Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3136342e302f32322d3232203d3e203238323532.roa
File:                     3138372e312e3136342e302f32322d3232203d3e203238323532.roa (raw, json)
Hash identifier:          UVVZfiBTLK5V9/s89091HbDdUDUTM7yWRmjFTbIej8g=
Subject key identifier:   F6:4C:3A:61:F5:E2:59:5B:C9:A9:F0:DB:0D:2E:AB:3C:27:21:9F:95
Certificate issuer:       /CN=7BD1822386ABA0E476B538AE1CE5CC51409C0B9F
Certificate serial:       661A3466370322907280DA3107B6A0DBB32FA8E4
Authority key identifier: 7B:D1:82:23:86:AB:A0:E4:76:B5:38:AE:1C:E5:CC:51:40:9C:0B:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD1822386ABA0E476B538AE1CE5CC51409C0B9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3136342e302f32322d3232203d3e203238323532.roa
Signing time:             Tue 01 Sep 2026 12:16:36 +0000
ROA not before:           Tue 01 Sep 2026 12:11:36 +0000
ROA not after:            Tue 31 Aug 2027 12:16:36 +0000
asID:                     28252
IP address blocks:        187.1.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/7BD1822386ABA0E476B538AE1CE5CC51409C0B9F.crl
                          rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/7BD1822386ABA0E476B538AE1CE5CC51409C0B9F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD1822386ABA0E476B538AE1CE5CC51409C0B9F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 02:29:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:1a:34:66:37:03:22:90:72:80:da:31:07:b6:a0:db:b3:2f:a8:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BD1822386ABA0E476B538AE1CE5CC51409C0B9F
        Validity
            Not Before: Sep  1 12:11:36 2026 GMT
            Not After : Aug 31 12:16:36 2027 GMT
        Subject: CN=F64C3A61F5E2595BC9A9F0DB0D2EAB3C27219F95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:aa:e4:e1:54:56:12:a7:e2:ed:73:5f:39:c2:
                    cc:b2:4d:5c:0d:be:24:60:ff:5e:d0:b8:38:4e:f3:
                    a1:b2:d5:ce:3c:01:92:56:f9:ba:5b:72:38:e7:a7:
                    53:9c:61:6c:f9:d6:8b:81:a4:f1:60:0d:f4:80:4a:
                    0f:d8:5d:9b:ce:74:c9:ef:d7:a4:02:f1:6f:c8:e6:
                    4b:75:81:5c:81:c9:10:ad:9c:f4:7a:45:54:f9:37:
                    69:a8:81:f0:ca:ba:4f:e1:91:1d:4a:f9:53:71:73:
                    9c:ef:1c:9c:b0:7a:91:93:5f:4d:b7:ab:a5:2b:f7:
                    ec:c9:20:32:33:81:d9:57:85:8b:02:f2:79:f1:00:
                    e8:3a:58:f2:63:51:2b:6c:67:5a:7c:a1:d3:25:5a:
                    44:17:e8:f3:dd:85:0e:f2:41:11:1b:5a:70:85:be:
                    30:1f:c7:83:fa:67:93:29:72:e6:14:a5:a7:79:b7:
                    8b:2b:76:5c:77:89:01:eb:03:08:d4:a6:9d:b7:ec:
                    16:6e:da:34:14:7e:40:6b:45:91:b6:c9:de:52:f4:
                    38:cb:38:3a:09:fa:15:26:12:94:a3:af:b6:7d:f3:
                    50:34:2d:e4:ac:43:a3:48:c5:39:e8:f9:73:11:88:
                    ea:ff:26:b9:df:bc:31:93:58:54:39:b0:79:05:28:
                    56:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:4C:3A:61:F5:E2:59:5B:C9:A9:F0:DB:0D:2E:AB:3C:27:21:9F:95
            X509v3 Authority Key Identifier:
                keyid:7B:D1:82:23:86:AB:A0:E4:76:B5:38:AE:1C:E5:CC:51:40:9C:0B:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/7BD1822386ABA0E476B538AE1CE5CC51409C0B9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD1822386ABA0E476B538AE1CE5CC51409C0B9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3136342e302f32322d3232203d3e203238323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:be:81:2c:2e:ca:a7:25:be:a4:a1:d6:38:3a:10:ad:a9:b7:
         c0:b8:df:fe:71:ba:3f:09:65:13:38:dd:fa:3d:61:92:67:b0:
         ab:bc:10:7c:66:16:87:56:78:7f:56:e2:a3:0b:b2:1a:91:c1:
         fb:38:f2:24:0c:88:0f:ff:a4:34:55:5a:76:45:32:f8:09:c6:
         4d:19:46:63:5e:7b:32:a9:9a:e8:7b:a1:48:3a:fd:f7:f4:8f:
         02:03:9d:47:c5:55:38:f4:b3:04:e9:3b:32:cd:03:e7:5d:fe:
         fc:e0:6c:08:c3:0a:d8:b7:75:0f:e6:e5:43:21:cd:90:fe:78:
         44:d7:76:c2:55:80:cb:0a:5a:f6:cf:ac:63:7f:37:25:5d:f3:
         0a:e2:61:33:e1:01:58:a9:cc:d3:23:e4:92:ba:f4:6e:e4:6f:
         41:19:57:b8:8b:73:8f:3e:2b:48:b7:f1:58:8c:30:d0:5e:f4:
         2e:7a:f2:1c:89:11:83:2f:e3:c1:c2:16:aa:46:d2:64:df:6e:
         d3:6b:e8:0a:1b:2b:30:50:2c:6e:96:12:aa:83:c6:aa:48:3a:
         b6:af:d9:84:bd:93:06:97:77:89:f5:45:73:2f:92:b6:65:de:
         fc:cd:83:ec:6f:21:5d:b3:35:bb:70:1c:15:be:99:2b:46:14:
         4f:b4:58:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:02:15 2026 by rpki-client