Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/3138372e3130392e34322e302f32342d3234203d3e20323632373036.roa
File:                     3138372e3130392e34322e302f32342d3234203d3e20323632373036.roa (raw, json)
Hash identifier:          o5hbXReWNEqkhqpcaTrbXf/jGqUOijrwspgqjxGEnMM=
Subject key identifier:   14:41:80:7A:E5:60:E2:34:95:79:C4:CA:C7:A1:17:E0:D3:E5:7C:2C
Certificate issuer:       /CN=D7252ED92923FF7276B97F5469069929707F562C
Certificate serial:       3EE658F2B9B4AE8443C6F446BDD6E0FE2E23828B
Authority key identifier: D7:25:2E:D9:29:23:FF:72:76:B9:7F:54:69:06:99:29:70:7F:56:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7252ED92923FF7276B97F5469069929707F562C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/3138372e3130392e34322e302f32342d3234203d3e20323632373036.roa
Signing time:             Wed 20 May 2026 19:40:44 +0000
ROA not before:           Wed 20 May 2026 19:35:44 +0000
ROA not after:            Wed 19 May 2027 19:40:44 +0000
asID:                     262706
IP address blocks:        187.109.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/D7252ED92923FF7276B97F5469069929707F562C.crl
                          rsync://rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/D7252ED92923FF7276B97F5469069929707F562C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7252ED92923FF7276B97F5469069929707F562C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 May 2026 22:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:e6:58:f2:b9:b4:ae:84:43:c6:f4:46:bd:d6:e0:fe:2e:23:82:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7252ED92923FF7276B97F5469069929707F562C
        Validity
            Not Before: May 20 19:35:44 2026 GMT
            Not After : May 19 19:40:44 2027 GMT
        Subject: CN=1441807AE560E2349579C4CAC7A117E0D3E57C2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6b:f5:d1:e7:78:98:31:52:a2:9d:36:c2:3a:
                    38:fc:d7:48:3b:fc:0f:17:06:cf:94:e8:f2:c8:2f:
                    7f:76:ff:45:b7:ae:64:8e:be:ac:e9:57:99:5c:49:
                    45:f9:bb:01:23:aa:3c:64:66:84:10:b1:54:89:5f:
                    be:0c:39:76:25:cd:f9:18:ac:7f:2d:30:5c:11:57:
                    03:67:bf:94:30:a0:6f:c3:bb:b7:43:00:6f:14:8c:
                    2a:f3:9e:44:19:22:43:9c:a8:39:1a:54:81:14:84:
                    55:a0:7d:d9:c2:35:5e:ca:22:b3:29:a9:41:b4:d9:
                    06:43:fe:3a:ac:6c:03:e8:98:57:c0:5c:d7:0d:57:
                    6f:85:ac:15:d2:5e:8a:6b:14:b9:df:b7:57:28:41:
                    0e:99:d7:8b:3a:f6:5e:30:b5:07:49:3d:2a:5c:7f:
                    99:14:4c:76:17:3d:5b:7a:18:7f:93:a6:9e:e7:69:
                    e0:70:3e:38:10:ea:ff:f2:a5:3b:a6:bf:e3:81:63:
                    8f:10:e3:de:ff:31:e6:de:f6:4d:88:58:44:5f:d5:
                    8c:6d:3e:a2:02:df:c9:34:f4:9f:4e:99:19:33:1f:
                    01:ae:67:2f:bd:eb:11:bf:3a:02:83:98:a6:d7:4d:
                    20:46:e2:4e:85:21:83:57:93:96:2c:48:36:e3:23:
                    a7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:41:80:7A:E5:60:E2:34:95:79:C4:CA:C7:A1:17:E0:D3:E5:7C:2C
            X509v3 Authority Key Identifier:
                keyid:D7:25:2E:D9:29:23:FF:72:76:B9:7F:54:69:06:99:29:70:7F:56:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/D7252ED92923FF7276B97F5469069929707F562C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7252ED92923FF7276B97F5469069929707F562C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/3138372e3130392e34322e302f32342d3234203d3e20323632373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.109.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:40:89:58:ae:b9:15:a7:42:be:5e:6f:54:95:ca:f6:d5:51:
         fa:e0:0b:d0:2b:20:ed:10:79:95:13:29:98:7d:f3:69:1b:08:
         d0:ff:be:0c:b5:b7:91:68:9e:af:fe:b0:73:c8:c6:0e:9e:70:
         f5:4e:75:c4:6e:43:08:2b:0b:d9:bf:a3:6b:b7:ec:01:db:6a:
         b4:61:93:7d:0a:23:dd:5b:a6:52:15:79:97:48:82:56:9d:34:
         60:c6:8c:86:c5:6a:5c:cd:11:e9:58:ef:17:81:b9:a3:0a:5a:
         05:8e:3b:6e:48:b1:82:7b:e0:82:d1:fb:a8:a3:80:fb:8a:9b:
         ae:6f:e8:7d:f4:0a:03:02:52:db:53:7f:9c:d1:42:d0:20:81:
         13:4e:63:2f:d3:4a:81:06:33:17:df:3f:71:e9:78:02:86:0d:
         d0:2f:ff:fe:c7:1c:18:8d:b4:4a:aa:a7:76:91:3e:ab:92:ae:
         60:fe:86:d0:03:73:67:b7:30:d7:71:f8:db:57:81:9b:83:10:
         c4:27:9f:81:8e:de:7e:95:25:85:6c:ae:ae:43:cf:a8:49:ee:
         fe:cd:e6:0c:09:0d:ec:53:59:68:6b:26:7f:71:85:1a:8c:08:
         63:76:bd:3f:b3:86:ac:0f:0b:24:06:5c:e9:5f:3b:ac:20:0f:
         70:6b:eb:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:05:22 2026 by rpki-client