Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/3138362e3233332e39332e302f32342d3234203d3e20323633303938.roa
File:                     3138362e3233332e39332e302f32342d3234203d3e20323633303938.roa (raw, json)
Hash identifier:          kccSYI1ebUCnPyQPjSlOMNVLfwblCDmir3TizC5xTBQ=
Subject key identifier:   2D:4C:10:40:1F:D1:8F:77:14:C3:CF:6C:08:A9:1B:26:4B:88:0C:B0
Certificate issuer:       /CN=74F9C88A4F4F16E11392F600961CE950348548CB
Certificate serial:       0E9C68FC46E5096764DA52DBE5EEDD31575954A6
Authority key identifier: 74:F9:C8:8A:4F:4F:16:E1:13:92:F6:00:96:1C:E9:50:34:85:48:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74F9C88A4F4F16E11392F600961CE950348548CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/3138362e3233332e39332e302f32342d3234203d3e20323633303938.roa
Signing time:             Wed 03 Jun 2026 16:11:23 +0000
ROA not before:           Wed 03 Jun 2026 16:06:23 +0000
ROA not after:            Wed 02 Jun 2027 16:11:23 +0000
asID:                     263098
IP address blocks:        186.233.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/74F9C88A4F4F16E11392F600961CE950348548CB.crl
                          rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/74F9C88A4F4F16E11392F600961CE950348548CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74F9C88A4F4F16E11392F600961CE950348548CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 09:51:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:9c:68:fc:46:e5:09:67:64:da:52:db:e5:ee:dd:31:57:59:54:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74F9C88A4F4F16E11392F600961CE950348548CB
        Validity
            Not Before: Jun  3 16:06:23 2026 GMT
            Not After : Jun  2 16:11:23 2027 GMT
        Subject: CN=2D4C10401FD18F7714C3CF6C08A91B264B880CB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:27:35:69:8a:03:3d:fb:93:55:3a:ea:8d:70:
                    48:0b:ae:f0:cf:f6:4b:55:5d:90:7b:74:27:59:9e:
                    41:1e:72:9b:8d:aa:11:af:d4:51:3d:95:b8:ba:65:
                    ec:98:d1:42:64:fb:8c:b8:0b:57:f7:21:14:b0:10:
                    37:9e:79:8e:64:f4:87:94:3d:ca:40:8b:50:97:6d:
                    e4:7b:02:5c:ba:06:51:06:7d:27:f5:08:80:76:09:
                    a9:e8:03:d4:56:2b:7d:36:91:64:3d:b4:e2:ad:35:
                    c7:c0:09:5d:83:c8:e8:ec:a8:28:8e:90:05:2c:79:
                    ad:ca:ae:71:9d:8a:61:4a:68:3c:94:82:a8:8c:8a:
                    10:1a:9a:1d:31:0b:83:c5:2e:18:71:56:f3:a9:19:
                    72:a5:65:05:32:b0:47:f9:8f:d0:4f:f8:b0:4e:70:
                    19:40:22:3b:05:d8:ed:05:6f:ce:c8:da:5a:29:8e:
                    d1:dd:c6:2a:b8:82:62:7f:29:99:3b:c0:40:a5:d5:
                    62:bd:94:a1:44:8a:bf:5b:13:8b:8b:b3:d8:ca:22:
                    0a:59:79:2f:a4:db:fc:15:f2:33:76:37:1b:9e:21:
                    66:73:a5:19:cd:28:1f:de:7b:a3:ed:e3:e9:3d:cc:
                    e4:7d:b3:0b:6f:49:4f:6d:df:68:d3:8a:38:87:60:
                    30:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:4C:10:40:1F:D1:8F:77:14:C3:CF:6C:08:A9:1B:26:4B:88:0C:B0
            X509v3 Authority Key Identifier:
                keyid:74:F9:C8:8A:4F:4F:16:E1:13:92:F6:00:96:1C:E9:50:34:85:48:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/74F9C88A4F4F16E11392F600961CE950348548CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74F9C88A4F4F16E11392F600961CE950348548CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/3138362e3233332e39332e302f32342d3234203d3e20323633303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:8f:2a:89:5c:7c:ea:a5:cc:a8:39:60:98:66:14:56:ef:d4:
         98:38:3e:cd:df:0e:16:82:56:af:78:9e:c1:c3:a3:93:80:34:
         70:bd:13:f6:76:89:97:90:f8:69:72:7d:7d:83:4d:d0:6a:93:
         38:b2:fa:56:05:9e:e5:fe:e3:08:b3:f0:e0:f7:1d:f9:03:17:
         2f:5c:3a:a5:1c:eb:2b:68:a8:db:2a:37:40:c6:17:25:40:c3:
         be:88:ee:af:66:bd:36:1e:18:05:9b:2a:1d:f6:f9:48:bb:91:
         86:9f:f0:ce:fd:67:5e:0e:6c:9e:69:01:5e:cb:59:a7:bc:dd:
         06:c7:c6:cc:6e:02:ce:02:89:51:93:d5:ec:0b:ff:97:2f:8b:
         81:26:1a:43:58:0a:c0:bd:64:e1:04:c9:9d:2e:2d:73:4b:95:
         28:65:55:7c:12:74:2b:cf:b5:b5:e3:52:8b:1f:40:77:63:dd:
         9f:2e:e7:23:d8:32:69:e1:18:54:86:c1:64:24:b2:6c:70:9f:
         b7:56:c6:69:bc:b0:c2:9f:df:31:44:c7:c1:5f:24:98:85:8a:
         3b:5d:85:73:d4:f3:18:ab:1d:5a:b9:ae:63:fd:46:38:6c:f6:
         ef:87:73:5f:ba:07:cd:28:42:ad:2e:74:49:be:a4:10:90:75:
         63:ec:8e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:16:59 2026 by rpki-client