Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3138362e3139342e34382e302f32342d3234203d3e203133333335.roa
File:                     3138362e3139342e34382e302f32342d3234203d3e203133333335.roa (raw, json)
Hash identifier:          5nf/0RAHPIAigCQnyetq81fSnxuRgPhOdWC1MoqZDb8=
Subject key identifier:   25:14:1B:E2:81:ED:37:33:AE:67:8D:3B:BB:08:3D:C9:5F:8B:9F:FE
Certificate issuer:       /CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
Certificate serial:       565A27EAE2F95C12C58C60B2EAAFF49801E9DCA9
Authority key identifier: 1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3138362e3139342e34382e302f32342d3234203d3e203133333335.roa
Signing time:             Mon 30 Mar 2026 23:04:50 +0000
ROA not before:           Mon 30 Mar 2026 22:59:50 +0000
ROA not after:            Mon 29 Mar 2027 23:04:50 +0000
asID:                     13335
IP address blocks:        186.194.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl
                          rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 05:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:5a:27:ea:e2:f9:5c:12:c5:8c:60:b2:ea:af:f4:98:01:e9:dc:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
        Validity
            Not Before: Mar 30 22:59:50 2026 GMT
            Not After : Mar 29 23:04:50 2027 GMT
        Subject: CN=25141BE281ED3733AE678D3BBB083DC95F8B9FFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:22:04:4c:de:75:02:f0:76:5c:be:58:73:5f:
                    bc:78:e8:d0:71:61:06:f4:2f:49:84:fd:ff:4a:56:
                    7a:00:5c:56:f8:7b:93:a9:f3:89:69:3c:28:cd:7c:
                    07:b8:01:c8:5b:d6:3b:08:35:1b:fe:d0:27:f5:20:
                    c0:b5:bb:e2:cd:c4:b4:a9:2a:30:97:ce:3e:52:84:
                    47:2b:14:3c:d7:26:cc:21:d2:1c:b0:2a:7c:8f:2c:
                    f2:a2:77:37:94:11:62:12:3a:9b:f3:49:9d:5a:c9:
                    95:f6:7b:b4:93:28:79:9b:6c:14:87:18:58:bc:1f:
                    7e:84:b3:0a:93:0f:aa:94:b9:4f:0a:10:c2:a7:72:
                    31:8b:02:2f:f0:3f:4d:19:dd:ca:06:f7:84:f3:4d:
                    fb:ab:12:0a:2f:28:fa:ab:d0:f5:c8:a6:67:4c:c2:
                    a4:50:23:5f:ba:6d:7c:5a:73:31:53:f0:c5:09:f1:
                    7f:45:1f:d5:5f:d4:ea:68:41:0a:01:11:2e:33:af:
                    3b:56:01:04:0c:66:a1:1a:0e:61:a7:b4:14:7a:b9:
                    2c:fd:a7:51:22:7f:f3:49:47:9e:1c:06:ab:27:c4:
                    3b:83:a9:1d:8d:92:3a:38:c0:5a:3f:e8:d0:08:22:
                    60:1c:8c:00:3f:ec:6a:69:1f:87:a3:20:f5:88:a3:
                    92:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:14:1B:E2:81:ED:37:33:AE:67:8D:3B:BB:08:3D:C9:5F:8B:9F:FE
            X509v3 Authority Key Identifier:
                keyid:1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3138362e3139342e34382e302f32342d3234203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:b5:c0:71:92:04:1e:11:03:85:e8:8a:42:74:d8:84:9e:ad:
         03:35:ce:eb:e6:e8:b2:5e:7e:e5:1f:e7:35:07:17:49:24:6a:
         27:25:a0:e7:87:4e:d7:8e:07:41:69:53:1d:f8:c4:81:ed:e3:
         1b:91:c5:07:42:d5:3c:d1:b9:69:a9:7b:30:59:16:12:31:1a:
         27:93:6d:30:73:a7:51:08:51:89:2c:48:2b:2d:fa:cf:33:0a:
         20:b0:9d:f7:3d:c1:75:a5:cd:db:0a:0c:5d:14:a9:1d:8a:c4:
         47:9f:e6:c2:3b:c2:dd:e3:e0:d4:e7:3f:00:e0:90:c9:02:15:
         21:f3:17:a3:f9:51:57:03:7e:4c:6a:2e:2c:8b:7b:eb:69:b6:
         d3:89:58:ef:9c:c8:a3:ac:04:5e:6d:76:36:ff:49:a2:0c:6e:
         22:92:3b:bd:54:48:e3:45:34:0c:0f:1d:d7:43:78:9a:c7:58:
         71:b3:1f:59:dd:67:57:6c:77:ce:1e:3b:6f:f4:f7:8e:66:33:
         de:1d:03:54:ab:96:02:f8:68:a6:fb:85:21:5f:35:d7:d8:2c:
         ad:04:07:8a:51:71:33:60:21:5c:9a:95:a0:ea:70:33:42:5d:
         3d:05:bb:8f:fb:3c:1e:97:26:92:59:6c:ef:e0:61:f1:90:dc:
         f1:47:bc:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:40:57 2026 by rpki-client