Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/3138372e3130392e34302e302f32322d3232203d3e20323632373036.roa
File:                     3138372e3130392e34302e302f32322d3232203d3e20323632373036.roa (raw, json)
Hash identifier:          z/ELw/bIvwHTwB3iu9X1ZoX6Stq3VhAGhRHFwfN3tAs=
Subject key identifier:   93:A1:C4:85:5D:38:9F:B3:4F:FB:22:50:43:9F:CE:15:91:87:59:C9
Certificate issuer:       /CN=D7252ED92923FF7276B97F5469069929707F562C
Certificate serial:       12B7647DFD898CA0279F1961227808386A908DBC
Authority key identifier: D7:25:2E:D9:29:23:FF:72:76:B9:7F:54:69:06:99:29:70:7F:56:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7252ED92923FF7276B97F5469069929707F562C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/3138372e3130392e34302e302f32322d3232203d3e20323632373036.roa
Signing time:             Wed 20 May 2026 19:40:41 +0000
ROA not before:           Wed 20 May 2026 19:35:41 +0000
ROA not after:            Wed 19 May 2027 19:40:41 +0000
asID:                     262706
IP address blocks:        187.109.40.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/D7252ED92923FF7276B97F5469069929707F562C.crl
                          rsync://rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/D7252ED92923FF7276B97F5469069929707F562C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7252ED92923FF7276B97F5469069929707F562C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 May 2026 22:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:b7:64:7d:fd:89:8c:a0:27:9f:19:61:22:78:08:38:6a:90:8d:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7252ED92923FF7276B97F5469069929707F562C
        Validity
            Not Before: May 20 19:35:41 2026 GMT
            Not After : May 19 19:40:41 2027 GMT
        Subject: CN=93A1C4855D389FB34FFB2250439FCE15918759C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:71:9a:4d:3e:07:a8:33:78:77:02:39:8a:c0:
                    68:dc:9b:44:49:bc:37:e3:84:b3:4e:0d:7b:d9:bb:
                    6d:f2:18:38:d9:8e:d5:37:ea:4a:ae:f1:ca:de:58:
                    b0:25:24:5e:f4:c4:a1:13:31:9f:ec:a9:59:16:bf:
                    27:59:c8:27:32:70:14:c2:17:ee:06:10:1e:63:92:
                    04:9d:8f:9f:91:52:3d:35:5d:a8:23:29:fb:0c:28:
                    4a:03:c5:52:00:2b:4d:10:1b:9d:de:48:bf:60:69:
                    ad:dd:3e:31:44:2e:65:80:f5:bc:72:36:73:9e:51:
                    43:e8:c4:f2:7f:cf:46:5e:d1:54:de:fa:c5:d1:44:
                    47:79:8b:c9:d7:15:e7:9c:59:ee:01:b6:ce:72:51:
                    0a:bc:90:44:af:92:ad:76:22:ae:53:db:4d:b3:6c:
                    cc:4b:e3:a2:49:b7:3f:51:2a:b9:79:e3:f2:f3:44:
                    ce:52:85:9c:c7:e7:52:4a:f0:44:97:25:36:a7:12:
                    5b:fe:35:5f:6d:ed:85:01:52:6b:24:ff:d5:d1:25:
                    a6:9a:83:91:2f:87:a7:9e:18:28:d5:31:bd:48:9f:
                    dd:6a:09:38:dc:00:79:1c:68:52:9a:5e:b6:f8:0c:
                    ba:0a:ee:4f:c3:1c:26:e8:aa:4b:3b:e7:6a:21:54:
                    75:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A1:C4:85:5D:38:9F:B3:4F:FB:22:50:43:9F:CE:15:91:87:59:C9
            X509v3 Authority Key Identifier:
                keyid:D7:25:2E:D9:29:23:FF:72:76:B9:7F:54:69:06:99:29:70:7F:56:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/D7252ED92923FF7276B97F5469069929707F562C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7252ED92923FF7276B97F5469069929707F562C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/3138372e3130392e34302e302f32322d3232203d3e20323632373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.109.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e0:5d:00:58:8d:b8:89:90:56:a6:ee:82:ba:88:46:63:9b:65:
         90:61:a2:2b:17:4f:24:e2:ff:b9:b5:f2:f5:45:ec:c7:28:08:
         6b:56:1f:6f:94:62:14:7b:06:6f:12:a2:b2:8b:2d:d5:14:35:
         d6:c8:4d:83:7d:b3:1b:94:11:68:df:34:b1:3f:d0:3d:98:60:
         46:64:90:33:de:7c:79:93:ea:2e:49:4e:34:5e:59:cf:ce:b4:
         29:9a:6c:c7:c4:98:e2:85:aa:e6:f6:ab:3f:d5:16:10:c9:f4:
         b9:8d:a0:5c:75:94:4f:f3:f6:53:03:43:0b:b3:92:51:08:e0:
         dc:1e:29:c7:51:9b:d8:bf:66:99:20:74:aa:87:70:3b:1f:14:
         b7:f6:fa:36:14:5d:27:6c:eb:81:41:02:62:dd:c0:e9:69:c5:
         6b:af:65:30:63:2f:f3:31:d4:17:e3:e5:17:e5:d8:c2:bf:ad:
         f4:ea:ac:cd:b2:cc:34:20:e4:37:8f:2d:28:22:be:50:99:4e:
         f9:f6:43:08:3a:5c:26:b8:fb:3d:98:11:32:cb:11:e1:48:ab:
         b5:0e:a6:1b:6e:d7:41:fc:f9:50:19:20:3c:81:b1:65:11:c5:
         ef:b6:6a:b5:3e:08:4f:6d:94:2d:0b:fc:dc:e7:b6:28:18:ac:
         38:f1:08:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:42:20 2026 by rpki-client