVINYpwj5YEZgJy8lHvZas=
Subject key identifier:   01:73:E9:1A:6D:82:6E:71:90:94:50:D3:21:21:D0:1F:BD:D4:96:20
Certificate issuer:       /CN=E648F8D55C21E34319A7C414ECB0155EED5E0B31
Certificate serial:       599D1E7CAC4FCB61C3C9D55DF39123D0F90E2479
Authority key identifier: E6:48:F8:D5:5C:21:E3:43:19:A7:C4:14:EC:B0:15:5E:ED:5E:0B:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E648F8D55C21E34319A7C414ECB0155EED5E0B31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6X1NNYU28c13ohAYpAnmfcNPPPKPeo7nDqGqrikn5cDa/0/3138362e3230392e3137362e302f32312d3332203d3e20313938393439.roa
Signing time:             Wed 29 Jul 2026 15:48:39 +0000
ROA not before:           Wed 29 Jul 2026 15:43:39 +0000
ROA not after:            Wed 28 Jul 2027 15:48:39 +0000
asID:                     198949
IP address blocks:        186.209.176.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6X1NNYU28c13ohAYpAnmfcNPPPKPeo7nDqGqrikn5cDa/0/E648F8D55C21E34319A7C414ECB0155EED5E0B31.crl
                          rsync://rpki-repo.registro.br/repo/6X1NNYU28c13ohAYpAnmfcNPPPKPeo7nDqGqrikn5cDa/0/E648F8D55C21E34319A7C414ECB0155EED5E0B31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E648F8D55C21E34319A7C414ECB0155EED5E0B31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 22:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:9d:1e:7c:ac:4f:cb:61:c3:c9:d5:5d:f3:91:23:d0:f9:0e:24:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E648F8D55C21E34319A7C414ECB0155EED5E0B31
        Validity
            Not Before: Jul 29 15:43:39 2026 GMT
            Not After : Jul 28 15:48:39 2027 GMT
        Subject: CN=0173E91A6D826E71909450D32121D01FBDD49620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:92:e6:85:52:90:1e:71:7b:42:b4:db:c9:c6:
                    6d:b5:bc:fc:3b:48:6a:82:0e:56:5f:2f:ca:f9:21:
                    48:0b:e5:bc:83:b7:e9:a6:a2:74:4d:b4:fc:96:60:
                    9f:4b:52:89:2a:61:ef:9c:2b:18:5b:0e:0b:98:1a:
                    ce:48:ae:7d:15:22:fb:92:07:40:36:a0:7c:1d:24:
                    d2:e8:00:5b:9d:52:48:1d:5c:25:82:47:b0:7f:9c:
                    c4:05:1d:ef:50:da:b6:c4:41:4c:f8:c6:b5:21:4a:
                    a2:36:d4:1c:79:d0:98:7f:78:c4:37:95:1b:28:1c:
                    62:a6:1e:c0:76:17:cf:33:bf:87:e9:9e:4c:4d:4a:
                    a9:d9:11:ba:6a:a2:9b:e1:b0:62:8b:89:7c:68:ef:
                    b6:39:eb:c8:4d:87:f1:26:33:f2:53:b5:a9:03:f5:
                    55:b4:92:9f:f7:2d:4c:50:18:bd:45:1b:7e:7b:33:
                    98:c6:08:10:02:9a:79:ef:4f:59:79:b4:e0:03:44:
                    56:8a:6a:53:c3:76:1a:ad:39:09:26:59:1b:0b:d4:
                    8b:ff:2c:aa:11:4f:63:ae:2d:cb:fb:48:dc:b7:a2:
                    c4:35:ed:7b:a4:f2:e0:a4:1f:f4:63:db:58:e9:98:
                    02:ca:08:71:a2:dc:d4:e0:93:79:31:32:6d:2f:74:
                    22:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:73:E9:1A:6D:82:6E:71:90:94:50:D3:21:21:D0:1F:BD:D4:96:20
            X509v3 Authority Key Identifier:
                keyid:E6:48:F8:D5:5C:21:E3:43:19:A7:C4:14:EC:B0:15:5E:ED:5E:0B:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6X1NNYU28c13ohAYpAnmfcNPPPKPeo7nDqGqrikn5cDa/0/E648F8D55C21E34319A7C414ECB0155EED5E0B31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E648F8D55C21E34319A7C414ECB0155EED5E0B31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6X1NNYU28c13ohAYpAnmfcNPPPKPeo7nDqGqrikn5cDa/0/3138362e3230392e3137362e302f32312d3332203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1f:fe:20:af:4e:90:d9:f6:3d:0e:65:ea:91:02:5e:b3:2c:c3:
         aa:2e:7f:d4:58:bf:5e:ba:37:e1:dd:97:dd:13:8a:95:13:b2:
         0c:aa:ad:17:be:9f:3a:53:0d:53:b8:75:c6:95:c0:1c:d8:56:
         3c:dc:35:6f:8d:04:a7:84:8c:e2:c6:fb:d8:75:84:03:e0:4d:
         7f:4b:8b:2e:31:94:3f:b7:5a:b9:3e:68:07:4e:b9:e8:39:e7:
         23:1a:3e:6d:01:2f:a5:b1:18:59:67:51:d6:0f:95:ea:4f:73:
         88:3d:d2:ea:2c:d3:93:0c:6c:45:a9:78:ff:15:06:1c:2d:ab:
         ed:49:c3:28:a4:c4:a6:de:33:8f:2d:eb:8f:5e:59:8a:71:9e:
         83:45:61:ad:c6:ce:1e:2b:d7:d0:5b:cb:1c:8c:54:4d:43:8f:
         f5:ab:54:57:59:b8:a6:6a:e9:cd:95:11:ea:e1:de:20:8e:6a:
         bc:07:05:2b:dc:97:f5:f8:65:9d:65:7e:11:3a:f5:9f:f5:f0:
         ac:2f:21:92:a3:d5:dc:65:e2:97:f5:7e:64:fc:24:96:86:bc:
         07:4b:30:f2:8e:11:4f:aa:e7:c2:52:51:e8:da:a1:35:8d:03:
         9b:d4:58:e4:5c:96:5d:d3:26:29:96:18:33:6a:4e:d5:f6:2d:
         e6:2a:d7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:42:28 2026 by rpki-client