Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5KQvgvU2pGHopXfjdWUYzdvgaKZnrptwbUnwTQmTKduF/0/3138362e3230392e39362e302f32342d3234203d3e20323733373937.roa
File:                     3138362e3230392e39362e302f32342d3234203d3e20323733373937.roa (raw, json)
Hash identifier:          D/1r2n78imG0L0Z4Gc05ZhmjZRMxhsyry7/ZbtIJ0rY=
Subject key identifier:   CB:8B:10:61:52:25:D8:7A:40:49:90:4E:62:AF:A7:07:32:7D:A6:E4
Certificate issuer:       /CN=EAFD2FCCDC6EFFDE3531ADD4638AA48D00370383
Certificate serial:       02449DD8263E6FDADC22737C40183DC523BF3C56
Authority key identifier: EA:FD:2F:CC:DC:6E:FF:DE:35:31:AD:D4:63:8A:A4:8D:00:37:03:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAFD2FCCDC6EFFDE3531ADD4638AA48D00370383.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5KQvgvU2pGHopXfjdWUYzdvgaKZnrptwbUnwTQmTKduF/0/3138362e3230392e39362e302f32342d3234203d3e20323733373937.roa
Signing time:             Tue 07 Jul 2026 13:55:56 +0000
ROA not before:           Tue 07 Jul 2026 13:50:56 +0000
ROA not after:            Tue 06 Jul 2027 13:55:56 +0000
asID:                     273797
IP address blocks:        186.209.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5KQvgvU2pGHopXfjdWUYzdvgaKZnrptwbUnwTQmTKduF/0/EAFD2FCCDC6EFFDE3531ADD4638AA48D00370383.crl
                          rsync://rpki-repo.registro.br/repo/5KQvgvU2pGHopXfjdWUYzdvgaKZnrptwbUnwTQmTKduF/0/EAFD2FCCDC6EFFDE3531ADD4638AA48D00370383.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAFD2FCCDC6EFFDE3531ADD4638AA48D00370383.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 09:08:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:44:9d:d8:26:3e:6f:da:dc:22:73:7c:40:18:3d:c5:23:bf:3c:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAFD2FCCDC6EFFDE3531ADD4638AA48D00370383
        Validity
            Not Before: Jul  7 13:50:56 2026 GMT
            Not After : Jul  6 13:55:56 2027 GMT
        Subject: CN=CB8B10615225D87A4049904E62AFA707327DA6E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a2:c2:6f:8d:e4:5a:1a:f6:ab:72:e6:b3:31:
                    fe:7a:cf:9c:82:03:51:88:a1:c6:1c:d0:04:46:a0:
                    63:da:da:d1:76:64:35:6a:c1:4f:44:bb:97:bc:e4:
                    88:79:4f:f8:17:d1:2a:6d:68:d7:2e:3b:ab:82:3b:
                    39:a9:60:5a:71:3e:8c:9c:e5:c5:ce:c1:97:62:0f:
                    e3:41:ef:e1:e4:12:17:e5:a8:ef:6a:7f:69:56:99:
                    1f:a9:8b:83:ed:d6:1a:38:32:be:78:79:2f:70:a2:
                    9b:65:dd:14:25:ca:57:79:f0:fc:75:14:9f:7d:37:
                    2b:a5:06:79:c6:11:4d:e2:59:68:2d:2a:89:51:b0:
                    2f:14:6b:5c:96:ec:5f:96:fc:76:92:46:ca:c3:aa:
                    8b:7c:35:c7:a8:66:33:e7:4f:83:aa:48:a9:7f:e5:
                    98:0a:65:e3:1a:40:ec:c3:08:20:0e:28:dc:51:dd:
                    46:ee:f4:2a:d5:54:a3:11:69:1d:bb:6e:6a:b0:56:
                    21:e2:e1:bb:42:96:da:3d:42:f0:20:39:c2:32:54:
                    af:ed:55:d7:4a:8d:2f:4f:67:b2:6d:9d:bb:09:17:
                    b8:9d:ca:4c:04:7a:4e:01:50:83:51:2c:2b:25:54:
                    d4:26:0b:f7:60:9d:13:81:10:ad:c3:16:eb:2b:20:
                    84:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:8B:10:61:52:25:D8:7A:40:49:90:4E:62:AF:A7:07:32:7D:A6:E4
            X509v3 Authority Key Identifier:
                keyid:EA:FD:2F:CC:DC:6E:FF:DE:35:31:AD:D4:63:8A:A4:8D:00:37:03:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5KQvgvU2pGHopXfjdWUYzdvgaKZnrptwbUnwTQmTKduF/0/EAFD2FCCDC6EFFDE3531ADD4638AA48D00370383.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAFD2FCCDC6EFFDE3531ADD4638AA48D00370383.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5KQvgvU2pGHopXfjdWUYzdvgaKZnrptwbUnwTQmTKduF/0/3138362e3230392e39362e302f32342d3234203d3e20323733373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e3:63:bf:38:d0:ac:7c:1b:af:67:d4:e7:0f:0e:92:6b:3f:12:
         91:33:8d:86:8d:f6:39:02:f0:2c:2f:2e:63:18:82:64:1a:c3:
         54:32:e8:c1:47:a9:1d:ce:a7:dd:8a:41:55:46:d2:d4:99:72:
         6c:bc:03:0d:0e:fe:5d:3c:63:d4:c6:d4:65:f0:17:90:21:ee:
         bb:cd:fa:8b:6d:73:8b:80:ea:34:62:80:26:b8:85:02:0b:aa:
         7b:af:fe:fc:47:37:3b:88:d4:3b:05:14:a4:6f:4f:46:0e:e1:
         db:2f:56:c1:bd:62:57:83:2f:5d:a7:14:a2:bf:94:7e:0c:05:
         ba:ab:a1:70:c0:09:4c:74:0b:7c:e4:c3:8b:93:a3:db:c6:ea:
         5c:e4:38:53:c9:79:40:09:52:f8:eb:54:f8:81:ca:fb:c1:04:
         f7:06:da:16:ee:17:88:4e:2b:0d:e2:f2:fd:8d:a3:f5:b3:90:
         a1:d2:d7:34:74:fe:2c:0a:1f:aa:69:d0:9f:3b:b7:0b:03:10:
         fb:dd:c9:ca:16:ae:f7:28:89:05:31:1a:e4:dc:08:7c:4a:b1:
         e4:f9:8f:86:60:0c:17:07:bb:6a:14:e0:fa:71:64:6a:33:2a:
         4a:80:13:fc:27:a5:73:e9:cd:59:3e:0e:db:89:05:e9:e1:3a:
         05:72:84:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:08:36 2026 by rpki-client