Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5mU8SvjvXJkfo9m7x4q7Ka6u1v66quDrjfo96iHL3zHf/0/3138372e34342e38302e302f32302d3234203d3e203238313332.roa
File:                     3138372e34342e38302e302f32302d3234203d3e203238313332.roa (raw, json)
Hash identifier:          KCqaKo6Mtsje/TT1bUyWThP4e8TE8L2LZ4OGDdHvxAM=
Subject key identifier:   C0:0B:91:F8:53:C4:95:9A:E6:85:49:C6:45:A2:C7:36:BF:39:D2:CB
Certificate issuer:       /CN=E38111A1621CC8277B33EF7A17ABAE02D4164A9C
Certificate serial:       408E822A2E6990CD7B0CCDDD59D1B3C7F4258250
Authority key identifier: E3:81:11:A1:62:1C:C8:27:7B:33:EF:7A:17:AB:AE:02:D4:16:4A:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E38111A1621CC8277B33EF7A17ABAE02D4164A9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5mU8SvjvXJkfo9m7x4q7Ka6u1v66quDrjfo96iHL3zHf/0/3138372e34342e38302e302f32302d3234203d3e203238313332.roa
Signing time:             Wed 01 Jul 2026 12:55:48 +0000
ROA not before:           Wed 01 Jul 2026 12:50:48 +0000
ROA not after:            Wed 30 Jun 2027 12:55:48 +0000
asID:                     28132
IP address blocks:        187.44.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5mU8SvjvXJkfo9m7x4q7Ka6u1v66quDrjfo96iHL3zHf/0/E38111A1621CC8277B33EF7A17ABAE02D4164A9C.crl
                          rsync://rpki-repo.registro.br/repo/5mU8SvjvXJkfo9m7x4q7Ka6u1v66quDrjfo96iHL3zHf/0/E38111A1621CC8277B33EF7A17ABAE02D4164A9C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E38111A1621CC8277B33EF7A17ABAE02D4164A9C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 06:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:8e:82:2a:2e:69:90:cd:7b:0c:cd:dd:59:d1:b3:c7:f4:25:82:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E38111A1621CC8277B33EF7A17ABAE02D4164A9C
        Validity
            Not Before: Jul  1 12:50:48 2026 GMT
            Not After : Jun 30 12:55:48 2027 GMT
        Subject: CN=C00B91F853C4959AE68549C645A2C736BF39D2CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f3:27:5c:7a:a9:77:de:03:b7:8b:78:9e:36:
                    a8:48:7d:e5:b6:d7:85:af:34:87:12:ec:d6:d1:a8:
                    2b:97:f4:1c:ca:43:fc:17:d1:36:c2:0c:3b:83:23:
                    4f:d9:71:84:f2:8f:82:82:c0:55:a4:aa:e9:92:84:
                    dd:53:bf:35:6e:4f:af:13:56:08:05:b0:a7:24:bf:
                    73:a6:a7:7b:17:31:18:3c:0c:0f:25:2c:8e:c8:21:
                    00:3a:eb:cd:13:ba:25:15:c5:93:6e:bf:47:fc:c2:
                    7c:f2:7c:81:19:b2:75:9c:55:e3:30:3e:6e:52:18:
                    8a:51:f8:e7:bf:2c:2c:b5:8b:6b:20:84:43:93:28:
                    09:81:2b:55:11:35:f9:96:99:18:cf:c1:d1:96:e4:
                    2e:d6:6e:f4:16:ab:c4:da:c4:6e:1b:70:4a:7e:b9:
                    a2:4f:b6:ac:99:64:14:af:c1:e7:a6:bc:a5:32:8e:
                    1c:43:87:58:bc:ad:c3:77:8a:20:93:1f:28:e6:f9:
                    cf:f6:0c:71:81:bf:82:31:c4:ba:57:b2:9f:5b:7f:
                    bd:92:fa:b8:1b:d7:f5:fe:9e:3e:81:b1:6e:0e:02:
                    22:8e:e9:4f:c9:d0:df:1d:b8:23:3f:74:d6:59:40:
                    2f:6b:36:cb:03:78:cd:d3:5f:03:d0:d3:35:a3:ff:
                    00:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:0B:91:F8:53:C4:95:9A:E6:85:49:C6:45:A2:C7:36:BF:39:D2:CB
            X509v3 Authority Key Identifier:
                keyid:E3:81:11:A1:62:1C:C8:27:7B:33:EF:7A:17:AB:AE:02:D4:16:4A:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5mU8SvjvXJkfo9m7x4q7Ka6u1v66quDrjfo96iHL3zHf/0/E38111A1621CC8277B33EF7A17ABAE02D4164A9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E38111A1621CC8277B33EF7A17ABAE02D4164A9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5mU8SvjvXJkfo9m7x4q7Ka6u1v66quDrjfo96iHL3zHf/0/3138372e34342e38302e302f32302d3234203d3e203238313332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.44.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         06:0f:25:2d:2e:99:29:c5:62:4e:c8:c6:8a:39:a0:2f:f6:e4:
         0b:f8:6a:80:fb:44:83:9e:63:66:73:52:e8:aa:af:36:ff:3b:
         48:7f:16:02:55:19:18:62:96:9c:70:95:86:1b:0b:37:4b:ed:
         cf:20:62:78:70:43:32:85:13:a5:c5:6b:06:76:3d:15:aa:46:
         ba:fd:d0:ff:2c:15:40:75:df:c0:b8:70:8b:4e:0e:2a:0d:7d:
         1b:bb:8b:9d:25:fa:a1:d6:cc:9c:6c:d8:f7:db:4c:ad:f6:81:
         78:0d:e5:ce:a1:5d:26:10:03:4c:55:d7:6e:4e:48:f8:81:3c:
         59:02:9f:25:82:c1:80:a9:ec:8f:0d:d6:18:85:72:7f:47:f3:
         62:c9:db:a5:1f:8f:e4:6c:bb:29:b6:fe:97:f4:17:27:49:42:
         49:d6:be:1e:a0:c0:a8:71:db:e8:1e:27:75:eb:0d:e3:b9:ac:
         f8:c5:e0:21:9b:24:05:d7:40:57:71:38:27:32:99:c8:2e:63:
         63:5b:ea:a6:55:07:9d:e2:06:27:f5:f2:e5:6d:43:18:e1:52:
         44:46:da:b1:6b:72:d3:fc:55:02:96:3a:23:42:ce:26:b1:63:
         65:10:82:8b:6f:6b:3f:62:59:56:c5:36:b5:25:ab:36:06:d8:
         e5:5c:20:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:01:58 2026 by rpki-client