Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/54upKAdE3HBMPn7vCbfmUC67zurVFi16TeACxjqexA4K/0/3138362e3232372e3131322e302f32322d3232203d3e20323633303032.roa
File:                     3138362e3232372e3131322e302f32322d3232203d3e20323633303032.roa (raw, json)
Hash identifier:          h8IGX7Z2uH8Nv4/GfDm+a/7GNgbc1fBgQ1cDMVPX130=
Subject key identifier:   FF:56:07:00:C7:C5:FB:3B:5D:54:A9:95:15:1D:D6:E2:47:71:24:A3
Certificate issuer:       /CN=69A84F767171DEAFFA39FA0F9F5E45777D776E7F
Certificate serial:       7BAC479C5978403ABC1386E0242CD1A0E48401DD
Authority key identifier: 69:A8:4F:76:71:71:DE:AF:FA:39:FA:0F:9F:5E:45:77:7D:77:6E:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69A84F767171DEAFFA39FA0F9F5E45777D776E7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54upKAdE3HBMPn7vCbfmUC67zurVFi16TeACxjqexA4K/0/3138362e3232372e3131322e302f32322d3232203d3e20323633303032.roa
Signing time:             Mon 03 Aug 2026 14:22:11 +0000
ROA not before:           Mon 03 Aug 2026 14:17:11 +0000
ROA not after:            Mon 02 Aug 2027 14:22:11 +0000
asID:                     263002
IP address blocks:        186.227.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/54upKAdE3HBMPn7vCbfmUC67zurVFi16TeACxjqexA4K/0/69A84F767171DEAFFA39FA0F9F5E45777D776E7F.crl
                          rsync://rpki-repo.registro.br/repo/54upKAdE3HBMPn7vCbfmUC67zurVFi16TeACxjqexA4K/0/69A84F767171DEAFFA39FA0F9F5E45777D776E7F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69A84F767171DEAFFA39FA0F9F5E45777D776E7F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 23:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:ac:47:9c:59:78:40:3a:bc:13:86:e0:24:2c:d1:a0:e4:84:01:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69A84F767171DEAFFA39FA0F9F5E45777D776E7F
        Validity
            Not Before: Aug  3 14:17:11 2026 GMT
            Not After : Aug  2 14:22:11 2027 GMT
        Subject: CN=FF560700C7C5FB3B5D54A995151DD6E2477124A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a9:bc:06:90:06:84:19:f1:87:a1:77:e1:58:
                    b4:06:9d:86:16:49:47:05:f0:28:2b:f2:d9:cf:48:
                    0c:b6:6a:6b:b1:1b:c6:f8:2c:79:8c:32:28:6f:0a:
                    93:65:48:0f:d7:20:fd:39:3a:9d:25:a4:c5:fc:30:
                    13:0e:55:0b:42:d6:f9:c0:42:a6:dc:a2:a2:31:22:
                    1c:07:7f:af:a6:ca:85:cd:7a:37:11:61:dc:90:7f:
                    7d:e8:ec:69:7c:39:2b:58:3d:56:df:b6:36:3b:27:
                    d8:4e:4d:3f:f0:0e:e6:59:e8:7c:74:4f:72:78:c2:
                    3e:3a:b3:ab:b3:5c:ea:3f:d3:38:39:df:83:65:f7:
                    f1:73:a4:ac:89:ab:56:71:53:e5:02:70:27:2e:00:
                    08:5e:62:68:8d:f8:e4:d8:e2:96:f7:fd:86:71:ab:
                    51:2c:5b:40:5b:c4:61:64:be:fe:ea:72:64:38:af:
                    9b:ab:45:17:49:cd:64:36:ee:7a:c7:74:62:d2:75:
                    2f:ae:10:52:65:3d:03:cf:10:3e:0c:37:10:89:ab:
                    87:2c:d2:45:dc:cb:bb:ba:2f:df:de:02:2c:d6:ef:
                    8e:72:87:93:63:3a:34:28:8c:9b:a6:6d:0f:3b:e4:
                    d7:0e:bf:58:e7:ee:99:7c:0f:44:22:bb:8b:b5:1e:
                    f7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:56:07:00:C7:C5:FB:3B:5D:54:A9:95:15:1D:D6:E2:47:71:24:A3
            X509v3 Authority Key Identifier:
                keyid:69:A8:4F:76:71:71:DE:AF:FA:39:FA:0F:9F:5E:45:77:7D:77:6E:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54upKAdE3HBMPn7vCbfmUC67zurVFi16TeACxjqexA4K/0/69A84F767171DEAFFA39FA0F9F5E45777D776E7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69A84F767171DEAFFA39FA0F9F5E45777D776E7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54upKAdE3HBMPn7vCbfmUC67zurVFi16TeACxjqexA4K/0/3138362e3232372e3131322e302f32322d3232203d3e20323633303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:a9:09:6f:cf:a1:54:ea:6c:34:eb:50:da:03:eb:b6:94:a2:
         94:99:bf:e4:78:86:02:a1:90:2d:3a:c5:2b:db:cd:1e:c2:fc:
         ce:6d:a0:e7:b4:53:81:69:bb:12:4f:f2:34:93:fe:17:c3:ae:
         dd:07:1d:8f:eb:c4:e3:89:68:52:ca:41:bb:e8:c2:4f:f0:ce:
         71:9e:2a:cc:64:56:b9:c6:2a:ce:64:65:93:a4:6e:3a:56:4e:
         70:bb:af:86:aa:13:8b:5a:ec:0d:a7:d5:7f:d8:06:30:50:90:
         70:9a:64:6c:f6:f2:a2:bb:cb:15:8d:cf:7a:20:fd:9a:58:ff:
         a0:0c:e9:40:0c:50:93:1d:7e:97:fc:ce:c5:e6:87:66:08:32:
         7c:f2:56:3d:cd:1b:3e:df:3e:c5:f2:a1:2f:89:71:e7:59:87:
         70:e3:ea:9b:4f:da:0a:4a:ec:16:b8:8d:ab:80:66:36:99:00:
         9b:4b:e9:46:1e:43:9d:27:d5:e0:a8:d5:3f:c9:2d:3b:e4:04:
         a4:d3:76:9d:63:9d:cc:8b:9f:35:57:21:82:7c:8a:1d:5e:b1:
         fc:50:11:c0:12:33:69:ea:cc:64:37:6c:ee:68:13:65:0d:99:
         ed:b9:89:62:b9:5d:0d:24:cf:a8:81:4b:ba:21:e8:3a:84:4f:
         cd:80:25:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 08:56:59 2026 by rpki-client