Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/3138362e3235312e35322e302f32342d3234203d3e20323632383234.roa
File:                     3138362e3235312e35322e302f32342d3234203d3e20323632383234.roa (raw, json)
Hash identifier:          GtGn6qJRKbAArS1twcmTXDsV6mq5pvMOxTJcKu2rLcI=
Subject key identifier:   88:E1:F1:C9:FE:76:7E:9C:EF:6F:D7:9A:87:5C:88:7F:84:2F:E0:AC
Certificate issuer:       /CN=84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7
Certificate serial:       5F26E1F790E282C800CE96CFA5E258A84BB0763A
Authority key identifier: 84:22:2E:FF:28:BD:EA:4B:0A:6C:AE:9E:9D:0F:01:08:2E:8E:47:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/3138362e3235312e35322e302f32342d3234203d3e20323632383234.roa
Signing time:             Sun 05 Jul 2026 23:57:48 +0000
ROA not before:           Sun 05 Jul 2026 23:52:48 +0000
ROA not after:            Sun 04 Jul 2027 23:57:48 +0000
asID:                     262824
IP address blocks:        186.251.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.crl
                          rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 12:43:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:26:e1:f7:90:e2:82:c8:00:ce:96:cf:a5:e2:58:a8:4b:b0:76:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7
        Validity
            Not Before: Jul  5 23:52:48 2026 GMT
            Not After : Jul  4 23:57:48 2027 GMT
        Subject: CN=88E1F1C9FE767E9CEF6FD79A875C887F842FE0AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:05:a4:c4:00:94:f0:9c:38:d2:b5:95:3b:62:
                    e8:dc:5c:12:72:a6:d6:19:6f:8f:d2:86:23:2e:2c:
                    9e:65:21:ba:61:34:35:f7:19:31:53:d2:00:15:3d:
                    ad:9c:a0:2f:d9:60:7e:3d:c4:93:4e:03:a7:ae:98:
                    0c:f1:dd:dd:f4:78:6f:d8:10:f6:01:46:29:6b:99:
                    06:bc:84:1f:f7:ab:30:f3:a3:42:91:9c:3e:cc:c5:
                    45:ba:bb:43:5d:fa:ca:63:3b:6f:00:0a:42:79:62:
                    71:81:31:d9:f3:1e:fd:09:13:d0:ac:a9:0c:62:53:
                    8c:c6:f7:e6:6e:0c:4e:5c:a0:31:52:60:c9:d5:4d:
                    94:32:bf:99:7a:10:0d:43:ea:5b:06:a7:a2:7a:f1:
                    d7:bf:21:43:42:26:b4:4d:e6:a7:b2:6f:d0:3b:3b:
                    21:9e:08:ac:ab:f6:63:ba:d6:1e:c2:b0:aa:ce:7f:
                    7e:88:a9:14:9c:b9:79:9d:63:3c:58:34:12:f1:db:
                    7f:e5:89:ba:42:0c:2f:95:89:0f:ba:9f:9a:2b:1b:
                    24:74:fb:ab:48:dc:d2:4b:ae:6d:04:7a:da:ff:da:
                    ba:c6:a7:c4:a3:51:a1:1b:9d:93:85:66:c0:6d:5b:
                    eb:f3:c5:10:44:b7:b8:6c:14:97:24:8f:5f:12:85:
                    ba:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E1:F1:C9:FE:76:7E:9C:EF:6F:D7:9A:87:5C:88:7F:84:2F:E0:AC
            X509v3 Authority Key Identifier:
                keyid:84:22:2E:FF:28:BD:EA:4B:0A:6C:AE:9E:9D:0F:01:08:2E:8E:47:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/3138362e3235312e35322e302f32342d3234203d3e20323632383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:f5:e6:b3:25:cc:8c:0e:60:8a:7e:82:9b:f8:0d:bb:48:a0:
         be:1a:5a:61:87:11:a3:12:44:ff:01:35:92:36:b8:bd:05:08:
         3a:5a:ec:96:d2:8d:1a:cf:1a:6b:31:e0:44:6f:22:60:ec:2f:
         02:69:dc:22:89:b0:22:5f:04:28:e1:22:de:74:46:33:ff:2e:
         c2:06:b8:e7:2c:0b:30:10:5e:4f:e0:94:65:d3:ba:1a:7f:44:
         76:e6:ed:7d:21:69:83:e1:97:2f:7e:40:30:15:59:e2:55:42:
         3e:a3:d2:e6:f0:07:49:5f:e6:20:88:94:c4:75:30:68:9e:66:
         0e:b7:1c:f4:ef:5d:c5:b8:a1:39:ab:b7:08:d3:6f:db:aa:d5:
         82:ac:54:8f:8d:46:21:c6:ce:a3:0c:08:80:45:c6:70:5a:6e:
         8e:61:e5:9e:7b:3a:7b:a9:4f:2e:cb:af:32:c5:14:30:9e:ec:
         5d:a4:01:75:1a:b3:87:38:47:02:fe:a4:9b:50:85:83:c6:24:
         c9:2f:c8:70:47:39:a9:5a:03:35:10:a0:8e:0a:6c:c4:bc:6a:
         1b:9b:7d:b2:b7:f5:2c:b0:d6:ac:1a:a3:4f:63:c8:c9:cb:4a:
         ed:eb:0f:a5:5c:e2:40:23:62:f7:5b:ee:a9:d9:67:75:71:7c:
         8a:c2:41:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:04:44 2026 by rpki-client