Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/3138372e3131312e3131332e302f32342d3234203d3e20323731363830.roa
File:                     3138372e3131312e3131332e302f32342d3234203d3e20323731363830.roa (raw, json)
Hash identifier:          RL4tTlO01ZAy7+idHWRE/AbaxiMUrhuSZsvQGC0NEKI=
Subject key identifier:   04:92:8A:DC:5D:8A:22:BD:99:AB:B2:EE:31:D7:C8:10:8D:AA:FA:69
Certificate issuer:       /CN=0667C1E975614C995A6FB737132548928E943717
Certificate serial:       43EB2F86B45F5F653699AACB36E765DACCED1D72
Authority key identifier: 06:67:C1:E9:75:61:4C:99:5A:6F:B7:37:13:25:48:92:8E:94:37:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0667C1E975614C995A6FB737132548928E943717.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/3138372e3131312e3131332e302f32342d3234203d3e20323731363830.roa
Signing time:             Sat 24 Oct 2026 13:46:07 +0000
ROA not before:           Sat 24 Oct 2026 13:41:07 +0000
ROA not after:            Sat 23 Oct 2027 13:46:07 +0000
asID:                     271680
IP address blocks:        187.111.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.crl
                          rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0667C1E975614C995A6FB737132548928E943717.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 08:20:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:eb:2f:86:b4:5f:5f:65:36:99:aa:cb:36:e7:65:da:cc:ed:1d:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0667C1E975614C995A6FB737132548928E943717
        Validity
            Not Before: Oct 24 13:41:07 2026 GMT
            Not After : Oct 23 13:46:07 2027 GMT
        Subject: CN=04928ADC5D8A22BD99ABB2EE31D7C8108DAAFA69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5c:b6:57:e4:63:99:b0:de:f0:5f:2c:e6:d9:
                    25:47:60:9e:9b:df:04:bd:9b:44:40:01:64:01:09:
                    a2:0b:1e:3b:fe:42:03:73:64:d5:d4:37:9a:47:ba:
                    af:8d:ea:d5:a1:83:56:a3:68:d1:e0:e7:5c:41:9a:
                    05:09:a3:05:3b:d4:bd:6c:f4:24:44:6e:6e:f4:00:
                    2d:49:19:af:63:d0:d4:a9:1e:32:3f:7f:c6:ad:d4:
                    04:9e:23:f8:d3:df:8b:66:38:7e:d7:14:55:ed:b4:
                    71:64:4d:f0:54:85:36:07:82:6a:5e:84:63:98:ec:
                    42:2d:69:f4:34:ea:d7:98:b8:89:b5:a9:fc:77:87:
                    ca:38:63:8b:ee:91:71:1d:3a:b4:fb:e7:e5:f3:92:
                    95:d7:53:70:ca:83:3f:9a:c7:41:2b:42:d6:16:42:
                    ce:17:d6:17:94:d8:2e:85:08:6b:85:77:70:c8:b1:
                    ca:14:79:e9:e4:e1:e0:f6:ad:97:dc:e3:49:db:d2:
                    82:bf:ce:25:c5:7f:b2:c5:7c:4f:02:76:99:09:44:
                    55:fb:0f:89:e5:5e:81:8a:47:c9:96:a4:53:99:13:
                    8e:fb:f5:87:ad:16:23:59:e1:da:ea:43:d8:cd:e6:
                    77:f0:41:f7:fa:6a:07:9d:59:68:66:cc:3e:7d:c7:
                    e7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:92:8A:DC:5D:8A:22:BD:99:AB:B2:EE:31:D7:C8:10:8D:AA:FA:69
            X509v3 Authority Key Identifier:
                keyid:06:67:C1:E9:75:61:4C:99:5A:6F:B7:37:13:25:48:92:8E:94:37:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0667C1E975614C995A6FB737132548928E943717.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/3138372e3131312e3131332e302f32342d3234203d3e20323731363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:76:8e:00:16:5a:08:99:f9:97:f8:5f:9f:71:49:1d:ed:4a:
         65:9b:9a:45:6d:f8:b7:c4:bd:23:ad:04:63:b8:d8:94:22:bb:
         87:74:a9:84:ce:90:ed:88:48:30:aa:c2:1f:4b:8f:8f:70:fb:
         23:b5:e7:34:21:a1:69:01:b3:21:a8:d7:f8:b7:cd:f4:8e:77:
         17:7a:f1:5f:a1:07:8f:dc:6e:c4:b2:4d:4e:2e:e9:b2:20:3c:
         85:9f:92:e5:b2:48:d4:73:38:92:d3:ec:71:a6:53:17:4c:a6:
         90:56:0c:03:b1:1f:4d:3e:4a:4c:2a:bf:68:b0:04:d1:24:b9:
         3f:2e:d8:90:c6:1a:d5:37:b7:36:b9:e3:d8:b3:5d:c8:dc:52:
         27:b4:f6:a5:0b:f6:e9:39:49:02:ab:e8:4d:ad:25:c5:c3:02:
         56:c4:d2:9e:a2:60:45:95:35:51:e5:6b:88:2f:64:05:53:76:
         54:65:c3:7c:59:26:a6:42:a4:e0:2e:15:19:f7:a6:2f:1b:14:
         b8:43:40:7a:86:be:39:0b:64:f4:47:52:93:20:86:67:46:cf:
         60:b8:cd:55:9b:13:34:b8:75:1b:b0:e3:c6:00:6f:b7:0e:85:
         9e:04:60:ab:6d:c3:d3:73:b7:72:40:97:b5:3d:40:e1:4d:45:
         27:40:6b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:36:43 2026 by rpki-client