Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/3138362e3233372e322e302f32342d3234203d3e20323632373937.roa
File:                     3138362e3233372e322e302f32342d3234203d3e20323632373937.roa (raw, json)
Hash identifier:          NszwZtCJNfGGIt6EcGKwO9tgmY1XYgzCKIhYZsFCVPY=
Subject key identifier:   DD:C4:96:C8:D0:3C:03:54:D5:C5:D0:2D:52:18:E7:87:9C:52:C5:CD
Certificate issuer:       /CN=36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6
Certificate serial:       5656D69720EA935CE0722D7C67F5F5BFB18BB8BC
Authority key identifier: 36:C9:A9:AD:CE:53:2B:3D:4D:E3:67:78:AC:FD:C3:B3:AF:5F:D0:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/3138362e3233372e322e302f32342d3234203d3e20323632373937.roa
Signing time:             Thu 27 Aug 2026 20:19:00 +0000
ROA not before:           Thu 27 Aug 2026 20:14:00 +0000
ROA not after:            Thu 26 Aug 2027 20:19:00 +0000
asID:                     262797
IP address blocks:        186.237.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.crl
                          rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 21:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:56:d6:97:20:ea:93:5c:e0:72:2d:7c:67:f5:f5:bf:b1:8b:b8:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6
        Validity
            Not Before: Aug 27 20:14:00 2026 GMT
            Not After : Aug 26 20:19:00 2027 GMT
        Subject: CN=DDC496C8D03C0354D5C5D02D5218E7879C52C5CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:30:5e:35:fc:65:00:a4:ed:dc:d2:c1:86:0c:
                    9d:84:ed:37:71:53:c4:59:c8:b6:a7:a2:f3:dc:e8:
                    be:43:a1:1f:da:c6:d7:aa:19:84:e7:35:9a:16:b8:
                    20:6b:79:cc:aa:04:18:8e:a4:24:d2:1c:1f:00:aa:
                    98:d7:37:d0:5d:69:f2:90:79:f3:13:71:6f:c5:63:
                    1b:32:40:b4:11:4d:21:66:a8:2a:8a:1e:0c:bf:fb:
                    da:21:78:07:5f:f6:22:e1:51:95:46:cd:a6:f8:62:
                    84:cb:79:80:13:ce:b7:ea:2c:f6:29:7e:3f:5f:6d:
                    51:23:cb:68:de:61:8a:72:ba:46:50:67:b0:e4:c2:
                    31:80:b4:e7:7b:4f:4f:05:1b:98:6f:95:49:16:8a:
                    fd:ed:52:1f:c1:5b:01:5d:a4:06:01:ff:75:2e:86:
                    a8:22:9d:ad:6c:10:82:49:c1:d6:09:15:c6:c6:a5:
                    2e:00:57:6a:4c:bb:9f:a1:37:ee:d6:39:2c:07:ef:
                    10:c7:82:7c:12:df:11:45:06:62:b6:98:e5:b9:7b:
                    7f:49:aa:cf:5b:f0:2b:67:a2:d0:56:9d:46:3d:4e:
                    b6:dc:7b:6b:e6:ff:22:2a:73:f8:fc:6d:af:90:d1:
                    a2:44:ce:99:11:d0:fa:c9:df:d7:ab:b5:72:6a:8d:
                    54:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C4:96:C8:D0:3C:03:54:D5:C5:D0:2D:52:18:E7:87:9C:52:C5:CD
            X509v3 Authority Key Identifier:
                keyid:36:C9:A9:AD:CE:53:2B:3D:4D:E3:67:78:AC:FD:C3:B3:AF:5F:D0:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/3138362e3233372e322e302f32342d3234203d3e20323632373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.237.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:8b:24:57:bb:63:f4:ac:70:75:70:8d:ae:e2:26:a7:69:49:
         c7:d0:ea:af:62:d8:61:1f:3e:fd:b2:6c:55:08:93:47:a1:ca:
         eb:fd:d7:86:ed:b7:52:74:59:5a:f8:00:59:89:91:9a:4f:3a:
         70:af:19:37:de:a5:07:ec:53:43:73:22:83:b3:dd:1e:83:e9:
         72:6e:1c:40:2d:81:62:4c:5c:ee:63:fc:49:e3:e1:83:e5:7e:
         9d:ee:4c:ba:3f:15:c0:4a:5d:58:cc:38:50:11:06:40:a9:3a:
         c0:97:82:73:c2:e3:b0:59:a8:3a:f4:80:1b:62:83:6a:3d:f1:
         ed:81:08:05:70:b8:c7:c9:13:67:4a:1e:f3:b6:a7:55:6c:ff:
         b9:cd:c6:9c:8c:17:17:52:a0:19:c4:67:99:05:ba:e2:9b:52:
         8f:6d:79:4c:a2:83:1e:01:16:66:cf:a0:0c:71:18:67:29:9e:
         d8:4d:e0:1e:a2:fb:1d:1a:a0:e6:34:82:3f:f2:4e:e4:89:e4:
         21:b2:04:3a:17:3f:6e:c0:e7:da:d8:b8:dc:73:0c:74:2c:67:
         bf:19:31:39:86:a3:00:31:2c:63:25:e8:19:43:77:cf:59:6a:
         c3:92:d6:7e:62:f1:53:89:aa:ea:99:40:c4:10:4e:1f:dc:25:
         1f:94:aa:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 15:12:45 2026 by rpki-client