Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/3138372e3130392e34362e302f32342d3234203d3e20323632373036.roa
File:                     3138372e3130392e34362e302f32342d3234203d3e20323632373036.roa (raw, json)
Hash identifier:          XlukhywWHurA77M3BVOgXM41+rI6BcLG6HpPzCWkFM4=
Subject key identifier:   70:E8:48:1F:84:CB:FC:AD:91:08:1D:04:A4:D8:78:DB:82:10:40:F3
Certificate issuer:       /CN=D7252ED92923FF7276B97F5469069929707F562C
Certificate serial:       25B068B1BE9D123B2FA332C5B5B4F1F6389D1651
Authority key identifier: D7:25:2E:D9:29:23:FF:72:76:B9:7F:54:69:06:99:29:70:7F:56:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7252ED92923FF7276B97F5469069929707F562C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/3138372e3130392e34362e302f32342d3234203d3e20323632373036.roa
Signing time:             Wed 20 May 2026 19:40:43 +0000
ROA not before:           Wed 20 May 2026 19:35:43 +0000
ROA not after:            Wed 19 May 2027 19:40:43 +0000
asID:                     262706
IP address blocks:        187.109.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/D7252ED92923FF7276B97F5469069929707F562C.crl
                          rsync://rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/D7252ED92923FF7276B97F5469069929707F562C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7252ED92923FF7276B97F5469069929707F562C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 May 2026 22:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:b0:68:b1:be:9d:12:3b:2f:a3:32:c5:b5:b4:f1:f6:38:9d:16:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7252ED92923FF7276B97F5469069929707F562C
        Validity
            Not Before: May 20 19:35:43 2026 GMT
            Not After : May 19 19:40:43 2027 GMT
        Subject: CN=70E8481F84CBFCAD91081D04A4D878DB821040F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8b:9b:13:ca:cd:b9:40:c6:72:04:cf:49:56:
                    f6:df:82:70:08:82:55:cc:87:f4:80:65:8a:42:b8:
                    65:58:78:68:d4:c7:1a:1e:4a:16:ce:d9:cc:35:03:
                    9a:83:76:ef:f1:1a:8b:c7:fb:a9:dd:68:a0:0f:9a:
                    3a:08:8f:8f:89:0e:16:7b:e8:e2:b7:32:73:cb:04:
                    f6:e3:71:3f:c5:28:f6:f5:d8:5d:34:5c:8d:82:e8:
                    0f:df:79:1b:05:22:d7:82:b8:e4:4d:bc:45:17:29:
                    2c:e7:78:d3:33:e5:40:a2:87:a1:cd:a3:a7:5d:c9:
                    22:10:bb:52:24:4d:4e:1d:d2:44:55:34:60:63:c1:
                    28:16:c6:7f:ef:cc:cc:ff:83:2d:c6:1f:0a:72:73:
                    ad:f8:38:47:13:02:15:41:ea:14:b4:d3:07:7b:4e:
                    88:e2:e1:7b:ef:57:44:05:83:41:ad:f6:20:7e:a3:
                    12:1f:46:87:81:5e:92:ba:e4:ff:19:a9:e6:47:8a:
                    fb:2c:18:72:f6:4b:ef:45:60:c4:0f:88:bd:c7:88:
                    6e:bc:69:97:6a:04:cc:9d:93:71:14:2b:82:a1:30:
                    0f:83:8c:b6:a6:69:6b:c1:4c:9a:53:6c:78:35:89:
                    b6:cd:91:3f:fc:f0:d8:52:90:90:68:7d:dd:b0:15:
                    8d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E8:48:1F:84:CB:FC:AD:91:08:1D:04:A4:D8:78:DB:82:10:40:F3
            X509v3 Authority Key Identifier:
                keyid:D7:25:2E:D9:29:23:FF:72:76:B9:7F:54:69:06:99:29:70:7F:56:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/D7252ED92923FF7276B97F5469069929707F562C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7252ED92923FF7276B97F5469069929707F562C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9WNSiK4TBXotvCD3rE7Fu8kmT7MEas1WrMYitsJYE3xh/0/3138372e3130392e34362e302f32342d3234203d3e20323632373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.109.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:80:01:3c:e5:e7:4c:b4:4e:2e:df:f2:a3:37:83:52:5e:e9:
         66:ef:bd:40:75:18:50:cf:38:f8:5e:0f:36:b3:1d:42:b2:72:
         fe:ad:98:0a:67:0c:21:45:ee:d7:45:51:d0:5e:b5:4b:2d:77:
         57:36:00:eb:c3:87:ca:f4:cc:c0:f4:6b:13:af:42:6a:3c:b6:
         31:d5:72:9f:3a:e6:e5:5b:ab:23:01:62:46:d9:33:b8:aa:dd:
         1a:9c:65:38:d2:c7:2c:98:ea:e8:cd:d5:78:1f:a2:32:73:fe:
         74:df:f2:82:f8:d7:0d:79:b2:c2:bc:88:66:9d:c7:3b:ca:08:
         96:20:98:3b:cb:c2:7b:ef:62:85:75:98:ba:7c:b7:51:5d:62:
         6b:c7:62:f4:ca:73:86:8e:34:41:95:d3:4a:cd:10:cf:61:c0:
         20:d1:11:04:fb:41:9c:eb:12:df:68:ba:15:bf:de:a7:40:35:
         f4:c4:a3:34:d3:dd:7a:bf:05:90:e1:7c:c5:c6:5c:91:f4:da:
         ae:e6:da:5d:c2:69:e1:6d:9b:9c:73:2b:9f:f4:5e:05:8c:c7:
         25:43:86:02:42:79:7c:b3:d0:52:bb:63:96:43:d2:f8:f8:4a:
         61:26:8b:24:09:71:a7:45:b9:87:82:ca:2b:57:cd:66:7c:18:
         d5:8e:2e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:05:26 2026 by rpki-client