Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/54upKAdE3HBMPn7vCbfmUC67zurVFi16TeACxjqexA4K/0/3138362e3232372e3131322e302f32332d3233203d3e20323633303032.roa
File:                     3138362e3232372e3131322e302f32332d3233203d3e20323633303032.roa (raw, json)
Hash identifier:          bkdGuThmNyF2TWRORjYlncrynrWo3jjGA5uEf+6NXLQ=
Subject key identifier:   9B:81:96:78:54:6D:B2:27:9B:C4:90:81:17:60:06:15:98:99:93:47
Certificate issuer:       /CN=69A84F767171DEAFFA39FA0F9F5E45777D776E7F
Certificate serial:       2098729FB0222C5B4597391E40C8FC81028030BB
Authority key identifier: 69:A8:4F:76:71:71:DE:AF:FA:39:FA:0F:9F:5E:45:77:7D:77:6E:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69A84F767171DEAFFA39FA0F9F5E45777D776E7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54upKAdE3HBMPn7vCbfmUC67zurVFi16TeACxjqexA4K/0/3138362e3232372e3131322e302f32332d3233203d3e20323633303032.roa
Signing time:             Mon 03 Aug 2026 14:22:14 +0000
ROA not before:           Mon 03 Aug 2026 14:17:14 +0000
ROA not after:            Mon 02 Aug 2027 14:22:14 +0000
asID:                     263002
IP address blocks:        186.227.112.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/54upKAdE3HBMPn7vCbfmUC67zurVFi16TeACxjqexA4K/0/69A84F767171DEAFFA39FA0F9F5E45777D776E7F.crl
                          rsync://rpki-repo.registro.br/repo/54upKAdE3HBMPn7vCbfmUC67zurVFi16TeACxjqexA4K/0/69A84F767171DEAFFA39FA0F9F5E45777D776E7F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69A84F767171DEAFFA39FA0F9F5E45777D776E7F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 23:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:98:72:9f:b0:22:2c:5b:45:97:39:1e:40:c8:fc:81:02:80:30:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69A84F767171DEAFFA39FA0F9F5E45777D776E7F
        Validity
            Not Before: Aug  3 14:17:14 2026 GMT
            Not After : Aug  2 14:22:14 2027 GMT
        Subject: CN=9B819678546DB2279BC490811760061598999347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b7:a8:63:5d:d0:c4:54:fa:ae:d0:72:84:6c:
                    05:52:f9:91:8b:12:e1:ce:79:24:d1:9d:2e:42:b3:
                    62:a1:d7:1a:d1:d2:be:8e:b5:d9:be:2c:29:ac:3a:
                    99:9f:f9:30:c7:4f:08:e5:86:6e:20:8e:e0:5c:53:
                    93:78:72:7f:2b:54:59:3b:6f:13:84:dd:ee:08:8b:
                    df:0c:71:a2:48:35:7e:ab:9b:f4:66:99:93:a2:91:
                    f4:4b:59:69:d4:a4:34:10:88:0f:71:9e:5b:77:3c:
                    ec:3f:6e:b6:1d:37:fc:0f:b5:cc:ca:96:fd:08:61:
                    d5:6a:6b:4b:85:68:3d:c7:c8:8a:42:f0:58:77:c8:
                    a7:91:ef:b5:5f:8b:46:61:62:de:70:dd:7b:b3:3a:
                    ce:ce:a8:4d:28:e3:a8:34:cc:f2:37:96:d0:03:00:
                    7c:83:be:2d:ae:09:1e:b0:28:da:17:ab:31:5b:47:
                    cf:b9:25:e6:f0:05:8a:9b:ed:5e:10:69:b0:06:72:
                    6b:d9:bb:12:74:b6:ae:ed:a7:e8:1c:11:f2:96:00:
                    d8:36:c4:f9:5c:67:4e:09:80:b0:9c:0f:60:12:f6:
                    18:b8:2a:c6:49:8d:0d:af:85:ab:1d:d1:1b:2d:d7:
                    f3:d9:2a:f6:07:06:f4:c3:72:c8:d8:9e:91:f9:88:
                    34:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:81:96:78:54:6D:B2:27:9B:C4:90:81:17:60:06:15:98:99:93:47
            X509v3 Authority Key Identifier:
                keyid:69:A8:4F:76:71:71:DE:AF:FA:39:FA:0F:9F:5E:45:77:7D:77:6E:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54upKAdE3HBMPn7vCbfmUC67zurVFi16TeACxjqexA4K/0/69A84F767171DEAFFA39FA0F9F5E45777D776E7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69A84F767171DEAFFA39FA0F9F5E45777D776E7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54upKAdE3HBMPn7vCbfmUC67zurVFi16TeACxjqexA4K/0/3138362e3232372e3131322e302f32332d3233203d3e20323633303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b8:6e:83:bc:61:de:8a:c0:af:01:10:23:24:8b:27:df:e6:a9:
         ca:7c:53:57:00:b4:5f:b5:1c:bd:28:19:a5:45:8f:c6:bb:71:
         ec:43:fb:44:03:68:e7:30:5b:cb:75:59:a0:af:9e:ac:72:7f:
         c8:52:35:f5:ab:00:52:73:7c:16:34:2c:32:b1:eb:a6:2d:3f:
         ef:1d:69:56:02:e1:81:48:b0:27:48:55:bf:9a:bf:e2:0d:7e:
         05:fd:78:58:fc:67:0c:ae:a3:f3:84:92:3f:36:dd:5d:f6:5e:
         29:98:60:e5:e6:50:b1:aa:8f:12:a8:32:82:12:25:53:53:52:
         5f:2a:f9:a8:2c:df:34:f6:cd:53:42:11:f1:bd:d2:63:c1:bb:
         73:3d:20:f5:8a:8b:b6:cc:64:e8:42:f0:df:ef:27:02:87:6c:
         f0:d9:dc:2b:2c:1f:35:3c:31:67:53:4f:27:49:f3:d4:c9:a8:
         a1:b4:81:41:e3:be:be:69:a2:0c:6a:85:e1:ed:d5:2f:6d:ac:
         94:78:a2:9c:64:9b:47:1c:ea:e9:b2:77:e5:07:85:f6:6a:cc:
         eb:3c:2e:ce:ec:c4:32:46:d0:fa:97:4b:31:e8:36:0b:65:4a:
         7d:9b:ee:7c:51:36:bb:b6:01:37:be:57:1c:c9:79:91:87:0f:
         ed:95:da:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 08:54:14 2026 by rpki-client