Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/54upKAdE3HBMPn7vCbfmUC67zurVFi16TeACxjqexA4K/0/3138362e3232372e3131392e302f32342d3234203d3e20323633303032.roa
File:                     3138362e3232372e3131392e302f32342d3234203d3e20323633303032.roa (raw, json)
Hash identifier:          R5FcVynHDlf+RAfdxY5J+PoUpXINri9nPtX2A3Uidik=
Subject key identifier:   0A:9D:63:E0:0C:B8:79:29:A0:A6:63:01:BE:A9:2A:B0:A7:11:13:C4
Certificate issuer:       /CN=69A84F767171DEAFFA39FA0F9F5E45777D776E7F
Certificate serial:       4A080097498FBAEB1975C2C35DD616A3E25F4F
Authority key identifier: 69:A8:4F:76:71:71:DE:AF:FA:39:FA:0F:9F:5E:45:77:7D:77:6E:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69A84F767171DEAFFA39FA0F9F5E45777D776E7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54upKAdE3HBMPn7vCbfmUC67zurVFi16TeACxjqexA4K/0/3138362e3232372e3131392e302f32342d3234203d3e20323633303032.roa
Signing time:             Mon 03 Aug 2026 14:22:55 +0000
ROA not before:           Mon 03 Aug 2026 14:17:55 +0000
ROA not after:            Mon 02 Aug 2027 14:22:55 +0000
asID:                     263002
IP address blocks:        186.227.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/54upKAdE3HBMPn7vCbfmUC67zurVFi16TeACxjqexA4K/0/69A84F767171DEAFFA39FA0F9F5E45777D776E7F.crl
                          rsync://rpki-repo.registro.br/repo/54upKAdE3HBMPn7vCbfmUC67zurVFi16TeACxjqexA4K/0/69A84F767171DEAFFA39FA0F9F5E45777D776E7F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69A84F767171DEAFFA39FA0F9F5E45777D776E7F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 23:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:08:00:97:49:8f:ba:eb:19:75:c2:c3:5d:d6:16:a3:e2:5f:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69A84F767171DEAFFA39FA0F9F5E45777D776E7F
        Validity
            Not Before: Aug  3 14:17:55 2026 GMT
            Not After : Aug  2 14:22:55 2027 GMT
        Subject: CN=0A9D63E00CB87929A0A66301BEA92AB0A71113C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:61:99:7f:37:68:7c:6e:b7:73:35:75:b4:19:
                    5b:5f:82:f2:04:b7:e9:fd:fe:12:c3:0d:1f:a7:56:
                    b2:69:96:82:ab:53:31:c5:4d:8f:2b:93:e6:ef:62:
                    bd:e9:2a:24:c9:92:24:32:0e:89:a4:9d:2f:e7:15:
                    8f:9c:65:73:6a:b5:b9:65:f4:95:66:db:25:94:17:
                    dd:37:2c:4d:2d:62:8c:ee:35:8a:5a:ae:bb:37:dd:
                    ee:ac:26:70:9e:72:ea:e3:3e:f7:7d:ea:f7:a8:95:
                    97:c7:c5:58:01:4a:e7:4e:70:aa:b2:30:f3:14:49:
                    ee:7c:7d:4b:8d:57:6d:af:fc:98:82:f3:ab:ec:1f:
                    53:7b:ea:f4:13:70:ae:71:b8:16:cd:7e:e8:e5:f5:
                    59:35:d8:74:e6:14:4b:16:f1:a6:7b:df:ce:cf:46:
                    d6:02:d6:c5:51:46:41:01:a5:26:c8:f5:ed:0c:5f:
                    3a:40:3b:57:4c:0f:ad:5e:fe:65:6c:45:28:fa:4f:
                    1a:1e:47:85:84:76:02:db:6d:02:31:65:59:b4:28:
                    b0:8a:c4:65:9f:35:3c:d5:5e:75:d0:c6:6c:f2:52:
                    cd:08:6e:31:60:b9:82:29:3f:08:79:9d:c6:7d:11:
                    0c:a6:92:c5:0a:36:ec:af:78:05:3d:52:52:ac:80:
                    d0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:9D:63:E0:0C:B8:79:29:A0:A6:63:01:BE:A9:2A:B0:A7:11:13:C4
            X509v3 Authority Key Identifier:
                keyid:69:A8:4F:76:71:71:DE:AF:FA:39:FA:0F:9F:5E:45:77:7D:77:6E:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54upKAdE3HBMPn7vCbfmUC67zurVFi16TeACxjqexA4K/0/69A84F767171DEAFFA39FA0F9F5E45777D776E7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69A84F767171DEAFFA39FA0F9F5E45777D776E7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54upKAdE3HBMPn7vCbfmUC67zurVFi16TeACxjqexA4K/0/3138362e3232372e3131392e302f32342d3234203d3e20323633303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:f4:5d:7a:f5:8d:40:b8:88:31:9f:98:24:88:6a:b5:ac:cf:
         4e:bc:f2:57:73:91:6a:26:8b:ab:5a:cb:8a:17:df:c5:a1:67:
         b3:da:c0:6a:68:42:07:40:66:d4:9b:8c:a5:e7:69:22:04:78:
         bd:d1:9f:77:68:d6:72:22:8a:66:dd:51:fc:f3:4f:b7:04:26:
         ef:12:e0:46:84:35:f1:1d:29:8f:4e:94:80:d1:19:c0:49:8a:
         bd:6f:84:b6:91:3e:dd:c4:17:59:ac:37:d9:a6:27:10:20:69:
         50:a8:d9:cf:61:86:20:2a:ff:c2:69:d6:f8:f0:6d:b0:3a:f2:
         46:e6:44:f3:cb:55:68:40:d1:dd:a7:57:a0:d2:6f:72:53:a8:
         ba:1a:e5:43:a5:36:7e:9b:9b:92:f5:6a:3d:e6:48:71:ba:c0:
         49:6d:93:86:69:d4:9e:88:47:c1:cf:a2:56:3e:80:a3:d5:78:
         d9:aa:e1:65:f8:ae:34:a6:ae:85:08:6b:03:fc:80:b7:be:b7:
         07:5e:16:d4:15:50:9e:25:8b:f9:c8:ed:53:a6:e0:77:b7:b7:
         29:8c:4b:27:ea:07:5a:50:3b:65:3f:62:d2:c7:87:5c:37:74:
         78:77:97:92:49:f3:13:77:9a:ee:ec:95:c4:b3:bf:9c:34:a9:
         8c:2b:a6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 08:58:52 2026 by rpki-client