Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3eKyvJNj99DormV5mo69qMM3VD5M2XZ4hokNhB9Nu3u8/0/3138362e3232372e36382e302f32322d3234203d3e20323733353030.roa
File:                     3138362e3232372e36382e302f32322d3234203d3e20323733353030.roa (raw, json)
Hash identifier:          YLoCX0VM0ue/Ena5evtA7woEU9wfn0h/S8OkvBZwoHc=
Subject key identifier:   CE:C8:EE:6C:32:FE:5F:B7:A3:E3:0C:6C:C4:13:EB:FA:A5:9F:80:85
Certificate issuer:       /CN=7130375EE2A1233DCED2847E7689DD739F3B2CAD
Certificate serial:       30DAF793EB1318B0453A7D5198A9CF555B675E48
Authority key identifier: 71:30:37:5E:E2:A1:23:3D:CE:D2:84:7E:76:89:DD:73:9F:3B:2C:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7130375EE2A1233DCED2847E7689DD739F3B2CAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3eKyvJNj99DormV5mo69qMM3VD5M2XZ4hokNhB9Nu3u8/0/3138362e3232372e36382e302f32322d3234203d3e20323733353030.roa
Signing time:             Fri 11 Sep 2026 13:57:02 +0000
ROA not before:           Fri 11 Sep 2026 13:52:02 +0000
ROA not after:            Fri 10 Sep 2027 13:57:02 +0000
asID:                     273500
IP address blocks:        186.227.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3eKyvJNj99DormV5mo69qMM3VD5M2XZ4hokNhB9Nu3u8/0/7130375EE2A1233DCED2847E7689DD739F3B2CAD.crl
                          rsync://rpki-repo.registro.br/repo/3eKyvJNj99DormV5mo69qMM3VD5M2XZ4hokNhB9Nu3u8/0/7130375EE2A1233DCED2847E7689DD739F3B2CAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7130375EE2A1233DCED2847E7689DD739F3B2CAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 08:53:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:da:f7:93:eb:13:18:b0:45:3a:7d:51:98:a9:cf:55:5b:67:5e:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7130375EE2A1233DCED2847E7689DD739F3B2CAD
        Validity
            Not Before: Sep 11 13:52:02 2026 GMT
            Not After : Sep 10 13:57:02 2027 GMT
        Subject: CN=CEC8EE6C32FE5FB7A3E30C6CC413EBFAA59F8085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d0:dd:0d:91:c1:f5:22:5f:6d:d0:ba:76:4b:
                    f6:af:ad:b5:2b:32:93:fc:88:1b:0c:15:da:ef:5b:
                    b3:3a:cf:0d:76:0f:c6:78:06:99:41:2b:9c:cd:f0:
                    33:04:51:40:65:69:9a:7f:ea:36:48:02:d1:fa:69:
                    16:43:73:6d:1d:fd:32:1b:ce:5a:2c:be:2d:0f:8b:
                    9c:c4:72:66:e9:64:0c:c2:25:d1:8c:ff:02:81:f7:
                    d1:a1:02:75:fc:dc:cc:6c:e0:9b:9f:e1:76:91:d3:
                    85:a7:e6:13:ce:d9:4f:86:26:88:db:ff:62:6a:6a:
                    12:bd:bd:73:80:b7:da:df:83:e6:1c:ab:21:17:28:
                    83:e4:c0:c4:3d:08:5a:12:27:32:6f:99:0e:9a:ae:
                    55:00:66:77:53:d7:01:c9:7d:61:fd:f6:20:4f:26:
                    83:46:de:e4:64:17:65:89:4a:87:4d:89:e0:6c:55:
                    38:39:6a:da:4b:2a:fa:c4:29:94:5c:98:3c:74:5c:
                    10:b5:1e:3d:82:d9:a1:17:c4:07:70:83:0b:bd:15:
                    0e:b7:ec:33:04:c3:dd:56:b9:de:44:6e:46:0d:27:
                    34:61:a4:c1:16:26:55:3d:8a:cc:06:7b:85:68:03:
                    73:68:1d:a6:2e:f6:be:54:da:e9:87:0c:8c:19:9b:
                    96:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C8:EE:6C:32:FE:5F:B7:A3:E3:0C:6C:C4:13:EB:FA:A5:9F:80:85
            X509v3 Authority Key Identifier:
                keyid:71:30:37:5E:E2:A1:23:3D:CE:D2:84:7E:76:89:DD:73:9F:3B:2C:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3eKyvJNj99DormV5mo69qMM3VD5M2XZ4hokNhB9Nu3u8/0/7130375EE2A1233DCED2847E7689DD739F3B2CAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7130375EE2A1233DCED2847E7689DD739F3B2CAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3eKyvJNj99DormV5mo69qMM3VD5M2XZ4hokNhB9Nu3u8/0/3138362e3232372e36382e302f32322d3234203d3e20323733353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:ea:6d:2a:73:d2:ba:6e:07:6b:9c:6d:ac:d8:27:c2:0d:00:
         1b:8b:18:d4:fd:0c:75:27:ec:a7:1b:5a:53:42:ad:5e:32:76:
         04:06:e4:16:68:d5:0c:b4:93:09:1e:af:64:68:1d:9c:9b:56:
         bf:05:22:93:d4:8a:14:4f:3c:08:e0:f4:f2:93:3c:68:ff:20:
         14:6e:f5:fc:2c:6e:2c:28:5b:97:d5:de:70:99:77:50:af:0f:
         45:b2:01:0b:56:20:1a:2b:84:e7:d7:47:2e:da:5b:bd:65:60:
         0f:23:0e:c7:9f:aa:21:12:f3:64:76:b6:b5:78:e8:50:e4:96:
         05:bc:3f:a3:47:78:37:68:5f:07:a5:2d:b5:0d:18:83:1a:83:
         18:d0:33:3d:c4:14:98:b8:df:b3:44:9b:bb:1a:5f:25:72:fd:
         59:33:c6:2d:00:da:cd:cd:dd:2d:38:56:f5:b5:ec:10:cb:3f:
         f4:b0:f7:fd:a9:ea:ae:7d:80:32:df:2c:4e:d1:35:89:1c:f9:
         6b:7b:96:b9:cb:ef:f0:16:72:30:d7:97:5b:e4:0e:88:c6:c2:
         21:53:2d:73:b0:b6:21:dc:3c:a6:34:5b:e2:93:39:29:31:ca:
         4f:62:29:ba:e4:9c:ce:31:0e:4a:8c:1b:72:08:20:2e:b5:8c:
         95:a2:e4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:28:55 2026 by rpki-client