Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/3138362e3233332e3137362e302f32312d3332203d3e203533323039.roa
File:                     3138362e3233332e3137362e302f32312d3332203d3e203533323039.roa (raw, json)
Hash identifier:          Iym5Nq5Cop0gSlyPwSBrURCecdd1L8UNHVwpC5FY0JU=
Subject key identifier:   73:3B:12:C0:17:51:FC:8D:B4:8A:2F:80:57:F6:4D:9A:5A:75:EE:8C
Certificate issuer:       /CN=8B2C1EFAA93040517EA3D09D1CF4DDC53BEEF97F
Certificate serial:       1A04B6FA6A06F15975CD4AEDC0043179E77A10A7
Authority key identifier: 8B:2C:1E:FA:A9:30:40:51:7E:A3:D0:9D:1C:F4:DD:C5:3B:EE:F9:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B2C1EFAA93040517EA3D09D1CF4DDC53BEEF97F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/3138362e3233332e3137362e302f32312d3332203d3e203533323039.roa
Signing time:             Mon 06 Apr 2026 11:49:31 +0000
ROA not before:           Mon 06 Apr 2026 11:44:31 +0000
ROA not after:            Mon 05 Apr 2027 11:49:31 +0000
asID:                     53209
IP address blocks:        186.233.176.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/8B2C1EFAA93040517EA3D09D1CF4DDC53BEEF97F.crl
                          rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/8B2C1EFAA93040517EA3D09D1CF4DDC53BEEF97F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B2C1EFAA93040517EA3D09D1CF4DDC53BEEF97F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 03:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:04:b6:fa:6a:06:f1:59:75:cd:4a:ed:c0:04:31:79:e7:7a:10:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B2C1EFAA93040517EA3D09D1CF4DDC53BEEF97F
        Validity
            Not Before: Apr  6 11:44:31 2026 GMT
            Not After : Apr  5 11:49:31 2027 GMT
        Subject: CN=733B12C01751FC8DB48A2F8057F64D9A5A75EE8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:01:b8:1e:7a:0e:b6:27:a3:bb:9b:81:f1:31:
                    34:08:5e:f8:77:10:54:9f:fd:73:8a:09:e6:77:79:
                    8e:a5:d0:18:c2:58:b6:61:be:a4:e9:05:e0:12:3f:
                    d8:00:1d:6a:e7:7e:fb:13:b5:9c:f6:e6:69:22:b8:
                    61:50:c9:7e:f1:43:f0:5d:af:ba:4d:1c:8a:2a:8e:
                    f0:dd:68:4c:4d:bf:27:40:1c:b6:00:78:12:e9:70:
                    c2:ac:c3:37:b5:f3:24:6f:e3:41:c8:54:7d:62:05:
                    01:28:aa:2d:67:7f:17:70:62:31:38:48:33:65:45:
                    75:6a:86:2c:1b:6a:76:86:dc:ca:61:28:df:a8:40:
                    f5:d1:f1:9f:b9:c8:16:6e:9d:9c:ef:bd:74:e8:fb:
                    78:df:d9:71:8b:c5:b2:75:9b:cc:f2:16:3b:29:46:
                    45:0d:a6:d1:8a:50:23:84:60:c1:7c:a8:71:5a:0c:
                    43:bb:d8:fe:bc:2e:f3:28:71:1e:00:8f:89:57:99:
                    a5:d6:8b:67:8c:04:bb:48:14:bc:7f:13:c4:bf:ab:
                    f5:eb:b8:33:0a:31:4c:82:68:25:3d:68:98:3f:ab:
                    11:93:62:36:a3:5d:be:28:1e:50:99:98:59:41:56:
                    1c:af:6a:49:67:be:85:e3:6d:29:ee:45:8f:55:66:
                    9d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:3B:12:C0:17:51:FC:8D:B4:8A:2F:80:57:F6:4D:9A:5A:75:EE:8C
            X509v3 Authority Key Identifier:
                keyid:8B:2C:1E:FA:A9:30:40:51:7E:A3:D0:9D:1C:F4:DD:C5:3B:EE:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/8B2C1EFAA93040517EA3D09D1CF4DDC53BEEF97F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B2C1EFAA93040517EA3D09D1CF4DDC53BEEF97F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/3138362e3233332e3137362e302f32312d3332203d3e203533323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         dc:7d:70:da:40:c1:b2:38:7e:69:72:7d:04:18:d0:28:25:c7:
         b3:bb:25:c3:de:3a:8b:b3:87:f7:c9:38:f6:cf:68:f2:52:e3:
         05:66:8f:c6:b8:c8:e1:ef:05:0b:be:bf:cb:f6:49:ea:06:45:
         8d:03:6a:cf:eb:28:fa:1a:58:c8:9a:30:89:02:9e:0d:46:e6:
         ca:d7:c0:4a:c1:1a:ea:51:2f:45:b3:0b:88:41:67:ef:8f:b3:
         07:ed:06:1f:a4:10:98:d9:8a:05:20:68:ce:c7:32:ea:88:11:
         51:a0:e8:1f:53:f7:aa:cd:a6:38:bc:19:2c:b7:94:8f:b9:53:
         81:ee:fb:93:26:bb:4a:43:75:ef:8f:f4:13:79:df:51:e7:d3:
         d3:79:f5:62:dc:b2:31:85:90:85:63:61:b0:2e:31:29:4a:db:
         b2:d4:b4:21:64:01:f9:74:ce:c4:2b:c3:b7:82:21:df:2a:17:
         38:53:e3:b5:61:50:31:10:c2:da:e0:82:61:96:de:a5:37:76:
         2b:9b:2a:b8:dd:8d:2c:2a:1e:b7:9b:e0:a4:fb:01:f9:9a:e5:
         d8:9e:df:7a:79:c7:5f:b6:6f:a9:c6:1c:af:13:81:52:62:48:
         0f:f5:0f:86:12:83:80:22:5f:b3:d8:91:a2:a2:c9:48:51:22:
         af:fb:38:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 12:52:50 2026 by rpki-client