Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3138372e3130382e3139382e302f32342d3234203d3e203133333335.roa
File:                     3138372e3130382e3139382e302f32342d3234203d3e203133333335.roa (raw, json)
Hash identifier:          qIjbwiowTvRONm0o0iwnQMQrFMJJDZwWne1Fnl0MAU0=
Subject key identifier:   DF:79:C4:0B:9B:6C:CB:49:1D:49:0E:A9:D0:11:E9:9A:69:46:38:65
Certificate issuer:       /CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
Certificate serial:       4C3BD00A324F09C50400E955E2C61BFBE469F634
Authority key identifier: 1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3138372e3130382e3139382e302f32342d3234203d3e203133333335.roa
Signing time:             Mon 30 Mar 2026 23:09:20 +0000
ROA not before:           Mon 30 Mar 2026 23:04:20 +0000
ROA not after:            Mon 29 Mar 2027 23:09:20 +0000
asID:                     13335
IP address blocks:        187.108.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl
                          rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 05:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:3b:d0:0a:32:4f:09:c5:04:00:e9:55:e2:c6:1b:fb:e4:69:f6:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
        Validity
            Not Before: Mar 30 23:04:20 2026 GMT
            Not After : Mar 29 23:09:20 2027 GMT
        Subject: CN=DF79C40B9B6CCB491D490EA9D011E99A69463865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:71:8f:74:86:11:5a:18:59:80:c9:de:76:f2:
                    91:d0:4b:42:f2:b3:25:14:1e:8a:cd:fc:1b:79:db:
                    83:6f:1d:28:84:4a:ed:bd:9e:91:13:66:83:97:5a:
                    a1:b1:ff:42:80:88:d6:c9:7b:f4:1b:ff:01:dd:24:
                    c8:fc:65:9b:40:8c:cf:92:7d:20:a1:d2:67:9e:b5:
                    9f:6f:37:19:15:cc:f9:13:6d:c9:4c:67:50:83:90:
                    e1:cf:9d:a8:5c:65:83:8e:6e:21:8c:c3:e9:c7:d4:
                    af:c1:3f:6f:c1:77:b7:7d:4e:48:69:dc:41:08:d8:
                    e3:21:e2:ce:92:93:b5:77:1d:e6:bc:12:4f:1b:98:
                    d6:69:85:eb:4a:42:03:ed:db:a3:fd:32:0b:6e:e7:
                    50:ee:a4:dd:5b:ec:95:54:54:4c:14:f6:62:32:eb:
                    70:fa:a2:80:c9:b1:78:13:50:31:9e:b8:aa:5b:93:
                    33:c6:00:1f:26:2e:2d:35:5c:fa:58:b3:2e:31:b9:
                    01:fd:d4:25:d9:63:a9:48:16:4c:f8:e5:4a:39:75:
                    82:d6:94:22:f7:a5:d9:36:91:e0:05:25:ff:a2:b5:
                    29:6b:71:fd:66:8f:09:ac:80:06:82:44:9f:7c:ea:
                    84:84:c3:78:f5:35:db:97:45:19:83:29:1f:7e:22:
                    c7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:79:C4:0B:9B:6C:CB:49:1D:49:0E:A9:D0:11:E9:9A:69:46:38:65
            X509v3 Authority Key Identifier:
                keyid:1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3138372e3130382e3139382e302f32342d3234203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:fa:3f:1a:a7:45:2a:29:e3:23:58:27:8c:b4:eb:a6:df:94:
         93:58:aa:48:60:8b:25:df:1a:29:e5:0b:9c:98:ec:27:af:4c:
         1b:b4:36:e3:0d:af:b6:fe:91:e8:06:9a:2d:06:a8:bd:52:6a:
         24:37:8e:9a:92:87:fb:cb:e2:a8:b6:c3:63:33:d7:77:88:8e:
         ed:f5:7f:41:09:17:cd:8e:97:6a:6b:d9:e3:67:d4:a9:3d:61:
         1e:1d:0c:22:3e:d8:49:f4:c7:c5:01:4c:dd:a0:da:24:4e:9d:
         1e:4f:37:f7:8b:63:de:d4:22:7e:5f:05:c2:32:96:2f:2f:5f:
         f0:f9:46:50:86:43:c7:e8:ff:09:41:87:32:30:22:c9:f3:6f:
         9e:22:96:cf:ee:26:b0:1f:53:40:40:8f:ec:1b:c4:6c:03:c1:
         83:c2:68:1f:38:e2:c4:f7:f1:90:34:c6:ba:7f:da:33:98:00:
         82:23:2a:c3:73:fc:c4:5d:bf:8e:22:07:b6:8e:20:11:b3:5b:
         60:47:e0:1a:85:e7:4c:9b:6a:b9:8a:4d:31:f8:3c:2b:71:78:
         4c:2a:a9:f4:c0:20:b4:df:ce:7f:dc:38:1d:ec:d2:90:05:0f:
         68:93:5d:3e:5b:a4:6d:33:17:d5:21:e0:c2:aa:58:b4:68:db:
         0b:c5:96:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:40:55 2026 by rpki-client