Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/2/3138362e36352e3130372e302f32342d3234203d3e20323636313432.roa
File:                     3138362e36352e3130372e302f32342d3234203d3e20323636313432.roa (raw, json)
Hash identifier:          HwTLuKNZRVH5IdggJoUTIe8og3jG+1v+ZqkJjYaaoIY=
Subject key identifier:   43:C9:57:32:34:A2:F2:BA:12:FC:7A:EA:CB:6B:DD:FD:B0:7D:72:05
Certificate issuer:       /CN=D7FB267FFDC9AF1A637FF478B7DB2D199B1B9CFD
Certificate serial:       1C336AF7F6DB5E218D4CB44F61F232D02F70147A
Authority key identifier: D7:FB:26:7F:FD:C9:AF:1A:63:7F:F4:78:B7:DB:2D:19:9B:1B:9C:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7FB267FFDC9AF1A637FF478B7DB2D199B1B9CFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/2/3138362e36352e3130372e302f32342d3234203d3e20323636313432.roa
Signing time:             Thu 18 Jun 2026 15:14:07 +0000
ROA not before:           Thu 18 Jun 2026 15:09:07 +0000
ROA not after:            Thu 17 Jun 2027 15:14:07 +0000
asID:                     266142
IP address blocks:        186.65.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/2/D7FB267FFDC9AF1A637FF478B7DB2D199B1B9CFD.crl
                          rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/2/D7FB267FFDC9AF1A637FF478B7DB2D199B1B9CFD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7FB267FFDC9AF1A637FF478B7DB2D199B1B9CFD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 10:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:33:6a:f7:f6:db:5e:21:8d:4c:b4:4f:61:f2:32:d0:2f:70:14:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7FB267FFDC9AF1A637FF478B7DB2D199B1B9CFD
        Validity
            Not Before: Jun 18 15:09:07 2026 GMT
            Not After : Jun 17 15:14:07 2027 GMT
        Subject: CN=43C9573234A2F2BA12FC7AEACB6BDDFDB07D7205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:0a:ae:b3:ce:af:44:e0:18:2a:03:b2:73:5a:
                    68:c2:92:fb:51:a5:b4:ee:ee:4d:09:3e:42:32:8c:
                    a2:37:dc:d4:5f:a2:6d:6d:0f:a1:6a:11:c8:c0:2f:
                    10:50:1c:ab:fd:48:4d:f0:a6:76:37:e0:e1:8e:96:
                    6b:b6:1e:67:ea:91:c9:21:d3:cf:8f:d9:83:23:52:
                    30:72:29:87:cd:c3:3d:d2:53:d1:8c:af:d5:ea:25:
                    32:e9:17:78:f6:4c:ea:8c:a0:39:c7:51:50:69:7b:
                    36:65:21:55:87:98:a8:a8:35:55:00:04:42:f6:12:
                    17:1f:12:6e:09:7d:d1:11:07:78:17:d7:e1:ef:59:
                    bc:b3:14:d1:96:59:ed:02:c0:1b:26:13:e7:7d:b9:
                    d0:3c:8b:e5:33:a9:ec:30:22:c0:2b:4a:1d:24:86:
                    33:26:f8:42:d2:8f:3a:0c:8b:0e:b3:1b:2d:67:5b:
                    c1:80:cb:2a:55:f7:a7:7d:df:30:0a:6c:91:a3:59:
                    d1:36:d1:a9:e0:78:49:07:b7:69:ac:c8:6a:8b:35:
                    54:5c:e4:41:79:9d:87:7a:6f:15:59:d6:a9:5b:e8:
                    09:2c:55:0e:16:97:c2:3d:6d:68:1d:c9:96:5c:79:
                    f6:c7:32:a6:32:f9:ed:08:c7:37:f5:73:bf:7d:3c:
                    f6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:C9:57:32:34:A2:F2:BA:12:FC:7A:EA:CB:6B:DD:FD:B0:7D:72:05
            X509v3 Authority Key Identifier:
                keyid:D7:FB:26:7F:FD:C9:AF:1A:63:7F:F4:78:B7:DB:2D:19:9B:1B:9C:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/2/D7FB267FFDC9AF1A637FF478B7DB2D199B1B9CFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7FB267FFDC9AF1A637FF478B7DB2D199B1B9CFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/2/3138362e36352e3130372e302f32342d3234203d3e20323636313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.65.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:fe:85:62:d0:e1:29:7e:b2:e7:e2:f1:81:d6:95:f0:4e:a7:
         25:df:89:2a:b2:46:01:ae:8c:5a:95:68:7e:f3:ce:ce:9d:b2:
         dc:cf:ba:73:24:8e:3e:58:88:4c:90:c7:42:1f:34:1c:75:b8:
         4c:dc:5c:73:f5:7a:2d:fe:a5:23:f8:5b:27:d7:d0:26:57:5f:
         4a:1c:f7:e2:96:76:14:bd:30:fd:1e:2f:47:63:25:83:ef:62:
         8f:46:2a:80:c0:11:b8:a9:63:cf:ad:16:4e:24:2e:f9:c6:bf:
         dd:30:fd:21:d7:b1:3d:b9:8d:f9:dd:9a:82:40:f0:d1:3e:76:
         fd:80:18:39:12:14:62:03:01:4d:4e:fe:98:df:b5:92:82:4d:
         b9:b8:9e:10:c5:3b:11:c4:e4:6c:2b:ec:68:df:58:4e:d5:da:
         43:45:5f:b8:c0:94:62:fb:c2:ad:6e:bb:17:5c:42:0c:59:e5:
         4b:84:09:8b:be:b5:9a:bc:7a:ee:fe:7e:d7:c5:0f:7f:00:4c:
         ed:44:38:70:22:9c:f6:bd:15:bf:45:eb:e3:40:09:ec:22:ad:
         56:93:7c:77:c3:3a:3c:5f:90:65:6e:c9:5a:ae:d4:17:25:fc:
         da:82:40:fb:5e:c6:cd:59:1b:ac:94:82:54:ac:73:97:83:08:
         91:24:19:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:59:22 2026 by rpki-client