Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/3138362e322e3234382e302f32332d3234203d3e20323636313633.roa
File:                     3138362e322e3234382e302f32332d3234203d3e20323636313633.roa (raw, json)
Hash identifier:          TMVCyQu3dz+9nWxQ/C6oAUCrKYxTYU4BEalXN6+/ACE=
Subject key identifier:   59:97:58:A7:62:FC:91:D9:4E:77:08:7A:A3:89:67:C3:6C:25:6B:DA
Certificate issuer:       /CN=A42BF3C2938EA7FFE9BE4C6524A29B05626AFE37
Certificate serial:       0D07F319CCA23860D26729FDB9BED0CB1FABF43D
Authority key identifier: A4:2B:F3:C2:93:8E:A7:FF:E9:BE:4C:65:24:A2:9B:05:62:6A:FE:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A42BF3C2938EA7FFE9BE4C6524A29B05626AFE37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/3138362e322e3234382e302f32332d3234203d3e20323636313633.roa
Signing time:             Wed 01 Apr 2026 13:08:46 +0000
ROA not before:           Wed 01 Apr 2026 13:03:46 +0000
ROA not after:            Wed 31 Mar 2027 13:08:46 +0000
asID:                     266163
IP address blocks:        186.2.248.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/A42BF3C2938EA7FFE9BE4C6524A29B05626AFE37.crl
                          rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/A42BF3C2938EA7FFE9BE4C6524A29B05626AFE37.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A42BF3C2938EA7FFE9BE4C6524A29B05626AFE37.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 01:41:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:07:f3:19:cc:a2:38:60:d2:67:29:fd:b9:be:d0:cb:1f:ab:f4:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A42BF3C2938EA7FFE9BE4C6524A29B05626AFE37
        Validity
            Not Before: Apr  1 13:03:46 2026 GMT
            Not After : Mar 31 13:08:46 2027 GMT
        Subject: CN=599758A762FC91D94E77087AA38967C36C256BDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3f:37:08:32:a9:d6:21:72:a3:f6:d6:e1:52:
                    57:b0:37:ad:a0:54:e5:82:64:b6:ab:98:36:49:24:
                    f6:2d:55:38:43:3b:e7:9d:06:18:4e:84:ec:38:4f:
                    0f:e3:13:87:62:29:0b:1e:f4:ab:87:2b:ee:28:30:
                    9b:3f:52:be:40:f9:5c:d2:47:13:42:1d:ca:9b:a3:
                    2e:6b:5e:77:e8:9b:41:95:18:1d:99:7b:f0:27:98:
                    12:11:d7:2f:0a:c2:0e:d5:4b:5d:80:d4:30:d5:31:
                    72:23:77:b5:39:69:a4:94:dd:64:e0:7d:b0:3d:8f:
                    78:5f:d8:a5:b4:b6:50:9b:d9:e9:83:15:37:d8:b2:
                    02:c4:d8:33:c7:1f:1d:d6:c9:61:d5:14:bc:4b:4e:
                    e3:b7:f7:24:3a:8f:3c:91:95:c4:f8:42:55:64:61:
                    1f:3c:0f:17:4b:00:08:02:37:3e:2d:9d:f9:d1:2f:
                    ad:3b:a8:c6:1a:d1:67:62:22:08:e8:28:12:be:c3:
                    54:83:5c:c2:74:20:86:dd:da:ff:c4:f0:43:c5:e7:
                    75:13:e5:01:b3:db:fb:bc:38:2e:9e:e9:af:8b:34:
                    34:ea:08:d4:f4:e2:7d:d1:b7:79:5c:9f:bd:77:c4:
                    21:54:96:8b:63:2a:45:7b:ba:1f:8c:2c:54:54:dc:
                    57:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:97:58:A7:62:FC:91:D9:4E:77:08:7A:A3:89:67:C3:6C:25:6B:DA
            X509v3 Authority Key Identifier:
                keyid:A4:2B:F3:C2:93:8E:A7:FF:E9:BE:4C:65:24:A2:9B:05:62:6A:FE:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/A42BF3C2938EA7FFE9BE4C6524A29B05626AFE37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A42BF3C2938EA7FFE9BE4C6524A29B05626AFE37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/3138362e322e3234382e302f32332d3234203d3e20323636313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.2.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:f1:67:e3:fe:9e:78:81:42:7e:ac:2f:ac:52:fd:5b:24:ec:
         9d:f0:4b:d7:d5:f5:7c:bd:7e:b9:7b:12:b3:47:61:e2:f6:c4:
         c3:53:e1:56:09:87:b2:5f:66:de:b1:9f:d8:fb:9a:84:5c:c3:
         9f:60:9a:5c:4a:95:55:cd:b2:a9:f5:d9:74:e7:a9:e1:b8:a0:
         ce:22:55:a4:81:2c:56:d6:43:df:ee:b5:96:28:38:85:8f:9c:
         f7:e2:a2:6f:c5:93:ad:aa:e5:8d:82:07:94:51:35:4e:e7:15:
         97:66:70:2f:61:1e:d4:1b:e3:13:66:0e:7d:cb:12:62:d4:9e:
         74:4b:d5:f2:3a:70:02:10:80:72:ef:ba:64:ff:8f:d9:46:e7:
         26:4c:2e:be:ea:c6:9e:c2:82:95:eb:ec:a2:a4:8a:c7:61:e2:
         61:7d:38:df:a3:ac:f8:20:07:6b:91:8d:f0:d3:a8:15:24:a7:
         42:99:db:10:fc:8c:6e:be:0d:3f:6b:a9:4e:6e:31:16:b3:6d:
         50:76:2c:22:68:71:af:56:30:89:62:11:a1:cb:ad:06:86:5e:
         75:e3:26:fd:34:51:41:c3:74:67:94:a3:9d:ff:fc:ac:66:5b:
         02:23:25:43:b8:af:aa:20:df:1d:d8:5d:f2:e6:76:a8:b1:07:
         53:b4:c8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 18:56:41 2026 by rpki-client