Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3138392e33382e31382e302f32342d3234203d3e20323637353738.roa
File:                     3138392e33382e31382e302f32342d3234203d3e20323637353738.roa (raw, json)
Hash identifier:          s3635KRWcnT/S6TyYWKPxVzzPV+lF2Me8OufB1b2YIs=
Subject key identifier:   DB:46:F2:FD:67:75:33:03:CB:4C:8B:C7:BC:1E:9F:40:6D:50:08:F7
Certificate issuer:       /CN=BD1E87C8514998E362292741C70F693178FDD20E
Certificate serial:       5983CA7C5C165D4EF649734BF715CDDB9CFAF67F
Authority key identifier: BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3138392e33382e31382e302f32342d3234203d3e20323637353738.roa
Signing time:             Wed 05 Aug 2026 18:44:58 +0000
ROA not before:           Wed 05 Aug 2026 18:39:58 +0000
ROA not after:            Wed 04 Aug 2027 18:44:58 +0000
asID:                     267578
IP address blocks:        189.38.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl
                          rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 06:53:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:83:ca:7c:5c:16:5d:4e:f6:49:73:4b:f7:15:cd:db:9c:fa:f6:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD1E87C8514998E362292741C70F693178FDD20E
        Validity
            Not Before: Aug  5 18:39:58 2026 GMT
            Not After : Aug  4 18:44:58 2027 GMT
        Subject: CN=DB46F2FD67753303CB4C8BC7BC1E9F406D5008F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:38:de:c0:17:89:fd:f8:b6:84:9b:82:8e:ee:
                    75:fa:cc:0f:39:e3:3b:dd:a2:5f:02:e5:47:a7:21:
                    a6:c2:e4:0e:71:f4:61:df:38:4f:02:fc:6e:63:6c:
                    d1:a7:e1:03:38:b0:84:11:b4:a7:6f:46:48:43:75:
                    9a:86:73:5f:3e:0c:9d:32:50:b5:9d:53:5d:00:f9:
                    40:c6:a4:b5:da:63:9e:99:62:d5:29:ec:fb:5c:0c:
                    c1:68:17:8e:b5:c8:8b:4f:31:e8:60:6a:ca:fb:1c:
                    49:15:61:45:b8:05:92:ba:4e:57:ec:d8:1f:f9:0f:
                    b9:76:6e:80:ed:dc:79:a9:a8:05:a7:93:b2:22:ed:
                    28:21:ab:83:85:43:0a:ef:c9:ae:f1:f5:b1:8b:a6:
                    0c:0a:0e:c5:bb:57:1e:5f:00:18:d4:88:68:cc:f5:
                    f4:1a:f9:b4:73:33:c1:a5:85:56:b7:be:98:8f:3b:
                    0e:b9:5b:91:81:27:87:50:df:14:c6:94:d5:fe:33:
                    20:a7:fa:8d:fe:cc:f3:90:92:3f:b7:e2:86:6d:95:
                    d4:2f:f9:94:b4:08:11:a0:c2:f2:15:99:41:43:d9:
                    f4:53:78:39:de:c2:26:6c:21:2e:06:21:c9:81:4f:
                    06:2d:54:96:ab:93:8d:ca:76:cd:4d:47:ba:b9:81:
                    15:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:46:F2:FD:67:75:33:03:CB:4C:8B:C7:BC:1E:9F:40:6D:50:08:F7
            X509v3 Authority Key Identifier:
                keyid:BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3138392e33382e31382e302f32342d3234203d3e20323637353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:00:f0:d9:b5:70:09:ad:d2:6d:7f:4b:4a:98:b3:fb:8a:99:
         4e:13:c4:a6:a7:6d:54:70:f3:6f:dd:ae:1f:a6:2b:7f:6c:d3:
         e3:6c:73:39:ab:ad:1a:c8:ad:2f:4b:16:23:42:87:82:8c:af:
         b2:62:ad:02:c5:0e:42:df:80:b4:d2:49:0c:b1:4d:b4:4e:81:
         82:2e:1b:11:11:a9:fe:ef:75:3b:12:af:53:e4:ab:e5:ca:e3:
         0a:fb:60:3f:ec:80:92:3d:c0:60:83:5d:be:b4:8c:90:cf:63:
         3a:36:49:15:6c:41:33:9e:38:78:b8:17:18:c5:66:6a:df:15:
         cc:fe:f0:79:71:06:13:53:9a:9b:54:d9:de:39:ea:5f:93:7c:
         f4:66:13:9d:1a:f4:0a:26:53:b0:90:fc:5a:44:1a:db:7a:64:
         5d:6c:dd:3b:3a:de:68:52:38:94:80:dd:3a:ae:a3:c6:60:c9:
         91:97:e5:63:de:71:c7:05:ca:6c:01:95:dd:f2:d7:c3:ba:ad:
         d7:71:99:d9:91:11:88:8a:ae:f5:d2:d6:c0:d4:b6:c1:fb:e6:
         fb:94:29:24:03:ef:36:29:28:89:04:3f:8e:9a:c5:80:9e:23:
         02:fb:ce:4c:71:20:81:73:12:b3:02:1b:7d:4b:d0:4c:17:24:
         c5:4f:d1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 00:42:20 2026 by rpki-client