Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/3138362e3233372e372e302f32342d3234203d3e20323632373937.roa
File:                     3138362e3233372e372e302f32342d3234203d3e20323632373937.roa (raw, json)
Hash identifier:          PDohhXvoqcOGRPRAL0+C3r0cPpcZTZaZnZabYzu528w=
Subject key identifier:   BB:F0:66:34:4B:1A:9A:57:6F:41:B6:E4:82:1C:B6:DA:77:38:A5:CD
Certificate issuer:       /CN=36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6
Certificate serial:       5C7454AF8DD1EBD75D1EB10FFE47E34F4C6A8625
Authority key identifier: 36:C9:A9:AD:CE:53:2B:3D:4D:E3:67:78:AC:FD:C3:B3:AF:5F:D0:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/3138362e3233372e372e302f32342d3234203d3e20323632373937.roa
Signing time:             Thu 27 Aug 2026 20:19:04 +0000
ROA not before:           Thu 27 Aug 2026 20:14:04 +0000
ROA not after:            Thu 26 Aug 2027 20:19:04 +0000
asID:                     262797
IP address blocks:        186.237.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.crl
                          rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 15:30:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:74:54:af:8d:d1:eb:d7:5d:1e:b1:0f:fe:47:e3:4f:4c:6a:86:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6
        Validity
            Not Before: Aug 27 20:14:04 2026 GMT
            Not After : Aug 26 20:19:04 2027 GMT
        Subject: CN=BBF066344B1A9A576F41B6E4821CB6DA7738A5CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:67:6b:22:7f:8c:41:0d:a8:b9:3e:51:73:a5:
                    ae:1c:b3:fe:63:bc:84:a6:f6:ab:91:ee:86:0c:d0:
                    df:c7:ea:82:18:bd:c8:48:e1:21:b6:a5:ea:2b:cb:
                    a7:63:c8:f7:9d:b5:73:2c:cc:4a:68:38:80:12:dd:
                    18:66:ef:94:2a:37:71:70:2a:a6:a4:c8:9a:4a:f1:
                    19:1a:de:36:91:1e:f4:85:bb:e9:9b:50:67:c0:e2:
                    ca:fc:7e:01:57:4a:0e:95:b8:40:7b:ef:95:8b:4e:
                    06:91:81:de:f9:bf:58:20:88:bc:51:6f:91:73:0e:
                    cb:6c:b7:ba:39:83:fb:2f:81:57:b6:a0:71:cf:24:
                    3c:ed:ed:c0:9e:b3:cb:d9:5e:c6:0b:c3:b5:31:30:
                    6c:45:5e:61:be:60:b5:c6:93:71:ff:24:6d:cb:9a:
                    8a:73:8c:67:61:9f:7c:bf:97:a4:a9:d8:aa:95:6b:
                    c5:b2:2b:8e:e6:6a:c7:34:92:ad:fb:76:59:76:e2:
                    cc:6e:ba:31:0b:a9:5d:1b:3e:d2:4a:50:1d:df:3f:
                    79:03:9b:b7:f1:70:72:41:7e:2f:56:a0:c9:01:ac:
                    23:95:e5:1a:7f:d3:40:b9:48:49:36:8a:0c:0a:24:
                    2c:bc:fa:d3:cc:e5:f0:04:4f:31:99:8b:07:93:24:
                    f9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F0:66:34:4B:1A:9A:57:6F:41:B6:E4:82:1C:B6:DA:77:38:A5:CD
            X509v3 Authority Key Identifier:
                keyid:36:C9:A9:AD:CE:53:2B:3D:4D:E3:67:78:AC:FD:C3:B3:AF:5F:D0:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/3138362e3233372e372e302f32342d3234203d3e20323632373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.237.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:c4:c5:89:cd:b8:9b:95:ac:cc:59:02:c4:ff:35:e6:eb:05:
         51:a9:5d:f7:a0:6b:48:e4:0a:cf:e5:0e:9c:82:26:6a:fe:bc:
         31:ce:a5:a1:65:f5:3c:81:0e:52:25:0a:35:41:71:e9:ed:20:
         26:d2:55:b8:ff:94:f9:86:49:33:b8:20:6e:e1:87:74:55:0d:
         99:11:a2:3f:d4:63:9c:e0:a9:40:21:ea:25:11:29:ed:79:a3:
         34:dc:01:2d:75:43:4a:0b:dc:d7:75:70:ed:88:17:76:3b:23:
         b9:b6:c5:e3:e0:18:df:4f:45:35:1c:eb:d9:ee:77:03:0c:4e:
         61:cd:cf:10:9b:92:0e:df:02:e5:90:2b:a6:42:04:e1:b3:c9:
         8d:25:61:72:7a:e5:3a:a4:27:d2:19:fd:4f:d6:44:de:dd:55:
         eb:f8:74:0a:79:0e:dc:86:c1:01:d4:ed:90:2e:52:2c:0b:f3:
         01:51:75:1a:dc:94:bb:14:ce:d9:fe:a2:1c:96:aa:61:d5:8a:
         4f:c8:c8:40:5e:84:4f:eb:7c:71:cb:d2:b0:16:db:ad:1e:2b:
         77:31:c8:7b:be:4c:df:74:ac:76:b8:d6:64:e0:56:3f:d1:1c:
         a1:1e:79:12:6c:a0:63:b4:f0:ff:f9:b7:5b:43:89:6b:5d:fa:
         34:6c:d6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 14:59:38 2026 by rpki-client