Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7KobXW123o5SU4mwUndRT8NjLSKH9xjNqEzcbgnYGUA/0/3138362e3235312e3132342e302f32342d3234203d3e20323634343737.roa
File:                     3138362e3235312e3132342e302f32342d3234203d3e20323634343737.roa (raw, json)
Hash identifier:          mxslZt+2wDaAPv+crY6oUyfJKAy8d8+xQoCDivuq1+Q=
Subject key identifier:   FE:7B:78:59:75:73:3A:2B:F5:68:26:9E:CE:4B:41:A5:A5:95:BF:FE
Certificate issuer:       /CN=75C4EB1C867E4EE2947D5E310FB7F25B8E79A37B
Certificate serial:       3C5E09C009DD6A94C0500E9F2FAC13BC8144B1C6
Authority key identifier: 75:C4:EB:1C:86:7E:4E:E2:94:7D:5E:31:0F:B7:F2:5B:8E:79:A3:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75C4EB1C867E4EE2947D5E310FB7F25B8E79A37B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KobXW123o5SU4mwUndRT8NjLSKH9xjNqEzcbgnYGUA/0/3138362e3235312e3132342e302f32342d3234203d3e20323634343737.roa
Signing time:             Fri 18 Sep 2026 21:21:40 +0000
ROA not before:           Fri 18 Sep 2026 21:16:40 +0000
ROA not after:            Fri 17 Sep 2027 21:21:40 +0000
asID:                     264477
IP address blocks:        186.251.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7KobXW123o5SU4mwUndRT8NjLSKH9xjNqEzcbgnYGUA/0/75C4EB1C867E4EE2947D5E310FB7F25B8E79A37B.crl
                          rsync://rpki-repo.registro.br/repo/7KobXW123o5SU4mwUndRT8NjLSKH9xjNqEzcbgnYGUA/0/75C4EB1C867E4EE2947D5E310FB7F25B8E79A37B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75C4EB1C867E4EE2947D5E310FB7F25B8E79A37B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 10:57:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:5e:09:c0:09:dd:6a:94:c0:50:0e:9f:2f:ac:13:bc:81:44:b1:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75C4EB1C867E4EE2947D5E310FB7F25B8E79A37B
        Validity
            Not Before: Sep 18 21:16:40 2026 GMT
            Not After : Sep 17 21:21:40 2027 GMT
        Subject: CN=FE7B785975733A2BF568269ECE4B41A5A595BFFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c7:97:c6:82:af:37:a5:65:1b:1b:f4:7a:25:
                    9a:c6:f4:3d:7d:b5:3a:18:0d:de:b2:60:0b:09:c7:
                    50:82:0c:e4:e6:fb:2f:09:47:14:23:62:13:dd:4b:
                    f2:af:7d:eb:57:bb:d9:15:51:5b:30:66:b5:13:23:
                    5b:c5:10:28:01:a3:f9:33:5c:20:31:40:e3:f0:83:
                    7c:b4:34:3b:f9:2b:e3:27:96:b0:35:4a:af:ee:9a:
                    4e:14:6e:48:ea:80:d0:f3:40:1d:80:03:13:38:6e:
                    14:23:40:9e:d1:e0:cc:8e:eb:03:23:64:ed:d9:64:
                    0b:0e:a1:9a:cd:3c:50:e8:2b:fb:c4:da:21:7c:de:
                    ee:c4:10:49:c0:a0:de:3f:c3:96:2e:c2:22:44:5a:
                    ff:0a:2a:3a:3c:5c:4e:64:ef:e7:48:54:e3:db:19:
                    5e:01:b0:b1:88:73:de:bc:67:87:4f:bb:19:08:39:
                    b5:f4:70:44:23:21:09:0e:cd:d9:b9:7f:2c:e2:46:
                    2a:41:f0:91:57:60:b2:05:99:d3:09:56:5e:e8:23:
                    05:e6:9e:b5:aa:87:3d:fe:51:56:ef:95:f0:47:11:
                    2b:3d:07:13:46:1e:69:c2:76:fb:e7:1e:13:62:b0:
                    86:97:65:fd:55:dc:d5:f1:56:8a:20:29:3c:3d:8d:
                    3b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:7B:78:59:75:73:3A:2B:F5:68:26:9E:CE:4B:41:A5:A5:95:BF:FE
            X509v3 Authority Key Identifier:
                keyid:75:C4:EB:1C:86:7E:4E:E2:94:7D:5E:31:0F:B7:F2:5B:8E:79:A3:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KobXW123o5SU4mwUndRT8NjLSKH9xjNqEzcbgnYGUA/0/75C4EB1C867E4EE2947D5E310FB7F25B8E79A37B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75C4EB1C867E4EE2947D5E310FB7F25B8E79A37B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KobXW123o5SU4mwUndRT8NjLSKH9xjNqEzcbgnYGUA/0/3138362e3235312e3132342e302f32342d3234203d3e20323634343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:3e:99:46:70:52:6c:54:20:86:e8:a4:d8:b3:cc:3b:cc:36:
         bc:db:46:6a:f9:c3:01:40:62:17:cb:44:0d:1a:c9:43:59:7a:
         de:51:99:ef:84:04:c3:36:a4:7d:99:f5:1f:a5:66:4f:06:3d:
         82:06:6a:fc:9e:47:1e:c3:ce:e0:2d:81:a8:80:4e:85:38:4a:
         56:8b:d9:92:b8:93:b7:c7:e7:15:e9:d8:8e:a4:76:5d:e6:20:
         ce:98:9b:c1:d6:ad:a4:a8:b5:6a:48:fe:be:54:bb:a4:c8:b6:
         ac:f0:13:8e:0f:4d:48:e9:56:cc:d3:9f:a6:75:2a:30:d0:66:
         a6:70:9b:6f:04:0e:21:5d:8c:b5:5d:dc:03:35:44:19:9d:ae:
         39:42:e9:5c:8a:76:c2:bd:18:76:7a:02:1e:e3:7f:80:06:1d:
         99:73:f0:c9:a3:19:3c:e2:e3:98:9d:03:37:14:19:03:19:d3:
         91:23:b1:f0:3e:fb:68:f7:f3:6f:41:10:89:5b:ee:4c:cf:12:
         fd:85:64:5e:0a:8f:c8:5d:cc:21:aa:a8:1d:5a:84:78:50:08:
         71:43:e3:a6:24:f3:c8:a0:f1:c2:38:19:33:29:87:35:4a:e1:
         f1:e3:c6:82:12:c6:dc:0a:42:61:3d:64:21:13:7a:af:9c:40:
         c2:ae:64:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 16:15:08 2026 by rpki-client