Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/3138362e3233332e39342e302f32342d3234203d3e20323633303938.roa
File:                     3138362e3233332e39342e302f32342d3234203d3e20323633303938.roa (raw, json)
Hash identifier:          ib/CfFXr9tDks19HvN7j/Xn2B+9KYjuDGLvcYR/8Mwk=
Subject key identifier:   79:D2:F8:C7:8D:08:6F:B5:71:C9:8C:1F:85:01:28:D0:B6:CC:4E:B6
Certificate issuer:       /CN=74F9C88A4F4F16E11392F600961CE950348548CB
Certificate serial:       20900EF55A7EFFC705ABE49CD5210FA655DE1772
Authority key identifier: 74:F9:C8:8A:4F:4F:16:E1:13:92:F6:00:96:1C:E9:50:34:85:48:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74F9C88A4F4F16E11392F600961CE950348548CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/3138362e3233332e39342e302f32342d3234203d3e20323633303938.roa
Signing time:             Wed 03 Jun 2026 16:11:24 +0000
ROA not before:           Wed 03 Jun 2026 16:06:24 +0000
ROA not after:            Wed 02 Jun 2027 16:11:24 +0000
asID:                     263098
IP address blocks:        186.233.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/74F9C88A4F4F16E11392F600961CE950348548CB.crl
                          rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/74F9C88A4F4F16E11392F600961CE950348548CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74F9C88A4F4F16E11392F600961CE950348548CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 09:51:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:90:0e:f5:5a:7e:ff:c7:05:ab:e4:9c:d5:21:0f:a6:55:de:17:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74F9C88A4F4F16E11392F600961CE950348548CB
        Validity
            Not Before: Jun  3 16:06:24 2026 GMT
            Not After : Jun  2 16:11:24 2027 GMT
        Subject: CN=79D2F8C78D086FB571C98C1F850128D0B6CC4EB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:03:e3:e9:42:ef:ec:eb:3d:99:89:1b:6b:d8:
                    08:fd:11:b4:4c:c2:a7:eb:fb:d1:a3:31:8a:43:53:
                    14:52:dd:c6:6d:03:c0:87:cb:9b:b1:f9:47:c0:7b:
                    c5:5f:15:22:6a:99:76:52:ad:f3:58:a7:66:28:2a:
                    5c:3d:5b:f0:c2:b7:61:21:93:2d:55:c1:3e:9f:f0:
                    91:52:c7:73:26:e4:66:6c:33:e4:d8:3d:3f:b4:b7:
                    3b:db:66:c3:bf:1b:3e:16:c6:cd:5f:3e:db:ec:88:
                    19:07:0c:c4:68:16:e0:83:e3:48:44:27:c4:33:fa:
                    e7:8d:bb:e7:5f:7a:c3:d5:6a:31:51:f9:6f:a3:0d:
                    20:9b:48:e6:63:20:7a:e3:b3:fd:50:b2:1e:3e:a7:
                    4c:ef:06:42:1d:2e:21:57:ac:e5:9f:4f:73:e0:54:
                    f2:53:de:a5:85:3b:0b:6a:b5:1a:9a:cd:20:5d:47:
                    5d:6a:21:f1:ee:ae:9f:2b:e1:62:5b:8a:e9:7e:d2:
                    6f:7c:10:c6:8e:4c:48:f3:43:74:44:e5:7f:3f:a9:
                    b7:a3:b5:3c:f9:1a:e4:0f:67:ba:9f:43:76:4d:23:
                    1d:cc:f1:3b:09:36:dd:93:8f:a9:52:ed:41:5b:dc:
                    03:eb:68:33:8f:c1:b9:49:8a:de:ab:4b:46:e9:bb:
                    d2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D2:F8:C7:8D:08:6F:B5:71:C9:8C:1F:85:01:28:D0:B6:CC:4E:B6
            X509v3 Authority Key Identifier:
                keyid:74:F9:C8:8A:4F:4F:16:E1:13:92:F6:00:96:1C:E9:50:34:85:48:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/74F9C88A4F4F16E11392F600961CE950348548CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74F9C88A4F4F16E11392F600961CE950348548CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/3138362e3233332e39342e302f32342d3234203d3e20323633303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:ea:4e:78:84:9b:fb:dd:05:aa:77:6d:69:d7:c8:f2:7d:f2:
         f0:85:f1:26:25:e1:88:de:d9:01:f4:7e:08:a4:bd:da:12:e1:
         7e:02:6a:b3:44:dd:12:19:67:b7:1d:5d:b9:d6:a0:14:5d:a6:
         0a:19:c0:80:65:1f:71:a2:36:21:25:74:2c:a6:59:dd:93:00:
         70:68:cb:e3:73:a8:5f:d8:79:97:19:2a:01:ce:5d:7a:0c:58:
         71:d2:aa:07:a5:d9:4a:42:f1:ac:82:88:00:37:be:71:4e:ef:
         4c:6c:7d:b5:6f:5f:9b:2d:90:88:1d:43:64:c7:ff:b6:1a:7d:
         fa:c1:46:24:5d:2c:ab:e9:be:04:57:ca:8f:71:42:e4:74:ff:
         a3:1f:6d:f5:59:a2:5d:e8:8f:16:7e:8e:55:2c:5f:c1:b1:77:
         99:6a:92:70:13:71:d5:4f:42:4e:d8:c2:09:53:06:a7:c3:e9:
         91:f9:0d:db:32:6d:33:da:10:05:e1:b8:c7:19:1f:1b:cc:1d:
         aa:d3:ee:d9:ce:53:4b:8c:a0:d2:9b:6d:df:a1:f5:13:b9:3f:
         7f:cc:94:27:1d:e3:a8:b9:ff:31:7a:85:f4:e5:af:6d:2d:d9:
         a3:b7:f1:9a:a8:c5:30:0d:9a:c9:40:35:20:eb:d4:6b:d8:bb:
         6a:0a:d9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:17:02 2026 by rpki-client