Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e332e302f32342d3234203d3e20323632373133.roa
File:                     3138362e3230382e332e302f32342d3234203d3e20323632373133.roa (raw, json)
Hash identifier:          6s1cje9yNx3pLEoZJS+60fr9EdPCU4q8XpuiKLAU9Bo=
Subject key identifier:   B3:9E:E2:7E:79:7F:45:1E:BC:F4:7C:28:E0:F2:2D:76:C7:93:06:FF
Certificate issuer:       /CN=E93268A3714096FCDDC12A8EEEA393524021C87B
Certificate serial:       5C7CEBE39EA4925D8D573AE31CDD571D8E26CB1B
Authority key identifier: E9:32:68:A3:71:40:96:FC:DD:C1:2A:8E:EE:A3:93:52:40:21:C8:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E93268A3714096FCDDC12A8EEEA393524021C87B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e332e302f32342d3234203d3e20323632373133.roa
Signing time:             Thu 06 Aug 2026 16:27:08 +0000
ROA not before:           Thu 06 Aug 2026 16:22:08 +0000
ROA not after:            Thu 05 Aug 2027 16:27:08 +0000
asID:                     262713
IP address blocks:        186.208.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/E93268A3714096FCDDC12A8EEEA393524021C87B.crl
                          rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/E93268A3714096FCDDC12A8EEEA393524021C87B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E93268A3714096FCDDC12A8EEEA393524021C87B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 11:23:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:7c:eb:e3:9e:a4:92:5d:8d:57:3a:e3:1c:dd:57:1d:8e:26:cb:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E93268A3714096FCDDC12A8EEEA393524021C87B
        Validity
            Not Before: Aug  6 16:22:08 2026 GMT
            Not After : Aug  5 16:27:08 2027 GMT
        Subject: CN=B39EE27E797F451EBCF47C28E0F22D76C79306FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:40:bb:db:d0:53:b0:f6:29:0b:47:34:ff:66:
                    b5:d8:ad:77:e4:2d:3c:fd:c0:25:c9:6e:d2:01:a6:
                    f7:c5:df:ac:fc:64:d1:fe:e6:08:cb:a6:da:ae:1a:
                    58:f1:eb:1c:34:88:80:c8:b3:86:b5:71:52:d3:01:
                    b4:98:70:8d:5e:86:3a:1c:e6:bf:99:7c:43:6f:00:
                    78:cd:54:a6:17:bc:d4:fe:f2:6f:1b:af:26:f0:cf:
                    e4:90:67:3b:ad:c8:47:6c:f3:f1:9b:f7:15:15:96:
                    4b:84:b9:be:3a:2e:5a:7c:a7:8e:a0:72:cd:24:66:
                    57:5e:ec:86:67:c9:d1:a7:c9:60:1a:d8:44:48:f0:
                    af:63:43:8e:06:db:3f:8b:8f:96:5d:9d:93:51:6f:
                    3c:b3:28:05:b6:16:3e:9b:b3:19:4e:a4:47:5b:e4:
                    45:28:af:ea:bb:86:3e:d0:64:54:fc:ab:5a:af:18:
                    41:04:26:52:63:ff:9a:d4:85:c6:11:24:01:e0:b2:
                    55:a8:cb:f9:fe:fd:ac:03:67:30:72:06:4b:cd:e2:
                    90:7b:c4:60:d4:65:68:a4:5b:39:40:f9:ac:4c:1f:
                    ed:32:af:8e:cf:fd:d2:5a:ea:e9:f6:d6:bc:b1:ac:
                    0c:34:5d:0e:06:a8:de:dd:3b:45:31:32:96:55:bb:
                    c5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:9E:E2:7E:79:7F:45:1E:BC:F4:7C:28:E0:F2:2D:76:C7:93:06:FF
            X509v3 Authority Key Identifier:
                keyid:E9:32:68:A3:71:40:96:FC:DD:C1:2A:8E:EE:A3:93:52:40:21:C8:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/E93268A3714096FCDDC12A8EEEA393524021C87B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E93268A3714096FCDDC12A8EEEA393524021C87B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e332e302f32342d3234203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:ca:01:1d:ee:99:5c:70:c1:0c:27:3b:6a:b6:f7:de:b5:d8:
         27:f4:69:60:4e:dc:ca:f4:c7:e1:03:22:3f:c9:5f:75:8a:5d:
         40:15:d0:ab:a4:be:65:48:78:88:26:af:29:2d:d1:64:72:9f:
         46:d6:dc:5c:20:26:ca:e5:17:44:27:58:af:39:96:d5:a1:fe:
         8f:b3:71:4a:3d:44:32:c3:a0:53:67:e6:db:46:85:03:87:7a:
         1e:5b:99:fb:ac:c0:01:6a:28:94:5b:d6:8e:1d:d3:6b:5f:de:
         32:85:95:e3:58:30:92:db:2f:50:87:95:dc:14:65:c0:ba:79:
         48:c6:17:45:32:8f:1c:7d:cd:a4:c2:4f:92:40:a6:3b:bf:34:
         9b:32:75:8a:95:33:15:8e:10:a4:04:59:ae:13:1f:08:66:6c:
         e1:d9:1d:ce:25:24:df:11:5e:1e:fa:4c:e9:71:2d:ab:c7:3a:
         75:3d:a4:7e:da:0d:9b:d4:45:01:33:74:44:5f:25:ce:14:c9:
         bb:b2:c7:24:38:dc:34:00:77:e6:6d:9d:7e:fc:0f:74:2b:4f:
         23:0e:b6:7f:96:6f:0c:01:bd:27:23:6f:20:63:a1:bc:8c:9f:
         db:00:13:dd:08:dc:5c:23:ad:2e:0a:ed:10:60:53:8e:7b:61:
         c1:16:56:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 14:19:51 2026 by rpki-client