Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3xJYugrp99Fs9Ea76xVGKWdwW2vADm9gXDweyvaMzMYo/0/3138372e36322e3132342e302f32322d3234203d3e20323730323338.roa
File:                     3138372e36322e3132342e302f32322d3234203d3e20323730323338.roa (raw, json)
Hash identifier:          90ENRUf+h9IIkl7Zu4qNbE9qiw7ZrPCzlKEv/ZtBlXc=
Subject key identifier:   50:FA:C3:9A:6E:53:C4:0C:BC:DC:17:B7:B7:EB:68:D5:DC:C3:3B:D3
Certificate issuer:       /CN=F1DBD67B05D049281D4AC5C45CA36BE429A93CEF
Certificate serial:       5CCC68D65599A2A6ADCA6738AE94262562664768
Authority key identifier: F1:DB:D6:7B:05:D0:49:28:1D:4A:C5:C4:5C:A3:6B:E4:29:A9:3C:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1DBD67B05D049281D4AC5C45CA36BE429A93CEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3xJYugrp99Fs9Ea76xVGKWdwW2vADm9gXDweyvaMzMYo/0/3138372e36322e3132342e302f32322d3234203d3e20323730323338.roa
Signing time:             Mon 06 Jul 2026 17:07:14 +0000
ROA not before:           Mon 06 Jul 2026 17:02:14 +0000
ROA not after:            Mon 05 Jul 2027 17:07:14 +0000
asID:                     270238
IP address blocks:        187.62.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3xJYugrp99Fs9Ea76xVGKWdwW2vADm9gXDweyvaMzMYo/0/F1DBD67B05D049281D4AC5C45CA36BE429A93CEF.crl
                          rsync://rpki-repo.registro.br/repo/3xJYugrp99Fs9Ea76xVGKWdwW2vADm9gXDweyvaMzMYo/0/F1DBD67B05D049281D4AC5C45CA36BE429A93CEF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1DBD67B05D049281D4AC5C45CA36BE429A93CEF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:cc:68:d6:55:99:a2:a6:ad:ca:67:38:ae:94:26:25:62:66:47:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1DBD67B05D049281D4AC5C45CA36BE429A93CEF
        Validity
            Not Before: Jul  6 17:02:14 2026 GMT
            Not After : Jul  5 17:07:14 2027 GMT
        Subject: CN=50FAC39A6E53C40CBCDC17B7B7EB68D5DCC33BD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:11:a4:6c:75:0c:2d:9f:67:83:ec:e7:ee:42:
                    c3:b7:0b:c3:c5:c1:6f:cc:96:11:fd:ac:43:80:8f:
                    c4:a7:1b:6f:7c:95:90:a7:42:05:77:c9:b2:82:ad:
                    36:ca:fa:23:c0:48:5f:05:8c:a2:9d:5e:29:8d:c3:
                    1e:d4:0e:55:4a:59:6e:40:f1:e0:85:1c:e5:db:9f:
                    2d:01:22:b4:6f:b1:ee:5a:08:41:df:7c:1c:04:3d:
                    e6:cb:c6:5c:bd:4d:97:51:c9:45:43:de:ce:2f:ea:
                    4a:2b:a2:11:49:58:88:47:be:96:c2:c1:92:99:fa:
                    f6:ce:5b:10:7a:84:f5:6f:57:f5:28:c0:55:8d:7c:
                    99:af:39:33:cb:00:2a:8b:1f:ee:29:62:e5:1f:a7:
                    f7:93:96:ed:91:ac:b8:9b:44:86:90:1f:a0:7e:a2:
                    81:51:4d:ea:93:a0:86:03:d1:c7:32:6b:a3:43:de:
                    1c:1a:15:39:46:cd:7e:77:08:9b:92:35:df:92:88:
                    8a:5c:06:83:c6:5c:fc:ad:bd:db:aa:2f:41:23:f5:
                    76:2d:3b:b3:89:63:e4:2b:5b:b2:16:16:af:ce:21:
                    4b:ae:63:5c:aa:69:68:9e:5b:4a:bd:0e:63:09:03:
                    2f:1d:d0:13:88:25:36:6f:67:14:f9:6b:1d:5f:94:
                    1e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:FA:C3:9A:6E:53:C4:0C:BC:DC:17:B7:B7:EB:68:D5:DC:C3:3B:D3
            X509v3 Authority Key Identifier:
                keyid:F1:DB:D6:7B:05:D0:49:28:1D:4A:C5:C4:5C:A3:6B:E4:29:A9:3C:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3xJYugrp99Fs9Ea76xVGKWdwW2vADm9gXDweyvaMzMYo/0/F1DBD67B05D049281D4AC5C45CA36BE429A93CEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1DBD67B05D049281D4AC5C45CA36BE429A93CEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3xJYugrp99Fs9Ea76xVGKWdwW2vADm9gXDweyvaMzMYo/0/3138372e36322e3132342e302f32322d3234203d3e20323730323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:d7:34:8d:d7:97:1d:10:94:7c:1e:44:33:87:01:81:d9:b5:
         f5:0c:e4:89:e0:dd:e4:63:48:3f:d2:f6:2e:d7:dd:16:8a:71:
         48:2b:c5:23:45:ca:56:01:b6:45:72:c2:49:29:f1:b7:55:98:
         8a:8f:d7:88:9c:fc:aa:cc:ad:14:26:ee:16:a7:1f:4a:9e:d5:
         cc:ab:f6:83:26:d9:e6:8a:ce:43:f0:e9:3c:2e:dc:1a:9e:a4:
         75:4f:1e:c7:e1:a5:a7:a9:96:38:92:ec:99:af:43:6d:37:d8:
         ed:93:cb:93:f8:e3:c5:db:f6:89:2b:e3:66:22:bf:fb:f4:05:
         f1:cd:56:c2:c6:0b:1b:5a:44:7f:8f:bc:d0:0d:92:0f:1f:d9:
         39:c6:43:55:fd:f0:6f:f6:e4:78:22:c1:10:3d:fa:78:94:7a:
         de:b2:7c:b2:08:6d:6f:01:ed:28:74:ed:b8:e4:28:75:87:b9:
         41:d2:13:a2:75:f9:53:b6:ca:7b:74:f6:3b:79:a4:08:ff:46:
         8c:e7:75:0b:1c:e2:9b:0e:6e:f9:fc:2c:d9:19:6a:4d:66:9e:
         64:40:e6:62:84:b6:71:2e:47:5d:74:6e:33:1d:5f:bc:a3:bc:
         31:3f:d1:81:89:20:8f:7b:07:cd:5f:6f:88:85:53:42:53:1f:
         bf:b4:9d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:08:47 2026 by rpki-client