Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3134362e302f32332d3233203d3e20323632373239.roa
File:                     3138362e3139332e3134362e302f32332d3233203d3e20323632373239.roa (raw, json)
Hash identifier:          TDw1+/c3zMHx+33k+auOu4D6HzggOimbd8HiXxE6RdA=
Subject key identifier:   06:D7:7F:2B:A1:C4:81:CD:B9:91:F8:A3:37:88:A5:A7:3B:DD:F7:41
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       453233A3AA73786EF3744F9C65E48711D89C0D7C
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3134362e302f32332d3233203d3e20323632373239.roa
Signing time:             Mon 18 May 2026 15:07:59 +0000
ROA not before:           Mon 18 May 2026 15:02:59 +0000
ROA not after:            Mon 17 May 2027 15:07:59 +0000
asID:                     262729
IP address blocks:        186.193.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 15:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:32:33:a3:aa:73:78:6e:f3:74:4f:9c:65:e4:87:11:d8:9c:0d:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: May 18 15:02:59 2026 GMT
            Not After : May 17 15:07:59 2027 GMT
        Subject: CN=06D77F2BA1C481CDB991F8A33788A5A73BDDF741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ce:bf:c0:c0:3e:52:d6:8e:7f:7e:a3:0a:a3:
                    0a:6f:4a:14:04:19:52:3d:35:a1:37:ed:29:6f:02:
                    20:c1:af:ac:f5:76:96:45:d9:bc:0e:5c:16:7f:c2:
                    8c:c3:7d:74:09:d9:e2:b7:da:12:6e:27:02:5d:86:
                    89:82:83:cf:ac:96:d7:f0:c5:09:da:f3:9a:36:99:
                    b4:7f:12:94:44:bf:64:4a:47:7b:9b:a0:19:81:08:
                    95:93:a1:5a:52:e0:4f:b9:42:7e:3a:a2:4c:ea:af:
                    42:11:58:83:9a:c3:eb:2e:35:c8:28:5a:ed:e9:4e:
                    77:dc:2a:39:93:e1:17:c1:f2:79:b8:eb:fc:0c:d1:
                    d2:71:b3:ea:61:75:7b:cf:52:be:c0:7d:e8:5c:8c:
                    49:5a:4a:e7:54:a4:f9:4b:3e:a9:89:24:40:b8:9e:
                    17:9d:42:13:ec:22:ea:95:8a:be:1a:27:30:79:d3:
                    42:bd:3a:4f:42:d1:df:c3:50:a8:f5:60:cb:13:c2:
                    eb:3f:58:4c:2c:6b:92:09:d8:08:68:24:40:35:00:
                    91:25:64:e7:c7:73:0e:3d:1c:4f:00:a7:a9:d3:b2:
                    c2:3d:c7:0f:60:24:1a:98:84:e4:97:31:79:35:f1:
                    71:d9:83:a2:68:b2:93:a5:8b:c7:52:ad:0f:dc:1d:
                    f0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D7:7F:2B:A1:C4:81:CD:B9:91:F8:A3:37:88:A5:A7:3B:DD:F7:41
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3134362e302f32332d3233203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:0c:3b:fa:30:42:d4:dd:31:6b:05:f8:b2:a0:72:cc:d2:0e:
         42:5d:5e:e4:63:a9:47:ef:58:b7:71:f2:e0:bd:18:5f:6c:48:
         46:b0:c2:b9:d9:ea:7d:3c:d1:af:8d:fc:c5:cb:7d:97:ce:6d:
         64:ea:5a:c9:89:29:76:8a:b6:47:99:c8:79:a0:50:fa:8b:3e:
         bc:9d:9d:3c:da:a1:a9:9f:86:6e:95:70:da:12:0d:d8:c0:b1:
         f1:a4:df:22:b4:69:f6:97:82:a9:ce:55:8b:be:0a:4d:ec:9d:
         e7:17:fc:a3:7e:e9:a9:0c:17:0a:41:cf:a6:b0:fb:24:92:7a:
         71:a9:57:d8:04:38:55:25:5f:14:dd:34:5c:9e:8a:aa:88:66:
         ee:4a:06:bd:3c:3e:20:a4:7b:b1:9a:09:e0:8a:63:aa:1b:35:
         3b:4a:67:e0:b8:72:5b:09:4f:a2:db:fa:d5:f7:1a:1e:d9:2b:
         a6:c5:e5:ad:99:99:ab:86:d2:9d:ce:aa:f8:6c:52:d4:98:8f:
         d8:0d:bc:4f:e6:85:65:ac:35:dd:03:27:c5:b3:67:3c:8f:e2:
         16:ae:cc:ad:4e:6d:fc:7a:b3:03:b9:5c:37:24:74:14:25:a4:
         32:65:2b:29:db:eb:f3:4c:2b:c1:20:81:85:7c:aa:70:7b:b9:
         b4:b2:25:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 17:10:52 2026 by rpki-client