Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3138372e3131302e3136352e302f32342d3234203d3e203133333335.roa
File:                     3138372e3131302e3136352e302f32342d3234203d3e203133333335.roa (raw, json)
Hash identifier:          td9CgtVPH5NOxX5TEhdRqSRRXWrCtp0zMczRvKb0IfA=
Subject key identifier:   48:64:4C:39:C7:01:C3:08:6E:71:0F:4E:B7:F2:54:F0:E5:DC:56:59
Certificate issuer:       /CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
Certificate serial:       4C66B3BB41AC295BFDCBFF6019BD47E3D4C353B1
Authority key identifier: 1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3138372e3131302e3136352e302f32342d3234203d3e203133333335.roa
Signing time:             Mon 30 Mar 2026 23:07:48 +0000
ROA not before:           Mon 30 Mar 2026 23:02:48 +0000
ROA not after:            Mon 29 Mar 2027 23:07:48 +0000
asID:                     13335
IP address blocks:        187.110.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl
                          rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 05:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:66:b3:bb:41:ac:29:5b:fd:cb:ff:60:19:bd:47:e3:d4:c3:53:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
        Validity
            Not Before: Mar 30 23:02:48 2026 GMT
            Not After : Mar 29 23:07:48 2027 GMT
        Subject: CN=48644C39C701C3086E710F4EB7F254F0E5DC5659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5a:82:67:50:de:8e:b6:69:59:1e:d7:9c:36:
                    51:af:71:ff:b6:a6:14:16:ae:7e:67:29:55:41:bd:
                    b4:a1:60:21:82:6b:fe:7a:84:98:0e:eb:cb:89:9a:
                    eb:9d:e2:03:94:76:07:36:da:85:ca:dd:1e:13:4d:
                    5f:68:ac:b5:b9:a6:15:37:d4:79:be:af:dc:e1:70:
                    0d:da:2e:f3:18:be:e0:d1:a8:c8:52:0f:9c:fe:95:
                    3d:cf:c4:2c:4f:97:29:c3:97:00:c1:cc:8e:15:8d:
                    31:cc:bf:3b:ea:82:c0:c5:e7:cf:10:01:73:54:07:
                    35:ad:ae:01:7a:36:57:9b:e3:ac:9d:24:e5:27:54:
                    59:ef:00:ce:96:71:8e:13:06:15:87:c5:58:40:65:
                    6e:b3:2b:f6:e2:9e:3a:5a:43:68:92:e0:a1:07:fc:
                    38:c9:bd:d6:c9:33:0b:df:83:f7:97:f5:af:b9:e5:
                    b4:92:0e:b6:76:e7:03:aa:54:25:a2:6a:02:8b:6e:
                    76:35:a1:5e:3c:35:d5:27:84:42:d0:39:25:77:b7:
                    b4:87:97:e6:0e:3b:52:47:8d:67:45:43:f8:12:e8:
                    56:d0:9d:52:98:c9:9e:01:1c:b1:61:0f:af:f9:8d:
                    1d:b0:ff:69:04:c5:f6:35:8e:96:e9:97:b7:8c:8a:
                    b2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:64:4C:39:C7:01:C3:08:6E:71:0F:4E:B7:F2:54:F0:E5:DC:56:59
            X509v3 Authority Key Identifier:
                keyid:1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3138372e3131302e3136352e302f32342d3234203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:3f:4c:50:7c:11:be:f5:5e:db:4a:71:6f:53:b0:1d:d6:37:
         08:4a:aa:e1:34:21:64:a9:55:3e:70:86:a3:62:ff:19:af:57:
         6b:b8:18:18:70:3b:52:4d:4d:2b:85:6f:ca:18:bf:ae:28:92:
         0b:ef:e9:98:71:07:4e:eb:43:4d:ef:d4:f5:fc:60:84:71:ad:
         7a:28:27:96:5d:17:bb:f3:4e:9c:00:d3:c1:5b:ba:0a:83:b6:
         d6:09:1b:eb:d5:93:87:80:0a:c9:f2:65:a6:04:a6:17:9c:6d:
         3e:ca:cd:69:c2:5c:a3:f6:e3:7b:b9:92:0d:86:84:87:81:3b:
         47:8a:1a:fc:7a:fe:92:9e:18:59:b7:0c:7a:63:cd:92:0b:e0:
         c8:4d:1a:94:19:72:ea:a6:8d:ba:b4:85:32:fa:ad:5c:46:8c:
         9d:a4:ce:a5:9d:40:c8:5a:0d:bd:dd:b1:34:e3:7e:01:ed:97:
         c9:cc:a5:22:5e:05:a8:63:bb:cb:7c:80:6e:f7:c4:57:db:da:
         4e:c0:7b:0c:99:c7:6d:1b:f8:1f:49:a5:e5:3b:1e:f4:b5:26:
         a0:96:ac:fd:a8:04:2f:90:b1:cc:79:71:f5:d1:38:ce:e4:28:
         71:b2:1f:0c:ee:9d:30:f5:f2:fb:63:6d:b3:d5:1c:69:cd:c2:
         f2:1f:01:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:41:02 2026 by rpki-client