Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7KobXW123o5SU4mwUndRT8NjLSKH9xjNqEzcbgnYGUA/0/3138362e3235312e3132342e302f32322d3234203d3e20323634343737.roa
File:                     3138362e3235312e3132342e302f32322d3234203d3e20323634343737.roa (raw, json)
Hash identifier:          HHblro6d0FNlTmi2JsybJqM6PmmkPJJ/ica7IrSfyO8=
Subject key identifier:   64:71:A3:9E:63:6F:E0:36:32:EE:F0:F0:96:08:4E:B6:80:45:64:FC
Certificate issuer:       /CN=75C4EB1C867E4EE2947D5E310FB7F25B8E79A37B
Certificate serial:       04EBDA02BA233A952927478298A34A10516211BD
Authority key identifier: 75:C4:EB:1C:86:7E:4E:E2:94:7D:5E:31:0F:B7:F2:5B:8E:79:A3:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75C4EB1C867E4EE2947D5E310FB7F25B8E79A37B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KobXW123o5SU4mwUndRT8NjLSKH9xjNqEzcbgnYGUA/0/3138362e3235312e3132342e302f32322d3234203d3e20323634343737.roa
Signing time:             Fri 18 Sep 2026 17:29:30 +0000
ROA not before:           Fri 18 Sep 2026 17:24:30 +0000
ROA not after:            Fri 17 Sep 2027 17:29:30 +0000
asID:                     264477
IP address blocks:        186.251.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7KobXW123o5SU4mwUndRT8NjLSKH9xjNqEzcbgnYGUA/0/75C4EB1C867E4EE2947D5E310FB7F25B8E79A37B.crl
                          rsync://rpki-repo.registro.br/repo/7KobXW123o5SU4mwUndRT8NjLSKH9xjNqEzcbgnYGUA/0/75C4EB1C867E4EE2947D5E310FB7F25B8E79A37B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75C4EB1C867E4EE2947D5E310FB7F25B8E79A37B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 05:43:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:eb:da:02:ba:23:3a:95:29:27:47:82:98:a3:4a:10:51:62:11:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75C4EB1C867E4EE2947D5E310FB7F25B8E79A37B
        Validity
            Not Before: Sep 18 17:24:30 2026 GMT
            Not After : Sep 17 17:29:30 2027 GMT
        Subject: CN=6471A39E636FE03632EEF0F096084EB6804564FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:17:96:96:c6:19:b4:cc:08:16:a6:48:3f:cd:
                    3e:e0:bc:f1:93:34:2c:bb:a4:b2:9a:71:19:43:86:
                    4e:b7:52:c3:73:b9:af:a4:38:12:71:a0:49:8b:17:
                    9e:7c:25:f1:42:3a:b4:b0:ba:c4:b0:1a:44:9d:3b:
                    d3:19:18:ac:7e:a8:95:a0:2a:d0:12:0e:1b:13:73:
                    74:e4:14:83:90:9e:4e:0d:1a:2a:4b:1b:17:32:22:
                    81:0e:44:f6:8f:d9:95:6b:d0:65:22:f1:49:f5:33:
                    f8:22:ec:b0:3f:25:eb:d8:68:a8:c7:7a:00:4b:f6:
                    65:2f:6b:b0:b1:cd:ee:61:d9:1b:84:41:85:70:e9:
                    7e:dc:46:d0:47:ff:64:5b:5a:51:dc:2a:08:04:93:
                    1e:f4:67:d6:71:41:f2:79:f3:e4:72:e7:57:b8:e8:
                    a5:84:15:5c:03:11:5a:44:5f:52:90:f6:52:c4:39:
                    98:5c:fe:be:39:f1:f4:cc:69:ca:ee:a3:34:e9:f6:
                    a0:24:fb:87:05:4b:bf:f4:dd:e6:ed:ed:86:8a:61:
                    25:d0:fd:0e:7c:16:ea:95:f4:98:21:b1:9f:e0:bd:
                    c3:71:98:49:bf:6b:b9:c2:87:41:47:f8:17:77:b4:
                    72:89:54:21:f8:4a:11:30:61:ea:41:d8:08:d9:88:
                    c0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:71:A3:9E:63:6F:E0:36:32:EE:F0:F0:96:08:4E:B6:80:45:64:FC
            X509v3 Authority Key Identifier:
                keyid:75:C4:EB:1C:86:7E:4E:E2:94:7D:5E:31:0F:B7:F2:5B:8E:79:A3:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KobXW123o5SU4mwUndRT8NjLSKH9xjNqEzcbgnYGUA/0/75C4EB1C867E4EE2947D5E310FB7F25B8E79A37B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75C4EB1C867E4EE2947D5E310FB7F25B8E79A37B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KobXW123o5SU4mwUndRT8NjLSKH9xjNqEzcbgnYGUA/0/3138362e3235312e3132342e302f32322d3234203d3e20323634343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:2d:d9:fb:4a:3f:d2:9b:a6:d3:c7:9c:5f:bd:3a:e1:86:00:
         98:7c:c3:e8:2e:a3:f8:44:84:73:86:42:95:c5:51:ea:e5:1a:
         6c:9c:3d:21:2c:87:ef:43:e6:04:66:09:db:b2:0d:70:78:c2:
         be:c6:39:5d:80:65:33:fa:d4:7c:16:7b:e5:db:54:28:4d:f8:
         6e:f6:d6:a9:e4:6b:02:cf:d3:61:21:65:18:d0:6d:4f:d4:b3:
         4b:2d:b6:21:32:1c:2e:04:17:9b:fe:e0:6a:82:2f:21:27:e3:
         2d:02:7b:0c:e7:07:9e:52:96:b7:cc:35:c2:af:cf:f3:08:45:
         35:13:eb:0c:48:dc:00:2f:a0:69:d2:de:9c:62:10:d5:e3:f5:
         d9:54:4a:dd:a3:ae:d9:8f:f9:b0:92:c1:4d:c6:b7:fe:22:d2:
         7a:3b:c8:05:80:90:55:de:5f:0a:0f:c8:4b:82:c0:87:a4:72:
         da:f0:33:cf:57:c8:9f:75:31:3f:40:a8:8c:f5:6b:fe:74:29:
         fb:96:0a:ab:f2:9d:02:61:7c:64:cf:06:e7:d3:1a:68:60:0d:
         f5:6d:7f:e0:f3:9a:f4:ad:33:6e:59:8c:0d:01:07:23:a0:13:
         ee:5a:22:1e:df:05:53:a6:8b:00:3b:d3:d5:86:1c:a6:c6:9b:
         22:1d:f1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:39:19 2026 by rpki-client