Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/48tkNrXCdPQXF2NSyGZkkoTurDRSKUgShbk5r3fx2bmq/0/3138362e3233322e33392e302f32342d3234203d3e20323632373638.roa
File:                     3138362e3233322e33392e302f32342d3234203d3e20323632373638.roa (raw, json)
Hash identifier:          Idd/IRuVpN+UWiuPRUz+P1ncF7KQ2O9Y5c1hNhK0tmQ=
Subject key identifier:   66:F3:13:9A:BA:2D:B3:94:E8:96:0C:F0:03:B4:49:41:E5:D9:F8:37
Certificate issuer:       /CN=ED5961063EAB7CEA2F0B8F8CABE2BDBF8AD75700
Certificate serial:       3114591F038CFBB0AE6F50261A6BCC22F9C77240
Authority key identifier: ED:59:61:06:3E:AB:7C:EA:2F:0B:8F:8C:AB:E2:BD:BF:8A:D7:57:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED5961063EAB7CEA2F0B8F8CABE2BDBF8AD75700.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48tkNrXCdPQXF2NSyGZkkoTurDRSKUgShbk5r3fx2bmq/0/3138362e3233322e33392e302f32342d3234203d3e20323632373638.roa
Signing time:             Mon 31 Aug 2026 19:58:00 +0000
ROA not before:           Mon 31 Aug 2026 19:53:00 +0000
ROA not after:            Mon 30 Aug 2027 19:58:00 +0000
asID:                     262768
IP address blocks:        186.232.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/48tkNrXCdPQXF2NSyGZkkoTurDRSKUgShbk5r3fx2bmq/0/ED5961063EAB7CEA2F0B8F8CABE2BDBF8AD75700.crl
                          rsync://rpki-repo.registro.br/repo/48tkNrXCdPQXF2NSyGZkkoTurDRSKUgShbk5r3fx2bmq/0/ED5961063EAB7CEA2F0B8F8CABE2BDBF8AD75700.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED5961063EAB7CEA2F0B8F8CABE2BDBF8AD75700.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 07:15:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:14:59:1f:03:8c:fb:b0:ae:6f:50:26:1a:6b:cc:22:f9:c7:72:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED5961063EAB7CEA2F0B8F8CABE2BDBF8AD75700
        Validity
            Not Before: Aug 31 19:53:00 2026 GMT
            Not After : Aug 30 19:58:00 2027 GMT
        Subject: CN=66F3139ABA2DB394E8960CF003B44941E5D9F837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:32:73:83:da:14:df:9a:ea:8c:82:98:08:8e:
                    73:b1:41:e2:d7:55:12:c0:77:0d:ba:98:c9:39:73:
                    35:66:6d:4d:3a:d4:b1:5f:1b:6a:5d:b0:2a:0f:73:
                    b7:4b:69:fe:1c:57:32:c2:78:80:ed:77:1a:51:b8:
                    19:63:c7:c1:ad:a2:e2:d2:8a:c0:18:60:82:16:c4:
                    4a:91:cd:3d:d8:05:d1:06:d3:c2:f9:06:cb:18:ff:
                    c1:59:c8:77:f3:48:11:f0:1a:8c:f3:64:67:c8:f2:
                    99:e6:75:34:55:37:69:0e:c7:94:a9:4b:eb:07:32:
                    f5:7a:06:54:4c:4e:e9:ed:75:70:36:23:17:f5:48:
                    18:e7:1c:ac:0c:fc:56:58:bd:d1:88:17:da:ae:0e:
                    c8:a4:31:9d:80:57:9b:9e:52:d7:e8:bc:91:9f:44:
                    9b:7a:13:4d:82:18:c4:1e:95:ee:98:73:77:7c:f2:
                    8a:11:ee:84:74:df:ee:36:60:73:b7:1f:b7:79:3d:
                    3c:36:19:80:c4:0c:0e:45:05:0f:50:1d:32:9f:54:
                    63:62:39:06:86:46:a2:85:8e:4a:e8:56:39:12:40:
                    00:d3:fb:7c:e2:6f:f1:8f:26:8d:6f:26:2b:7a:97:
                    0a:6c:d3:5a:e8:9b:bf:ce:be:c5:71:01:1e:f1:cf:
                    70:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:F3:13:9A:BA:2D:B3:94:E8:96:0C:F0:03:B4:49:41:E5:D9:F8:37
            X509v3 Authority Key Identifier:
                keyid:ED:59:61:06:3E:AB:7C:EA:2F:0B:8F:8C:AB:E2:BD:BF:8A:D7:57:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48tkNrXCdPQXF2NSyGZkkoTurDRSKUgShbk5r3fx2bmq/0/ED5961063EAB7CEA2F0B8F8CABE2BDBF8AD75700.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED5961063EAB7CEA2F0B8F8CABE2BDBF8AD75700.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48tkNrXCdPQXF2NSyGZkkoTurDRSKUgShbk5r3fx2bmq/0/3138362e3233322e33392e302f32342d3234203d3e20323632373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:15:8f:6d:08:6f:db:44:53:1e:9d:73:c1:99:19:0c:a8:31:
         74:22:c8:c3:44:8e:f1:ba:4d:bc:32:6d:78:40:01:62:07:ed:
         31:b2:7d:0a:d8:34:99:90:3c:8b:aa:e6:64:bd:90:83:74:34:
         09:32:b2:db:ca:f7:7f:52:45:24:07:5b:0e:ac:39:4b:14:34:
         aa:bb:4f:da:51:36:52:85:85:c6:d9:5a:ca:ef:b9:38:c2:0f:
         a9:55:65:11:07:c4:fa:72:0f:8a:75:b6:cb:4e:cf:bf:18:9c:
         41:5a:41:5c:e4:f8:ed:96:1d:13:2f:ae:ca:d4:90:03:41:b8:
         92:56:89:2a:96:df:99:1b:00:7e:96:0e:ca:50:7c:4f:ee:c2:
         3d:9a:27:33:bd:4b:cd:0f:b1:bc:b9:22:5f:9c:2c:41:5f:df:
         8a:9b:45:45:7d:a9:b4:51:48:00:88:9e:17:eb:05:2f:13:37:
         53:3a:75:46:87:b6:3a:13:54:8a:eb:9d:56:68:44:25:03:25:
         45:57:c2:9f:93:2e:3b:3b:d7:0e:43:06:6b:41:f6:77:2e:45:
         e9:8e:cf:58:2e:92:27:42:c1:94:b0:9c:0f:79:ed:09:76:54:
         f6:64:c7:e7:da:bf:2f:8d:9f:4d:1a:ef:1d:40:25:07:22:8a:
         24:7a:88:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:00:21 2026 by rpki-client