Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3133302e302f32332d3233203d3e20323632373239.roa
File:                     3138362e3139332e3133302e302f32332d3233203d3e20323632373239.roa (raw, json)
Hash identifier:          bFteqhJ6NjewamSoB4OGRrJ5yGxGnI1f0JByLlyU8zg=
Subject key identifier:   75:2B:B8:2C:B6:98:19:69:B0:4F:7D:EC:05:96:80:EE:E8:17:95:17
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       3767C113F4F94972754233AA3D396B65B7434E15
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3133302e302f32332d3233203d3e20323632373239.roa
Signing time:             Mon 18 May 2026 15:08:00 +0000
ROA not before:           Mon 18 May 2026 15:03:00 +0000
ROA not after:            Mon 17 May 2027 15:08:00 +0000
asID:                     262729
IP address blocks:        186.193.130.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 15:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:67:c1:13:f4:f9:49:72:75:42:33:aa:3d:39:6b:65:b7:43:4e:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: May 18 15:03:00 2026 GMT
            Not After : May 17 15:08:00 2027 GMT
        Subject: CN=752BB82CB6981969B04F7DEC059680EEE8179517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:53:56:bf:07:65:c6:a3:20:63:25:3c:44:38:
                    c1:ed:99:86:7d:e3:e4:56:8a:67:50:bf:c1:cb:9c:
                    c2:22:26:ec:49:9a:c7:18:62:0d:e4:83:08:30:80:
                    76:22:ab:f0:59:a0:3d:c3:7e:bc:2e:d9:3b:aa:18:
                    99:47:24:51:64:69:6f:84:92:6b:8f:11:c6:8b:fd:
                    eb:e6:6d:77:e1:f9:22:9e:94:3f:0e:f1:24:79:be:
                    a7:7c:1e:bd:93:50:19:1b:74:55:b2:9c:fe:61:d2:
                    ae:45:63:f8:88:96:57:15:91:19:3b:69:da:cd:c5:
                    9e:c1:24:a4:16:b9:03:76:55:b4:96:1a:2d:21:1a:
                    a2:bb:96:56:bf:ec:3d:be:e8:be:e7:f1:ec:b1:51:
                    a2:f5:08:04:6d:e3:c3:9b:f8:ce:de:04:fe:56:42:
                    2c:a5:48:75:33:8c:83:85:ba:e8:e1:58:a3:cc:bb:
                    1e:20:75:17:93:be:df:1b:87:70:4c:31:2b:8b:cd:
                    34:c0:e8:1e:b5:3a:59:f0:8f:31:87:a6:ba:02:ab:
                    58:66:1f:6b:e9:d4:dd:6f:dc:51:ca:aa:e2:b5:92:
                    53:06:e1:84:c9:a6:38:99:10:c5:fd:10:de:46:52:
                    c9:3e:77:2e:ec:56:cc:6a:58:37:75:ff:23:61:ec:
                    a8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:2B:B8:2C:B6:98:19:69:B0:4F:7D:EC:05:96:80:EE:E8:17:95:17
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3133302e302f32332d3233203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:0b:86:32:cb:d5:9b:05:52:22:05:f0:17:02:50:f6:85:95:
         06:b8:93:ca:1a:63:db:10:f2:48:b7:1b:0c:c8:b0:98:1e:eb:
         02:15:29:f8:eb:a9:fa:9c:9d:e4:bf:3f:2a:db:0c:a8:70:20:
         f1:d5:6a:ae:57:29:00:46:71:79:7e:b4:fa:04:5b:89:09:7a:
         ac:6f:b5:33:00:2f:fb:50:6b:af:7f:7f:b5:ce:b1:60:4b:dd:
         1c:be:2b:9f:36:4b:b0:ac:16:2a:37:bb:95:be:19:51:36:4d:
         16:c5:c0:ad:71:5a:28:1f:fb:9a:ea:e4:fc:cc:35:63:e5:90:
         9c:75:05:61:d1:98:e1:7e:19:b8:4d:89:3a:c8:1e:e3:bd:a2:
         53:e4:cc:c2:b9:fd:60:25:44:1a:40:1e:dc:85:de:73:a5:d0:
         c7:8e:92:c4:e0:06:1a:24:6e:51:70:fd:33:bd:ec:87:04:66:
         0a:bb:fb:23:8d:54:77:f7:7a:69:69:bc:23:82:81:db:d0:e0:
         7e:6d:a0:be:18:42:df:b6:d8:44:7a:e5:c2:91:e2:09:4a:1e:
         ee:80:81:e9:87:ba:c1:d7:a4:bf:26:0e:f3:02:2d:30:dd:7c:
         04:c1:93:6b:48:14:17:27:ee:57:da:58:42:6a:8b:3b:ed:89:
         c3:b7:cd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 17:10:56 2026 by rpki-client