Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/3138362e3232362e3139322e302f32312d3332203d3e20323632373634.roa
File:                     3138362e3232362e3139322e302f32312d3332203d3e20323632373634.roa (raw, json)
Hash identifier:          bDpx6gWVIB0u25kwWBtt5FnJxc51NN7PTRd1jgOA6dU=
Subject key identifier:   F8:8C:58:5F:C4:98:52:54:34:39:A2:C9:66:ED:C4:88:CA:99:7A:41
Certificate issuer:       /CN=725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5
Certificate serial:       60FC8E7DC28B4CD3045321A4089D593EDA4CEB24
Authority key identifier: 72:5C:FB:34:4D:3B:C8:D4:D1:28:A6:DE:8A:52:7D:9D:1E:3C:70:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/3138362e3232362e3139322e302f32312d3332203d3e20323632373634.roa
Signing time:             Wed 01 Apr 2026 14:58:47 +0000
ROA not before:           Wed 01 Apr 2026 14:53:47 +0000
ROA not after:            Wed 31 Mar 2027 14:58:47 +0000
asID:                     262764
IP address blocks:        186.226.192.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.crl
                          rsync://rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 09:39:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:fc:8e:7d:c2:8b:4c:d3:04:53:21:a4:08:9d:59:3e:da:4c:eb:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5
        Validity
            Not Before: Apr  1 14:53:47 2026 GMT
            Not After : Mar 31 14:58:47 2027 GMT
        Subject: CN=F88C585FC49852543439A2C966EDC488CA997A41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d4:ab:10:0f:d3:a3:85:59:29:ac:f0:fd:9e:
                    83:e3:fd:7b:99:14:a2:a0:f6:98:10:33:59:77:72:
                    6d:fd:02:e8:5b:9a:ae:8d:48:c5:10:55:76:76:1a:
                    e1:3d:88:c7:2a:c4:0a:97:3e:0b:61:b8:cd:59:d2:
                    a3:d7:6f:d6:d4:53:27:ce:d6:05:61:3c:a1:42:d0:
                    07:19:83:11:fe:7c:79:0c:6e:e0:f2:df:8f:8a:c4:
                    6b:51:35:61:da:1d:7d:62:7f:4f:2f:83:27:23:72:
                    e5:7a:dd:bf:80:a4:e8:4f:c4:57:9f:41:02:02:35:
                    4a:a1:b2:e2:5a:49:ab:ea:f1:9c:90:55:6b:16:a4:
                    c4:26:6e:c3:53:8e:d8:77:91:12:1e:cc:68:46:f3:
                    1e:59:92:6b:0e:19:01:46:25:d8:f5:07:ac:47:83:
                    79:60:c4:02:50:c3:ea:44:0d:06:5f:b5:24:c9:53:
                    cd:58:f0:c2:e8:04:f0:93:8a:49:56:27:e6:95:c1:
                    66:52:4d:85:e4:e0:c0:3e:bb:f7:9e:e9:e4:3c:78:
                    be:d5:63:23:26:8d:5b:96:0e:44:f3:d0:e9:04:fc:
                    df:62:44:bc:52:f1:ff:af:d7:bb:8c:96:e6:a1:a3:
                    72:f1:d2:0b:23:21:a2:7e:40:58:e5:56:01:62:c4:
                    fd:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:8C:58:5F:C4:98:52:54:34:39:A2:C9:66:ED:C4:88:CA:99:7A:41
            X509v3 Authority Key Identifier:
                keyid:72:5C:FB:34:4D:3B:C8:D4:D1:28:A6:DE:8A:52:7D:9D:1E:3C:70:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/3138362e3232362e3139322e302f32312d3332203d3e20323632373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.226.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4a:75:d8:02:de:b4:5c:2e:0b:db:4b:7e:69:c2:5b:a4:81:fb:
         14:47:41:e8:0d:42:9a:67:1f:55:1b:47:f4:cd:c9:1e:d2:a6:
         b7:33:e8:80:21:3f:46:a5:ec:fe:b3:16:93:06:42:ac:87:c1:
         c0:5c:0b:b3:e6:cc:4e:cb:d8:9f:df:97:a2:2f:0a:90:1f:9b:
         0f:fb:c9:83:0a:68:e4:e8:5c:98:62:92:31:1b:db:92:64:af:
         bd:dc:36:5a:8c:41:05:43:21:e7:84:1b:70:b4:cc:40:1e:2b:
         2a:6e:c8:dd:ed:e4:1d:be:f6:5f:41:e1:93:b2:8c:ec:80:8b:
         18:ab:45:cb:1c:b6:14:40:f1:7d:54:89:62:9d:b4:3e:4d:af:
         e4:54:f4:ca:d6:f8:28:ea:96:bc:35:cd:2c:c1:2a:d9:f9:7c:
         c0:40:d1:7c:6b:98:02:6a:12:85:5b:16:0d:81:73:be:2c:b9:
         fe:62:85:2c:a2:f8:98:0c:76:cc:d2:12:cf:9e:de:ef:af:b0:
         36:ef:c5:e6:e8:ef:0a:50:ed:ed:8d:a9:44:41:13:08:20:c9:
         b3:6f:82:32:5c:1f:24:7b:82:b7:47:9e:8a:c7:70:b8:8a:65:
         f0:42:a8:e2:d0:19:62:13:a7:34:01:46:be:b7:98:7a:9e:94:
         1a:87:12:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 14:15:53 2026 by rpki-client