Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/3138362e3232362e35302e302f32332d3233203d3e20323632393739.roa
File:                     3138362e3232362e35302e302f32332d3233203d3e20323632393739.roa (raw, json)
Hash identifier:          Tkt8jwHCaXjn8mjbrqTBtyBZOnfG1PLXWJ/Nl6uu7AQ=
Subject key identifier:   83:DE:41:4D:F9:7F:ED:96:1B:66:1F:64:28:44:32:AE:F5:38:77:41
Certificate issuer:       /CN=C9F90589AA12EE331EB84B23D50CFC9EF4F033D7
Certificate serial:       51CEF774CF92D23ECA425EC6583D90FB949010DD
Authority key identifier: C9:F9:05:89:AA:12:EE:33:1E:B8:4B:23:D5:0C:FC:9E:F4:F0:33:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/3138362e3232362e35302e302f32332d3233203d3e20323632393739.roa
Signing time:             Wed 29 Jul 2026 17:35:40 +0000
ROA not before:           Wed 29 Jul 2026 17:30:40 +0000
ROA not after:            Wed 28 Jul 2027 17:35:40 +0000
asID:                     262979
IP address blocks:        186.226.50.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.crl
                          rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 19:43:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ce:f7:74:cf:92:d2:3e:ca:42:5e:c6:58:3d:90:fb:94:90:10:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9F90589AA12EE331EB84B23D50CFC9EF4F033D7
        Validity
            Not Before: Jul 29 17:30:40 2026 GMT
            Not After : Jul 28 17:35:40 2027 GMT
        Subject: CN=83DE414DF97FED961B661F64284432AEF5387741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:8f:be:71:53:93:87:eb:d8:28:69:6e:ec:10:
                    8a:7a:9c:ff:f7:41:6a:c3:d8:69:dc:67:36:b3:ea:
                    bf:ea:55:2b:b1:14:af:70:17:9b:4b:9b:91:7c:ed:
                    8f:b1:26:81:b0:ab:7f:2b:16:ee:c7:3a:a3:4c:41:
                    1b:f7:7b:cf:69:2c:28:b5:6e:db:50:3d:27:6e:3c:
                    31:a9:b2:09:b5:28:0e:11:2a:bd:02:49:f4:1e:61:
                    32:5e:7f:ae:14:03:7f:9c:db:9b:82:1b:07:d8:ed:
                    23:82:d7:67:75:42:a4:cc:62:a2:0d:6b:55:75:c7:
                    fb:19:26:97:b0:ce:04:9b:3a:b3:42:b9:93:f3:af:
                    16:02:c3:79:fa:40:97:f1:b2:0f:71:71:0f:6d:9b:
                    80:b9:e3:df:e1:eb:02:47:4d:b9:0d:e5:f3:89:7c:
                    22:2f:ca:02:69:bd:27:66:eb:8e:f2:8e:7c:d5:08:
                    d5:42:74:ad:c8:1a:c3:80:ae:c7:47:75:a3:0a:e8:
                    a1:aa:08:26:b2:7c:a7:7d:ba:c3:e0:e5:82:0c:fe:
                    8f:be:64:78:ec:4e:10:d0:3d:c6:36:87:3f:5f:54:
                    6c:12:8e:e1:1a:ba:92:b0:c0:87:89:40:94:fc:ad:
                    99:e6:b2:f4:14:8e:2d:5e:6a:e4:15:11:5b:59:50:
                    34:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:DE:41:4D:F9:7F:ED:96:1B:66:1F:64:28:44:32:AE:F5:38:77:41
            X509v3 Authority Key Identifier:
                keyid:C9:F9:05:89:AA:12:EE:33:1E:B8:4B:23:D5:0C:FC:9E:F4:F0:33:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/3138362e3232362e35302e302f32332d3233203d3e20323632393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.226.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:1e:8e:02:66:f8:21:5c:78:af:bd:1d:d1:0f:fe:58:19:1c:
         c1:28:26:ce:66:ba:9c:1c:5e:ef:d6:3d:0a:49:0b:f0:f3:f5:
         8e:6c:da:90:8a:72:53:98:40:08:ca:df:b2:66:40:c6:2b:08:
         8f:f4:fd:80:1c:65:63:5a:c7:7e:69:24:36:70:86:40:5f:b2:
         dc:4d:d3:d7:db:f1:f9:77:d0:74:23:3e:d2:3d:22:d8:ac:94:
         9f:4d:7d:0d:16:7d:0e:b5:3b:55:bc:ef:f8:32:76:c8:f8:c8:
         07:69:9d:b8:f1:9b:57:53:99:66:10:f5:1e:df:7e:54:57:12:
         a2:71:48:39:12:38:b1:4a:02:e8:7f:68:00:d2:5e:7c:4b:46:
         41:24:2a:d1:f8:4a:ad:00:02:dc:ce:cf:bf:05:07:0e:9d:0e:
         6d:b2:a0:78:5b:47:c5:f7:ec:84:67:7a:b2:e1:ce:aa:b0:5f:
         87:cd:7f:f0:7a:77:77:4b:a3:a0:f9:7d:e1:4a:bf:55:31:c3:
         fe:ad:34:b3:fa:30:73:f9:69:bd:12:79:e1:49:d1:2f:91:c5:
         18:e9:af:07:ef:40:6f:e5:a2:61:12:e1:c6:85:71:19:cc:4f:
         52:ef:24:9f:24:51:a5:d1:dd:86:c3:d7:69:f7:83:9a:87:b2:
         ce:00:f3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 12:06:10 2026 by rpki-client