Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/3138372e3130392e33342e302f32342d3234203d3e20323632373036.roa
File:                     3138372e3130392e33342e302f32342d3234203d3e20323632373036.roa (raw, json)
Hash identifier:          CZnOqSQAREbQwVsEf5/Fnz7V+jmj5gSaDOeySZuCs9o=
Subject key identifier:   AE:AC:5A:6C:C7:70:79:9F:E4:54:39:F6:DB:C4:D8:0F:DB:91:1B:ED
Certificate issuer:       /CN=D7252ED92923FF7276B97F5469069929707F562C
Certificate serial:       24E9040CFC51BCBEA427477963D45094549F2D77
Authority key identifier: D7:25:2E:D9:29:23:FF:72:76:B9:7F:54:69:06:99:29:70:7F:56:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7252ED92923FF7276B97F5469069929707F562C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/3138372e3130392e33342e302f32342d3234203d3e20323632373036.roa
Signing time:             Wed 20 May 2026 19:40:43 +0000
ROA not before:           Wed 20 May 2026 19:35:43 +0000
ROA not after:            Wed 19 May 2027 19:40:43 +0000
asID:                     262706
IP address blocks:        187.109.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/D7252ED92923FF7276B97F5469069929707F562C.crl
                          rsync://rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/D7252ED92923FF7276B97F5469069929707F562C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7252ED92923FF7276B97F5469069929707F562C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 May 2026 22:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:e9:04:0c:fc:51:bc:be:a4:27:47:79:63:d4:50:94:54:9f:2d:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7252ED92923FF7276B97F5469069929707F562C
        Validity
            Not Before: May 20 19:35:43 2026 GMT
            Not After : May 19 19:40:43 2027 GMT
        Subject: CN=AEAC5A6CC770799FE45439F6DBC4D80FDB911BED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e0:a5:fa:f9:32:20:6b:8d:8f:5d:6e:c6:b4:
                    da:13:a5:a5:c4:fc:6b:23:83:51:a0:44:9f:76:ea:
                    69:02:fd:05:ed:1f:0f:df:75:aa:37:f5:60:00:ed:
                    b2:05:53:7e:8d:6a:e2:63:48:46:32:e5:7b:e8:58:
                    f7:49:18:b0:0f:95:c3:f9:17:11:9e:fb:8c:a0:1a:
                    f7:38:62:4a:cb:68:a1:a4:48:7c:38:eb:90:34:74:
                    2d:a7:4c:43:ef:24:f8:5a:da:62:f9:5c:90:2b:c9:
                    6e:b2:a4:bf:5d:6b:aa:5e:85:2a:ee:9e:26:ed:b6:
                    b6:04:60:b4:58:db:d6:f7:29:e8:04:2d:45:18:9d:
                    1b:62:f1:2c:b9:bd:5f:f5:de:27:9d:55:1e:69:0d:
                    f3:67:b4:3a:80:9f:50:81:3f:f0:d2:8a:8a:74:30:
                    f3:9c:36:c7:db:cf:f1:17:86:38:05:a5:34:ad:81:
                    34:9f:d1:f3:46:37:c5:f6:36:c4:3e:36:4d:08:3a:
                    8d:d2:15:48:98:54:c2:2a:7e:23:21:42:48:ef:b1:
                    ca:cf:0f:3f:24:4e:3b:54:f7:d4:b0:c7:f0:6f:5e:
                    f1:08:25:43:4d:41:d3:76:da:9b:2b:81:02:79:9c:
                    c0:3e:81:71:b7:b0:a2:ae:eb:37:bc:f0:ca:d5:31:
                    fa:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:AC:5A:6C:C7:70:79:9F:E4:54:39:F6:DB:C4:D8:0F:DB:91:1B:ED
            X509v3 Authority Key Identifier:
                keyid:D7:25:2E:D9:29:23:FF:72:76:B9:7F:54:69:06:99:29:70:7F:56:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/D7252ED92923FF7276B97F5469069929707F562C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7252ED92923FF7276B97F5469069929707F562C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/3138372e3130392e33342e302f32342d3234203d3e20323632373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.109.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:79:4d:d9:4b:61:2b:fc:a0:7b:36:52:c7:da:7a:2c:02:8c:
         05:1d:e3:89:ee:f3:c9:95:15:a2:7c:cd:04:58:ab:c0:b5:95:
         f8:94:db:64:4d:b2:e3:46:0f:ab:7e:6a:06:1a:ae:92:02:c1:
         8a:7c:f9:ab:cd:40:14:f6:08:72:21:63:30:4a:29:d0:c2:02:
         b0:ad:8a:72:ff:90:85:9e:21:ae:52:7d:0a:35:6c:9c:ee:08:
         84:8f:59:91:fa:5f:3e:42:6f:e9:0d:4f:bc:cc:50:d1:46:46:
         d1:ce:cf:05:ac:cb:00:1a:3e:a6:1b:b3:e6:0a:cf:c7:08:f8:
         6b:01:62:bc:1a:af:4d:33:db:c3:f6:07:7b:8b:f1:39:b0:72:
         da:b0:67:dd:20:71:f9:38:44:2f:a5:e9:d4:d4:04:2f:87:a8:
         1c:f3:b9:46:77:dd:e4:f0:48:95:e4:6d:f9:c2:02:15:33:e5:
         57:c4:e3:ed:03:a5:2e:ad:08:01:9d:74:dd:f1:90:21:cc:d2:
         34:e0:eb:40:fa:83:51:43:3b:ee:8e:ee:82:4f:27:c7:56:96:
         97:b7:bc:88:c7:61:f3:72:f7:c6:2c:b8:60:46:48:24:cf:3d:
         04:3d:1c:62:33:cf:46:0c:d6:af:8d:4a:97:8e:0b:f8:63:0c:
         d1:55:92:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:42:14 2026 by rpki-client