Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/48tkNrXCdPQXF2NSyGZkkoTurDRSKUgShbk5r3fx2bmq/0/3138362e3233322e33382e302f32342d3234203d3e20323632373638.roa
File:                     3138362e3233322e33382e302f32342d3234203d3e20323632373638.roa (raw, json)
Hash identifier:          5pv1G+CdUZfAwXiMSWnlu+U6uGHqFvz2KBaiD9TOCVY=
Subject key identifier:   59:07:52:34:8C:06:15:8F:AF:23:9D:9A:CE:25:DE:5E:97:D1:BF:AB
Certificate issuer:       /CN=ED5961063EAB7CEA2F0B8F8CABE2BDBF8AD75700
Certificate serial:       25FF748FE12A2D7F1E10626B269C3C3850FF1034
Authority key identifier: ED:59:61:06:3E:AB:7C:EA:2F:0B:8F:8C:AB:E2:BD:BF:8A:D7:57:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED5961063EAB7CEA2F0B8F8CABE2BDBF8AD75700.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48tkNrXCdPQXF2NSyGZkkoTurDRSKUgShbk5r3fx2bmq/0/3138362e3233322e33382e302f32342d3234203d3e20323632373638.roa
Signing time:             Mon 31 Aug 2026 19:58:00 +0000
ROA not before:           Mon 31 Aug 2026 19:53:00 +0000
ROA not after:            Mon 30 Aug 2027 19:58:00 +0000
asID:                     262768
IP address blocks:        186.232.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/48tkNrXCdPQXF2NSyGZkkoTurDRSKUgShbk5r3fx2bmq/0/ED5961063EAB7CEA2F0B8F8CABE2BDBF8AD75700.crl
                          rsync://rpki-repo.registro.br/repo/48tkNrXCdPQXF2NSyGZkkoTurDRSKUgShbk5r3fx2bmq/0/ED5961063EAB7CEA2F0B8F8CABE2BDBF8AD75700.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED5961063EAB7CEA2F0B8F8CABE2BDBF8AD75700.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Oct 2026 14:24:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:ff:74:8f:e1:2a:2d:7f:1e:10:62:6b:26:9c:3c:38:50:ff:10:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED5961063EAB7CEA2F0B8F8CABE2BDBF8AD75700
        Validity
            Not Before: Aug 31 19:53:00 2026 GMT
            Not After : Aug 30 19:58:00 2027 GMT
        Subject: CN=590752348C06158FAF239D9ACE25DE5E97D1BFAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:79:04:df:fa:fd:46:c9:3f:85:12:13:de:75:
                    c5:d9:02:85:ba:60:b7:e4:11:e5:f2:8a:70:a1:e4:
                    2e:8d:a4:a4:da:7c:6b:be:a7:de:ac:c8:c9:b9:d2:
                    c7:29:38:f5:a4:82:d4:4d:f9:4a:6a:5b:97:2c:f7:
                    f3:38:28:6a:dd:96:c1:ee:3d:73:13:a8:d8:c1:58:
                    d7:53:66:a8:11:e2:3c:85:87:3a:59:6e:b5:69:f8:
                    f1:75:56:d0:c7:06:65:bb:e7:40:43:49:e6:57:f5:
                    6f:5d:6d:13:fe:57:c3:bd:94:ee:d5:29:76:43:86:
                    2b:50:a3:77:c5:59:37:9d:d3:41:44:3a:11:b1:75:
                    cb:54:05:12:08:65:48:46:1d:1c:02:b4:f7:da:dd:
                    df:0b:8a:9d:37:ac:38:42:cf:59:dd:68:e3:9e:4b:
                    64:4f:85:d9:43:38:0b:f8:54:fa:bb:ff:d1:b6:99:
                    9f:db:f6:d1:eb:97:4c:fb:79:b1:bb:00:a1:47:0f:
                    b2:02:5b:75:04:ea:a6:2f:1e:50:41:04:71:81:ed:
                    d9:9d:32:e7:a3:37:75:f6:8e:fb:3f:d6:f4:83:bb:
                    90:6a:a4:da:f5:f9:1e:8d:34:7a:30:6a:8f:43:f7:
                    45:2f:13:40:7d:7c:ff:8e:e5:46:fd:78:d6:70:e0:
                    a5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:07:52:34:8C:06:15:8F:AF:23:9D:9A:CE:25:DE:5E:97:D1:BF:AB
            X509v3 Authority Key Identifier:
                keyid:ED:59:61:06:3E:AB:7C:EA:2F:0B:8F:8C:AB:E2:BD:BF:8A:D7:57:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48tkNrXCdPQXF2NSyGZkkoTurDRSKUgShbk5r3fx2bmq/0/ED5961063EAB7CEA2F0B8F8CABE2BDBF8AD75700.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED5961063EAB7CEA2F0B8F8CABE2BDBF8AD75700.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48tkNrXCdPQXF2NSyGZkkoTurDRSKUgShbk5r3fx2bmq/0/3138362e3233322e33382e302f32342d3234203d3e20323632373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:db:5f:53:51:f2:13:fd:be:fb:c9:dc:64:b4:c6:37:21:80:
         13:35:81:93:03:28:0b:92:8e:87:28:04:25:35:5d:4a:a3:bf:
         63:d9:64:0d:43:c0:df:ef:55:5b:90:ea:42:68:62:ab:0c:fd:
         a2:01:5a:68:ef:83:2d:60:a1:c2:33:11:c9:e1:e2:a2:7d:ca:
         c8:0b:5a:63:83:77:e9:98:2b:f1:79:c4:3b:64:66:37:bf:7e:
         5e:65:01:ca:6e:80:0c:7c:4f:55:f3:80:b6:a3:9c:1d:bd:a8:
         2a:59:c5:8b:ba:48:b6:e5:22:3c:fc:02:b1:4a:01:1f:65:64:
         4f:fa:31:e7:5a:2a:1b:9f:00:5f:9e:4f:58:01:39:8b:c8:01:
         4c:4f:0a:68:21:5c:93:3b:bd:39:86:86:3c:e2:fa:64:6f:ef:
         04:75:c1:27:fd:db:17:a5:d8:c7:25:39:75:ec:50:df:53:ed:
         82:5f:47:6d:05:59:60:1d:22:bb:61:e1:35:1c:84:74:cb:c8:
         85:6f:97:5d:06:bf:4a:9b:4d:3d:1e:e0:72:df:ee:63:5c:57:
         ac:3f:f2:d1:42:7e:30:d6:bb:9a:83:e5:53:21:ad:04:05:3e:
         2a:45:37:c7:9a:5d:bb:a0:2e:3f:a6:3c:38:60:1f:37:67:44:
         87:b4:28:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:14:51 2026 by rpki-client