Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/3138362e3232362e35342e302f32342d3234203d3e20323632393739.roa
File:                     3138362e3232362e35342e302f32342d3234203d3e20323632393739.roa (raw, json)
Hash identifier:          OhMfxOG5CxUYME5XAAiyt3XH+s4BIk6gw0dVT1uLRGo=
Subject key identifier:   0E:1E:6B:C0:DE:79:0D:8A:A5:88:C2:70:4D:81:1C:BD:99:5F:B6:55
Certificate issuer:       /CN=C9F90589AA12EE331EB84B23D50CFC9EF4F033D7
Certificate serial:       286692C7AB212E09B699C36209F6D778B33AFF9A
Authority key identifier: C9:F9:05:89:AA:12:EE:33:1E:B8:4B:23:D5:0C:FC:9E:F4:F0:33:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/3138362e3232362e35342e302f32342d3234203d3e20323632393739.roa
Signing time:             Wed 29 Jul 2026 20:24:08 +0000
ROA not before:           Wed 29 Jul 2026 20:19:08 +0000
ROA not after:            Wed 28 Jul 2027 20:24:08 +0000
asID:                     262979
IP address blocks:        186.226.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.crl
                          rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 19:43:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:66:92:c7:ab:21:2e:09:b6:99:c3:62:09:f6:d7:78:b3:3a:ff:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9F90589AA12EE331EB84B23D50CFC9EF4F033D7
        Validity
            Not Before: Jul 29 20:19:08 2026 GMT
            Not After : Jul 28 20:24:08 2027 GMT
        Subject: CN=0E1E6BC0DE790D8AA588C2704D811CBD995FB655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0a:7c:b8:f4:cf:3c:de:07:63:a5:39:c1:32:
                    13:98:90:05:4a:b4:c1:44:a6:a3:93:7c:ee:80:94:
                    04:86:d3:2b:fa:4d:c2:e4:bb:dd:ec:ae:6c:44:b8:
                    07:bc:0c:da:84:dc:c9:d5:00:9d:28:fa:bb:98:05:
                    a4:85:a4:29:56:f9:0c:db:6a:65:0a:bf:03:3a:4d:
                    10:01:64:81:0f:f1:90:8a:a9:b9:b1:53:9e:3e:7d:
                    28:99:f1:e5:d9:2e:18:9b:e5:25:11:61:5a:d5:cc:
                    bc:e6:b9:97:03:c1:40:0d:ea:b6:5d:91:5f:47:21:
                    91:fe:32:94:6f:bf:04:01:b6:f8:cb:51:70:0a:5b:
                    21:27:95:b7:66:bf:de:b0:f9:b8:15:13:1b:65:4e:
                    c6:42:8a:20:9e:6a:95:4c:46:f6:8a:ea:3a:cc:22:
                    9f:6b:55:46:2b:4e:e1:06:b7:09:1b:b0:a7:b4:11:
                    7d:33:fd:65:bc:1a:f0:ae:16:f2:00:d6:82:10:44:
                    73:56:bc:32:2e:8c:c9:3b:15:cb:9a:bf:e4:23:c5:
                    8e:47:96:65:54:e3:8a:88:b8:ae:de:45:68:a7:c3:
                    3c:68:80:ef:e8:28:29:6d:5d:26:91:25:98:a3:dd:
                    27:ec:a2:74:1b:f7:6b:a5:d0:12:a9:85:66:77:b0:
                    4f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:1E:6B:C0:DE:79:0D:8A:A5:88:C2:70:4D:81:1C:BD:99:5F:B6:55
            X509v3 Authority Key Identifier:
                keyid:C9:F9:05:89:AA:12:EE:33:1E:B8:4B:23:D5:0C:FC:9E:F4:F0:33:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/3138362e3232362e35342e302f32342d3234203d3e20323632393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.226.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:a5:49:2a:10:9f:bb:e8:5e:15:ab:4e:fe:f1:57:19:07:49:
         75:b4:c8:8c:bd:6c:3b:df:46:d5:9c:77:38:84:31:59:be:1c:
         fa:4d:55:29:f7:8d:81:13:ec:f9:a9:75:ba:b3:4c:70:77:0e:
         48:2b:d1:75:85:55:1a:ff:5c:9e:04:4c:86:35:96:c4:18:1e:
         17:49:d8:68:48:b8:40:e6:46:e9:6f:f4:f5:b3:bd:0e:ab:5f:
         5b:f6:db:b7:60:7d:d8:79:be:4e:95:5c:8d:c5:60:33:e0:65:
         c4:f4:ea:5d:86:d1:41:4d:5a:77:82:6f:07:26:e7:28:4a:7b:
         54:64:2a:10:bb:52:dd:18:6f:23:c5:1c:63:1c:78:65:f6:15:
         0b:cf:d9:c7:43:a5:8d:c0:08:fa:86:26:22:07:c7:58:be:78:
         39:fa:a2:3c:33:cb:c7:40:29:16:de:6e:49:2f:8b:90:46:ec:
         c0:06:69:9b:34:21:2e:e9:a2:55:5c:0e:99:03:99:0e:d9:fe:
         8c:8d:d1:2d:1c:9e:d3:4c:1d:71:93:2d:d6:44:92:86:92:57:
         cc:29:d4:d9:c7:ad:fa:25:b0:3f:e3:9c:89:41:2b:62:1b:79:
         a5:bf:b5:d0:e4:0b:78:9e:ba:b1:e8:6f:5f:38:d6:3d:0d:7a:
         77:46:5e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 10:26:02 2026 by rpki-client