Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/3138372e3130392e33362e302f32342d3234203d3e20323632373036.roa
File:                     3138372e3130392e33362e302f32342d3234203d3e20323632373036.roa (raw, json)
Hash identifier:          ApkjjLSZSXHGjx/gjHAg4/6xQGNP6PRUsJLmF4tiZwM=
Subject key identifier:   D3:FE:AB:D6:0C:F7:B0:26:58:49:D3:CE:79:04:53:CB:8E:E7:ED:7E
Certificate issuer:       /CN=D7252ED92923FF7276B97F5469069929707F562C
Certificate serial:       543B0A490BBB2179F5F5922579BA1DB854484BDB
Authority key identifier: D7:25:2E:D9:29:23:FF:72:76:B9:7F:54:69:06:99:29:70:7F:56:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7252ED92923FF7276B97F5469069929707F562C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/3138372e3130392e33362e302f32342d3234203d3e20323632373036.roa
Signing time:             Wed 20 May 2026 19:40:48 +0000
ROA not before:           Wed 20 May 2026 19:35:48 +0000
ROA not after:            Wed 19 May 2027 19:40:48 +0000
asID:                     262706
IP address blocks:        187.109.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/D7252ED92923FF7276B97F5469069929707F562C.crl
                          rsync://rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/D7252ED92923FF7276B97F5469069929707F562C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7252ED92923FF7276B97F5469069929707F562C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 May 2026 22:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:3b:0a:49:0b:bb:21:79:f5:f5:92:25:79:ba:1d:b8:54:48:4b:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7252ED92923FF7276B97F5469069929707F562C
        Validity
            Not Before: May 20 19:35:48 2026 GMT
            Not After : May 19 19:40:48 2027 GMT
        Subject: CN=D3FEABD60CF7B0265849D3CE790453CB8EE7ED7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:dd:59:2f:09:47:48:3a:e1:0c:50:ee:7e:ef:
                    bf:73:0f:5f:86:da:6d:4b:99:9b:26:9f:bf:28:82:
                    d3:4f:24:d3:06:5b:1f:c7:4b:59:ef:83:11:4f:07:
                    fd:48:04:b2:85:2a:07:84:96:85:d3:75:2c:8e:f3:
                    47:ea:78:29:cc:97:da:88:96:6f:41:40:da:16:5e:
                    b8:3c:52:12:91:f4:13:59:91:f4:b8:8c:ea:56:6d:
                    44:ed:6e:f6:ed:5c:15:62:bd:1f:3c:bf:a7:7f:1f:
                    51:6d:86:9c:32:92:2a:da:af:42:31:66:f6:a0:da:
                    b1:5e:a9:82:6c:95:47:ba:dc:e6:fa:09:d8:53:a0:
                    53:4e:46:50:98:ac:f9:d6:35:7d:9a:ab:cb:c3:81:
                    d8:6a:ab:0f:7f:c5:53:b4:45:9d:d2:34:84:58:d7:
                    61:62:13:fe:32:0a:ef:52:ac:a7:4d:e2:3f:4f:13:
                    e0:13:cc:f0:9a:fe:bd:71:39:d3:93:42:b2:f8:c9:
                    87:77:d2:94:7c:89:9c:f1:32:3e:43:fa:7c:3e:5c:
                    d3:3b:72:e3:15:de:57:bc:7d:b4:42:26:68:a9:69:
                    19:2b:c2:a5:0d:64:8f:26:f0:2b:37:50:52:c7:db:
                    d5:aa:a3:f2:bc:a3:2c:98:e0:e6:84:7c:80:9f:3a:
                    02:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:FE:AB:D6:0C:F7:B0:26:58:49:D3:CE:79:04:53:CB:8E:E7:ED:7E
            X509v3 Authority Key Identifier:
                keyid:D7:25:2E:D9:29:23:FF:72:76:B9:7F:54:69:06:99:29:70:7F:56:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/D7252ED92923FF7276B97F5469069929707F562C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7252ED92923FF7276B97F5469069929707F562C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/3138372e3130392e33362e302f32342d3234203d3e20323632373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.109.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:a8:0f:cb:c8:59:65:a3:07:7d:6e:8d:16:a9:68:9f:1d:9e:
         58:88:79:05:56:80:fa:da:29:f9:f0:39:b7:de:94:b0:d5:06:
         e5:fd:ae:a6:76:3b:bd:fd:3b:7a:b0:78:94:36:92:af:c4:f0:
         81:7d:cb:c2:99:a9:7a:04:df:5b:1c:11:12:fe:db:06:af:61:
         66:eb:3d:b7:c6:0c:df:d5:96:b5:43:37:b9:17:38:b6:ec:cc:
         04:be:c2:f9:0a:f2:c4:7b:33:ca:72:e8:21:80:2c:5f:bd:ed:
         7b:60:cf:6e:89:44:96:14:5a:a5:c1:7e:c6:22:b2:b3:f9:db:
         cd:2e:60:1d:e8:22:e2:89:6c:74:73:d8:70:54:6f:37:97:b1:
         fa:10:1d:01:da:8a:b5:c9:ea:4f:44:06:45:5b:d8:fb:bc:3f:
         48:0e:eb:99:05:cb:ab:20:7b:15:08:c4:53:c0:6a:19:9f:a8:
         28:8f:4d:89:58:6d:f6:1f:4b:3a:be:65:66:3b:a2:d5:a7:dd:
         27:ec:8f:10:75:80:2b:c3:e8:74:ce:18:54:9a:25:d8:ad:74:
         7c:86:d0:9a:a1:b5:40:d2:c4:57:9d:97:51:aa:0f:81:8f:55:
         8b:47:0e:31:8c:b5:e2:88:1a:2b:63:35:53:7a:62:29:4f:32:
         c4:1a:00:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:42:13 2026 by rpki-client