Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tGNA9QKiEfttpXYbwWoPKkYvsS5SdgcMKd24SUwoV8G/0/3138362e3233372e32342e302f32322d3234203d3e20323633303437.roa
File:                     3138362e3233372e32342e302f32322d3234203d3e20323633303437.roa (raw, json)
Hash identifier:          M5vFBJR963/Wmv7dKGC73Jfds7qgo+PuXfwFje6DF5g=
Subject key identifier:   0C:98:1B:73:4F:47:84:8E:3D:C6:63:01:64:E1:9E:E9:AB:38:70:3A
Certificate issuer:       /CN=953D3B8F2A529D58CD089958DDC510BFFCC2B0B4
Certificate serial:       0514BA177C9ADAA06DD60FF9B42A4C9712FE6A5B
Authority key identifier: 95:3D:3B:8F:2A:52:9D:58:CD:08:99:58:DD:C5:10:BF:FC:C2:B0:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/953D3B8F2A529D58CD089958DDC510BFFCC2B0B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tGNA9QKiEfttpXYbwWoPKkYvsS5SdgcMKd24SUwoV8G/0/3138362e3233372e32342e302f32322d3234203d3e20323633303437.roa
Signing time:             Mon 15 Jun 2026 22:17:06 +0000
ROA not before:           Mon 15 Jun 2026 22:12:06 +0000
ROA not after:            Mon 14 Jun 2027 22:17:06 +0000
asID:                     263047
IP address blocks:        186.237.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tGNA9QKiEfttpXYbwWoPKkYvsS5SdgcMKd24SUwoV8G/0/953D3B8F2A529D58CD089958DDC510BFFCC2B0B4.crl
                          rsync://rpki-repo.registro.br/repo/2tGNA9QKiEfttpXYbwWoPKkYvsS5SdgcMKd24SUwoV8G/0/953D3B8F2A529D58CD089958DDC510BFFCC2B0B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/953D3B8F2A529D58CD089958DDC510BFFCC2B0B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 07:39:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:14:ba:17:7c:9a:da:a0:6d:d6:0f:f9:b4:2a:4c:97:12:fe:6a:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=953D3B8F2A529D58CD089958DDC510BFFCC2B0B4
        Validity
            Not Before: Jun 15 22:12:06 2026 GMT
            Not After : Jun 14 22:17:06 2027 GMT
        Subject: CN=0C981B734F47848E3DC6630164E19EE9AB38703A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f2:d1:65:d8:a0:e7:86:79:93:8e:b1:65:9d:
                    82:8e:53:33:64:48:d9:98:dd:67:ea:3a:0a:d7:19:
                    17:61:cb:15:74:3d:e8:d8:75:75:cf:8c:4c:cd:83:
                    55:1c:fc:1b:a3:2e:b9:52:20:f8:ba:ae:f4:31:1a:
                    01:a3:3c:34:49:77:bc:59:65:f0:ff:5c:ff:21:30:
                    27:de:01:31:f0:62:52:4e:70:c2:63:3e:10:d2:b3:
                    12:11:1a:ef:2a:22:33:69:f3:9e:c4:3e:44:b3:ee:
                    65:50:2e:38:d0:bc:b5:35:6c:4b:2e:61:7d:ce:bd:
                    cc:02:cf:eb:4c:44:ea:30:56:18:0b:11:a7:9d:6f:
                    bc:ba:26:36:53:95:1c:87:6e:ed:94:28:a2:9d:6f:
                    16:23:e4:87:6b:59:59:7a:19:b9:35:4d:c5:94:a3:
                    8e:2b:54:b9:be:e9:3f:72:71:8b:f6:37:bc:40:dd:
                    c9:e3:a0:f0:88:f6:e2:a0:52:37:13:b6:9b:12:d8:
                    18:7f:fc:66:64:ad:87:ad:ff:ae:bf:cd:5e:0d:d7:
                    db:39:df:6c:cd:8e:7d:97:79:9c:fc:1b:92:a7:96:
                    ce:f6:9c:46:b0:d2:5e:22:63:1d:c7:70:0a:d5:9a:
                    6d:af:30:af:a1:1a:34:fa:ed:63:65:de:b4:d6:70:
                    b8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:98:1B:73:4F:47:84:8E:3D:C6:63:01:64:E1:9E:E9:AB:38:70:3A
            X509v3 Authority Key Identifier:
                keyid:95:3D:3B:8F:2A:52:9D:58:CD:08:99:58:DD:C5:10:BF:FC:C2:B0:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tGNA9QKiEfttpXYbwWoPKkYvsS5SdgcMKd24SUwoV8G/0/953D3B8F2A529D58CD089958DDC510BFFCC2B0B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/953D3B8F2A529D58CD089958DDC510BFFCC2B0B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tGNA9QKiEfttpXYbwWoPKkYvsS5SdgcMKd24SUwoV8G/0/3138362e3233372e32342e302f32322d3234203d3e20323633303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.237.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:c2:65:88:bc:6a:8e:5d:28:4a:7a:5c:c5:0f:ad:a3:5b:93:
         93:6c:9d:80:e5:9d:9c:57:6c:2f:48:6b:60:65:8b:b3:4c:9e:
         0c:83:11:18:c0:0c:15:aa:0e:b6:a2:af:ca:09:45:43:9c:97:
         3b:6b:63:af:7e:6d:32:ef:82:2d:ec:fe:a9:7a:e2:35:5e:85:
         3b:07:52:7f:1b:36:aa:97:af:88:fc:2d:1e:be:29:77:7f:10:
         dd:77:2c:8c:64:03:84:81:25:37:37:ec:6c:7f:e5:42:90:7e:
         0b:26:53:2c:17:f4:ef:ef:0e:f6:d0:f0:db:23:1d:aa:8e:af:
         3f:c2:02:cb:98:ef:e7:f9:e6:b8:e7:09:06:6c:06:ca:34:98:
         90:ba:72:ec:c5:c3:44:06:6e:ae:ae:48:79:4e:6f:dc:0f:c7:
         d1:5a:60:ad:bc:f3:25:cc:dd:73:9c:9a:91:74:5f:6b:10:9a:
         57:9b:90:ac:13:86:72:5b:bc:4b:13:7d:13:8e:ef:6e:dd:92:
         bb:50:44:20:ed:06:3c:46:22:36:e0:d6:45:fd:06:3d:43:38:
         4e:a1:b1:e1:ee:69:87:dc:05:e0:ea:de:02:d7:1d:4a:6c:40:
         48:17:a7:3a:08:bf:62:38:3a:64:0e:ca:36:7d:38:fd:40:b5:
         2d:c7:08:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 14:07:47 2026 by rpki-client