Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e31382e302f32332d3233203d3e20323633303232.roa
File:                     3138362e3234392e31382e302f32332d3233203d3e20323633303232.roa (raw, json)
Hash identifier:          euFs/tw+SFJKOPYfLqxSd0sFuD7nvLGJcHdUe81QfXc=
Subject key identifier:   DA:FB:3E:B4:97:38:48:08:39:66:97:1C:08:0D:01:40:8E:EC:67:E8
Certificate issuer:       /CN=D55BE7005278F3F9252FA4D5C51715A6B1BF81E7
Certificate serial:       6282B485B41338566D7CC2690A966AC156587511
Authority key identifier: D5:5B:E7:00:52:78:F3:F9:25:2F:A4:D5:C5:17:15:A6:B1:BF:81:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e31382e302f32332d3233203d3e20323633303232.roa
Signing time:             Wed 09 Sep 2026 15:15:53 +0000
ROA not before:           Wed 09 Sep 2026 15:10:53 +0000
ROA not after:            Wed 08 Sep 2027 15:15:53 +0000
asID:                     263022
IP address blocks:        186.249.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.crl
                          rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 22:52:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:82:b4:85:b4:13:38:56:6d:7c:c2:69:0a:96:6a:c1:56:58:75:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D55BE7005278F3F9252FA4D5C51715A6B1BF81E7
        Validity
            Not Before: Sep  9 15:10:53 2026 GMT
            Not After : Sep  8 15:15:53 2027 GMT
        Subject: CN=DAFB3EB4973848083966971C080D01408EEC67E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c3:03:af:74:20:33:86:a3:f3:17:7e:96:ad:
                    67:a5:84:e7:8e:61:d0:c2:2d:16:af:e0:6c:d1:f8:
                    7d:ba:8c:c5:91:2f:ce:ef:c1:10:61:f6:c4:da:89:
                    a9:8b:ab:7f:76:e9:59:8a:64:98:73:d6:0c:f8:9f:
                    28:e6:2b:fa:ba:28:5d:ca:aa:97:fa:53:cb:94:b8:
                    c9:21:7e:d2:76:ba:cb:81:ed:33:e1:a0:02:c7:ce:
                    9a:15:1d:ce:10:c5:7a:d8:84:7f:93:a0:6f:58:b4:
                    84:9d:4b:f3:a6:40:96:c4:a6:ba:71:ca:cb:82:f3:
                    7e:ed:19:fb:f5:15:b9:3a:f7:a6:b0:68:db:38:3f:
                    be:a1:96:9e:54:71:c8:f9:81:5c:8f:11:77:be:1c:
                    49:b7:1d:88:21:1a:ad:81:43:cb:41:97:f8:cf:a3:
                    0d:49:25:7e:61:a6:5d:b1:5d:dc:28:c1:55:55:b8:
                    d2:16:bf:0a:72:a1:e4:fb:bc:48:2c:2a:57:a4:0f:
                    6a:5c:8e:1c:cd:99:3b:55:6d:da:33:74:94:29:fe:
                    cf:56:29:21:a0:79:31:bf:4f:ec:3c:a2:4e:b3:bd:
                    69:f6:96:a8:69:41:bf:4c:fb:04:5c:26:79:16:0b:
                    ea:f7:7a:c4:34:85:ca:b8:a2:2d:09:36:04:48:27:
                    5f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:FB:3E:B4:97:38:48:08:39:66:97:1C:08:0D:01:40:8E:EC:67:E8
            X509v3 Authority Key Identifier:
                keyid:D5:5B:E7:00:52:78:F3:F9:25:2F:A4:D5:C5:17:15:A6:B1:BF:81:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e31382e302f32332d3233203d3e20323633303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:64:db:49:de:d7:e0:16:93:3f:18:7c:b0:84:d9:23:53:55:
         98:23:ef:3f:56:93:60:75:f7:7a:fd:96:7f:d7:41:36:cf:9a:
         21:39:54:4a:e9:ab:c2:51:80:6a:ed:ea:e0:46:fa:c6:b9:41:
         16:05:1d:6a:74:4f:89:95:c3:5f:ac:3d:42:21:09:5d:d5:0b:
         19:f2:25:71:41:21:04:fd:d8:7c:9a:05:00:1f:eb:6c:6b:bc:
         76:06:99:f5:67:5e:72:de:00:de:10:42:55:9d:01:82:70:dc:
         92:e5:5f:0f:d6:eb:a6:be:aa:dc:1a:e3:47:2b:40:bd:d7:5b:
         48:a2:37:dc:07:19:54:4d:f3:90:c5:3d:56:40:7b:ba:89:bc:
         ef:86:94:31:f2:ef:61:b8:18:58:8f:14:60:e9:a6:8f:23:22:
         da:c8:0f:2b:f4:de:4b:66:91:a7:c7:63:ad:03:e0:af:1f:a9:
         d5:be:0e:bd:56:1d:cb:8d:7d:84:b1:05:fd:7b:a9:bf:01:38:
         8b:cc:c7:66:e6:20:45:33:f0:22:7e:4e:75:17:52:3a:33:80:
         59:a2:8c:02:91:8c:f0:e9:46:52:d6:23:70:52:7a:2b:b4:df:
         32:09:e5:99:d2:3a:d8:ba:3f:2a:f1:65:43:a8:30:1d:24:5c:
         5b:d8:78:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----