Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3139322e31302e302f32342d3234203d3e20323635393532.roa
File:                     3138362e3139322e31302e302f32342d3234203d3e20323635393532.roa (raw, json)
Hash identifier:          Uf99kb3DsMScTA1BM5TERzPIiuTDHtkj7NVJz/GaZHg=
Subject key identifier:   13:95:DA:B3:A5:A2:F0:9F:25:BB:69:58:BA:9F:8C:2A:6A:D9:A1:D0
Certificate issuer:       /CN=33D99D98BFD993CB7DE4284CD0B834BDAA1FB768
Certificate serial:       1DE71D5BBB77E6615C62369EBE8B542010049211
Authority key identifier: 33:D9:9D:98:BF:D9:93:CB:7D:E4:28:4C:D0:B8:34:BD:AA:1F:B7:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3139322e31302e302f32342d3234203d3e20323635393532.roa
Signing time:             Fri 15 May 2026 17:58:45 +0000
ROA not before:           Fri 15 May 2026 17:53:45 +0000
ROA not after:            Fri 14 May 2027 17:58:45 +0000
asID:                     265952
IP address blocks:        186.192.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl
                          rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 03:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:e7:1d:5b:bb:77:e6:61:5c:62:36:9e:be:8b:54:20:10:04:92:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33D99D98BFD993CB7DE4284CD0B834BDAA1FB768
        Validity
            Not Before: May 15 17:53:45 2026 GMT
            Not After : May 14 17:58:45 2027 GMT
        Subject: CN=1395DAB3A5A2F09F25BB6958BA9F8C2A6AD9A1D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7e:35:d8:dc:45:fd:12:a6:bd:e2:2b:f7:1b:
                    30:d0:11:dc:16:69:a6:b8:49:89:e2:7a:87:93:a0:
                    a5:22:e9:6f:fe:eb:7d:6f:8f:fa:af:be:44:dc:3a:
                    e7:a7:ed:95:15:95:a5:dc:7c:45:af:ca:59:67:42:
                    ed:42:b9:c1:c2:cf:c0:b7:dd:c9:b4:cf:44:53:ac:
                    af:7f:1b:94:3f:7d:2e:71:6e:50:c1:5d:c7:cb:80:
                    3d:74:6f:29:d4:0d:9b:f3:be:1c:a0:a1:a0:75:9b:
                    c1:ef:27:09:f4:9c:7e:0a:1b:93:50:b8:ba:23:cd:
                    25:1f:56:b7:9f:e7:13:95:0a:14:fd:bb:15:5d:7a:
                    c8:53:09:32:06:6a:f7:ca:50:b2:9f:1d:cc:d7:8e:
                    4a:48:c1:b3:45:55:29:dc:27:f4:f7:ef:08:d9:37:
                    15:8b:6f:93:1c:b1:53:eb:32:cc:33:b2:c8:89:0b:
                    46:ad:9f:87:8d:30:ce:64:21:d2:00:68:cd:2f:15:
                    43:e1:dc:a7:58:5c:da:94:73:76:90:2b:49:23:8d:
                    e9:36:dd:71:eb:0a:49:f0:d0:e2:a2:00:83:0b:76:
                    99:a0:5e:36:20:b5:bf:ec:9d:b9:fb:c9:00:df:34:
                    19:1a:21:e3:0f:77:bd:08:6d:a0:a1:6c:dc:c3:b9:
                    7c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:95:DA:B3:A5:A2:F0:9F:25:BB:69:58:BA:9F:8C:2A:6A:D9:A1:D0
            X509v3 Authority Key Identifier:
                keyid:33:D9:9D:98:BF:D9:93:CB:7D:E4:28:4C:D0:B8:34:BD:AA:1F:B7:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3139322e31302e302f32342d3234203d3e20323635393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.192.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:58:6a:da:68:9a:80:63:4e:71:7c:b8:20:c0:5a:d9:f7:2c:
         03:95:1d:71:5a:15:f6:d5:ff:29:c9:e2:d8:ae:7c:7d:82:61:
         a1:12:fd:b7:87:12:0f:3f:e4:82:4e:71:55:d4:15:4b:9f:49:
         b0:86:74:ef:c9:2d:3f:1b:98:fe:aa:af:dc:a0:49:2e:11:54:
         d9:85:3b:4c:40:41:58:41:a2:a5:4f:76:de:90:cc:d0:97:a4:
         cd:4b:63:73:93:fd:3d:5d:9d:74:ab:c4:4b:bd:ae:d1:0f:8e:
         a8:79:62:99:52:c7:d0:f4:b3:1d:69:e0:34:ca:88:df:03:1c:
         69:4a:7f:40:70:b4:76:8e:67:b9:6c:49:50:bf:cc:d5:cf:40:
         09:56:42:f9:2f:1f:5d:38:38:b0:6d:b4:91:6f:82:b7:a8:88:
         3c:c1:1e:f9:6f:a4:64:c3:c5:bb:77:76:80:9c:9c:3f:b8:c2:
         4d:6f:f7:33:15:73:f8:9f:a4:39:c4:95:a7:62:b7:c6:eb:6b:
         06:d3:64:1f:6e:da:44:ba:f5:d6:c2:31:24:d5:b9:df:fd:50:
         b7:a1:39:3a:89:46:19:d7:2b:2e:68:2b:79:37:38:e4:ca:02:
         a6:4c:f2:a2:0e:7f:c0:01:cc:54:39:ea:2d:a3:e0:b7:7d:b5:
         05:30:4e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 13:42:17 2026 by rpki-client