Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135322e302f32322d3232203d3e20323633303539.roa
File:                     3138362e3233322e3135322e302f32322d3232203d3e20323633303539.roa (raw, json)
Hash identifier:          C/SPT6mOjxHHyNVYe5zRZlsKTNOiF6LpDwrsyP4FNBc=
Subject key identifier:   CF:0C:EA:23:CB:BF:A1:94:5A:A3:33:B0:7D:A2:7C:30:90:74:42:17
Certificate issuer:       /CN=60E5E85875AA425349FC348EA2ACB29313D099EC
Certificate serial:       1F211D2385BD02C9C5A41B0506C7F149720A3917
Authority key identifier: 60:E5:E8:58:75:AA:42:53:49:FC:34:8E:A2:AC:B2:93:13:D0:99:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60E5E85875AA425349FC348EA2ACB29313D099EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135322e302f32322d3232203d3e20323633303539.roa
Signing time:             Wed 26 Aug 2026 18:16:13 +0000
ROA not before:           Wed 26 Aug 2026 18:11:13 +0000
ROA not after:            Wed 25 Aug 2027 18:16:13 +0000
asID:                     263059
IP address blocks:        186.232.152.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/60E5E85875AA425349FC348EA2ACB29313D099EC.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/60E5E85875AA425349FC348EA2ACB29313D099EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60E5E85875AA425349FC348EA2ACB29313D099EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 14:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:21:1d:23:85:bd:02:c9:c5:a4:1b:05:06:c7:f1:49:72:0a:39:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60E5E85875AA425349FC348EA2ACB29313D099EC
        Validity
            Not Before: Aug 26 18:11:13 2026 GMT
            Not After : Aug 25 18:16:13 2027 GMT
        Subject: CN=CF0CEA23CBBFA1945AA333B07DA27C3090744217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:92:db:73:40:a9:98:e3:f6:93:7e:a5:c9:bb:
                    1b:ae:02:d3:66:55:03:7a:3b:83:bb:b8:15:e4:a0:
                    74:bc:b6:89:7e:d9:75:e3:38:91:a1:f0:d7:00:98:
                    e9:cf:82:9f:09:85:53:65:e1:d3:b2:8d:d9:fb:04:
                    c0:c1:72:bf:3d:d8:f8:12:74:9f:0d:16:d5:1d:d4:
                    b8:74:93:8c:70:66:ca:0e:50:82:21:ac:cb:c8:e0:
                    a4:4d:cf:eb:c9:8f:7c:45:a4:4f:82:bc:e3:b2:7f:
                    29:97:3a:4d:97:61:85:99:f0:20:ba:07:4f:bf:8a:
                    e1:63:95:c9:4e:1b:4e:26:19:70:ae:e1:a9:46:12:
                    93:44:29:bb:f6:39:53:26:53:1d:52:ae:a0:f4:75:
                    3d:c3:aa:b6:ca:11:37:f0:97:ee:c7:a5:9f:47:b2:
                    00:8e:22:9e:cb:eb:05:c6:64:a6:e7:f9:97:5a:11:
                    3d:d4:e0:8d:6a:f5:f3:d6:75:e7:e7:db:a3:24:44:
                    26:e5:4d:08:07:fb:86:3f:0d:c0:d9:a5:b3:70:1c:
                    97:6e:bf:30:00:37:46:ba:e6:fb:77:65:f2:9d:c1:
                    44:af:60:56:1b:f0:82:d4:9c:e4:01:4a:4a:fb:63:
                    3f:13:51:e3:02:09:4c:ec:08:4b:fa:2b:2d:e1:6e:
                    65:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:0C:EA:23:CB:BF:A1:94:5A:A3:33:B0:7D:A2:7C:30:90:74:42:17
            X509v3 Authority Key Identifier:
                keyid:60:E5:E8:58:75:AA:42:53:49:FC:34:8E:A2:AC:B2:93:13:D0:99:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/60E5E85875AA425349FC348EA2ACB29313D099EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60E5E85875AA425349FC348EA2ACB29313D099EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135322e302f32322d3232203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:2c:3f:04:ce:c1:8a:bc:45:da:e7:ad:b2:0c:8d:e6:df:a6:
         9c:71:5b:49:d3:ab:f6:ce:d5:ac:2f:1b:5f:0c:cc:90:bf:02:
         57:17:91:75:1d:8a:6a:fb:1e:c2:c8:10:82:d8:57:fc:78:92:
         46:50:9f:2b:da:e3:a3:43:4c:fb:5a:18:48:3a:eb:77:1b:be:
         b4:ad:69:c2:b9:20:a2:90:64:ac:93:90:65:eb:27:cc:4b:26:
         e3:99:66:b4:e8:83:45:fa:e9:06:8a:c8:6f:51:aa:8d:45:d9:
         e4:f2:5b:28:8d:57:f2:b7:3a:be:7f:c9:6d:78:59:d8:d8:68:
         19:f4:a9:4e:8a:f6:92:66:54:55:30:9b:fb:1c:58:bb:37:a2:
         26:d9:96:07:e9:84:ab:f8:34:15:30:bb:9c:c9:7d:09:c9:d4:
         f7:cd:f8:8a:54:55:24:cb:87:eb:bf:2d:71:8b:6d:0e:c8:98:
         02:78:3a:50:15:4c:94:56:81:07:6f:e8:1c:38:c2:c0:7e:f9:
         d3:cd:b1:20:ca:29:54:c1:b9:92:d4:ea:e3:13:f0:bd:39:44:
         12:b5:3f:5c:c9:af:50:c5:73:f8:95:48:9e:b4:e1:b3:02:cc:
         26:84:f0:40:b8:d2:54:80:64:e7:50:79:ac:02:80:a7:11:2f:
         cf:1b:81:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 23:33:22 2026 by rpki-client