Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3135342e302f32332d3233203d3e20323632373239.roa
File:                     3138362e3139332e3135342e302f32332d3233203d3e20323632373239.roa (raw, json)
Hash identifier:          nT+IC/pqx2MnN6RgbeJniFm3aE/hqMXQc0IoEs30Bo4=
Subject key identifier:   1F:99:2F:B1:A5:E6:5E:E8:7F:A3:74:2E:AF:AF:22:4D:50:AE:00:1D
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       4E33C524BBAF9893C228CE74E6E6C76EDB4C400B
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3135342e302f32332d3233203d3e20323632373239.roa
Signing time:             Mon 18 May 2026 15:07:58 +0000
ROA not before:           Mon 18 May 2026 15:02:58 +0000
ROA not after:            Mon 17 May 2027 15:07:58 +0000
asID:                     262729
IP address blocks:        186.193.154.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 15:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:33:c5:24:bb:af:98:93:c2:28:ce:74:e6:e6:c7:6e:db:4c:40:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: May 18 15:02:58 2026 GMT
            Not After : May 17 15:07:58 2027 GMT
        Subject: CN=1F992FB1A5E65EE87FA3742EAFAF224D50AE001D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:82:a9:c2:42:bf:c2:20:6e:7d:f4:f9:3b:99:
                    39:28:91:fb:d4:b2:1b:68:62:f5:f0:6a:8b:e4:76:
                    3a:25:63:8c:36:d7:e4:25:53:d0:d2:a3:18:a2:75:
                    99:c0:31:23:f2:3a:b7:d6:eb:03:b0:ea:cd:6b:8e:
                    84:6a:23:da:88:ba:8c:c8:5f:00:72:a9:d8:cd:87:
                    19:57:c7:b4:64:24:1d:22:3b:ed:e5:9d:9a:86:f3:
                    9c:53:30:98:12:25:5c:32:be:73:0a:10:04:cc:5a:
                    a8:8c:7b:a8:bf:8a:63:d2:bb:c1:49:1d:74:87:ab:
                    f1:01:89:b2:0c:0a:f7:90:b5:79:ec:ff:98:08:2c:
                    13:fe:ea:9b:69:52:ea:1a:10:a4:bc:78:38:e0:a1:
                    0c:68:c2:56:55:47:d2:4a:16:d0:c0:db:cb:53:cf:
                    f1:8e:e8:31:c1:64:8c:99:12:59:f8:13:5c:dc:58:
                    6f:eb:53:57:89:e1:ce:6c:bd:c0:52:bf:5e:40:d7:
                    7b:98:d1:86:15:e7:61:f4:4b:c7:19:6c:da:20:6f:
                    2b:c7:3d:48:cd:1c:23:6d:fd:80:81:87:3b:67:35:
                    e3:c1:fd:d1:44:6d:fd:f5:58:06:59:b2:68:67:d2:
                    75:94:62:a6:01:fa:84:da:f6:80:6f:28:41:94:c3:
                    53:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:99:2F:B1:A5:E6:5E:E8:7F:A3:74:2E:AF:AF:22:4D:50:AE:00:1D
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3135342e302f32332d3233203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:07:38:34:b6:80:77:23:f8:a0:5b:63:56:6d:c1:84:61:16:
         93:90:bc:48:51:77:dc:01:9a:eb:1c:7d:2a:f7:99:3e:48:29:
         47:0d:10:4e:48:6c:08:a6:29:81:b9:7a:fe:26:fa:67:7d:79:
         92:6a:bf:7b:8e:66:d2:a7:be:a4:01:42:f5:34:0c:5a:f8:2d:
         e9:f1:25:4f:44:09:68:46:73:12:dc:21:3f:1b:69:7e:bf:e7:
         5e:8d:6d:6f:8c:d6:3a:28:cc:52:a2:d9:42:2e:a2:e3:f5:55:
         fe:67:e0:93:11:d6:a4:82:fe:b5:b0:a1:32:30:d8:b1:83:5a:
         24:63:71:ef:e4:ab:df:70:eb:1c:33:07:6a:c7:35:01:08:b1:
         78:02:69:3d:50:37:3f:4e:00:a9:82:0e:8a:79:c7:bf:33:bc:
         2e:ea:41:3f:5f:29:8b:64:42:5b:46:d4:7c:e8:98:f1:58:af:
         2d:41:fe:86:36:4f:c0:f8:b0:43:94:94:a9:d5:45:dd:64:67:
         86:45:4c:fe:6f:2f:a1:6a:7f:27:3f:53:cb:cd:3a:7d:92:ed:
         da:1e:b7:e2:c4:19:55:2e:dd:f7:1b:f4:e5:52:a3:e8:64:34:
         d3:ff:63:94:fc:4b:5e:61:2d:5e:42:d1:30:4c:62:ee:b9:03:
         18:3d:7d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 17:10:57 2026 by rpki-client