Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DUGFHJZPq4WQjFhdddbDZmzLs39b6Qkkbz2ruT56VKtX/0/3138362e3231392e38382e302f32312d3231203d3e203532383838.roa
File:                     3138362e3231392e38382e302f32312d3231203d3e203532383838.roa (raw, json)
Hash identifier:          8L0m4Wpov6fsjZFJssj736tlcsjnRHSu+ad7EGo0GC8=
Subject key identifier:   19:AE:9B:CF:00:1A:3C:E8:9C:ED:D1:51:66:6F:BF:AE:B5:23:FD:3D
Certificate issuer:       /CN=55D70B4F48CAC50C41471718B18C78D87F0E9E2B
Certificate serial:       089DF47349F6EECCBE1517284F64B3CE986AEC80
Authority key identifier: 55:D7:0B:4F:48:CA:C5:0C:41:47:17:18:B1:8C:78:D8:7F:0E:9E:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55D70B4F48CAC50C41471718B18C78D87F0E9E2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DUGFHJZPq4WQjFhdddbDZmzLs39b6Qkkbz2ruT56VKtX/0/3138362e3231392e38382e302f32312d3231203d3e203532383838.roa
Signing time:             Wed 15 Jul 2026 19:55:43 +0000
ROA not before:           Wed 15 Jul 2026 19:50:43 +0000
ROA not after:            Wed 14 Jul 2027 19:55:43 +0000
asID:                     52888
IP address blocks:        186.219.88.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DUGFHJZPq4WQjFhdddbDZmzLs39b6Qkkbz2ruT56VKtX/0/55D70B4F48CAC50C41471718B18C78D87F0E9E2B.crl
                          rsync://rpki-repo.registro.br/repo/DUGFHJZPq4WQjFhdddbDZmzLs39b6Qkkbz2ruT56VKtX/0/55D70B4F48CAC50C41471718B18C78D87F0E9E2B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55D70B4F48CAC50C41471718B18C78D87F0E9E2B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Jul 2026 02:35:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:9d:f4:73:49:f6:ee:cc:be:15:17:28:4f:64:b3:ce:98:6a:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55D70B4F48CAC50C41471718B18C78D87F0E9E2B
        Validity
            Not Before: Jul 15 19:50:43 2026 GMT
            Not After : Jul 14 19:55:43 2027 GMT
        Subject: CN=19AE9BCF001A3CE89CEDD151666FBFAEB523FD3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:81:56:4e:ba:47:c5:6c:4d:60:cc:a1:64:68:
                    7e:03:5f:39:ec:35:4f:75:71:65:52:f6:db:cd:98:
                    11:b2:dd:40:48:7b:ce:f8:2c:52:f9:12:13:e0:bb:
                    32:51:86:55:27:56:4d:c4:28:8e:93:45:2d:65:69:
                    69:be:95:ba:b1:7b:09:6c:84:38:bb:ea:dc:ce:09:
                    58:f9:4f:c1:df:73:9d:97:87:d2:08:31:f0:8a:9a:
                    9a:7a:d8:17:a8:84:7f:8e:b7:87:53:75:a8:0a:93:
                    49:79:18:b8:6e:3e:eb:e4:7f:78:34:77:2f:8a:37:
                    33:ed:8a:c6:b2:3f:56:5d:4a:3e:00:10:1c:a8:86:
                    92:4c:b0:2d:58:1d:8d:89:4e:46:ee:ed:6f:60:ac:
                    b1:73:9f:9c:3b:c9:4b:84:e7:ed:6e:dd:48:42:f4:
                    6b:44:d2:0d:5c:a8:40:f4:88:6b:4c:bf:20:0b:e1:
                    3a:20:98:fc:01:56:0c:e1:bd:ca:99:e6:3a:23:82:
                    5b:f6:f5:48:1d:e7:a3:40:90:90:34:6b:fe:9a:21:
                    9b:dc:af:af:9d:3d:3d:d5:6e:86:0a:f9:67:5b:90:
                    9a:75:76:c7:e6:21:a2:a5:15:84:51:65:aa:d4:1e:
                    ef:d9:f7:c4:0a:00:bd:e5:59:db:cb:6f:00:b9:62:
                    ee:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:AE:9B:CF:00:1A:3C:E8:9C:ED:D1:51:66:6F:BF:AE:B5:23:FD:3D
            X509v3 Authority Key Identifier:
                keyid:55:D7:0B:4F:48:CA:C5:0C:41:47:17:18:B1:8C:78:D8:7F:0E:9E:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DUGFHJZPq4WQjFhdddbDZmzLs39b6Qkkbz2ruT56VKtX/0/55D70B4F48CAC50C41471718B18C78D87F0E9E2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55D70B4F48CAC50C41471718B18C78D87F0E9E2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DUGFHJZPq4WQjFhdddbDZmzLs39b6Qkkbz2ruT56VKtX/0/3138362e3231392e38382e302f32312d3231203d3e203532383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         23:7f:ec:a9:45:31:20:15:49:3b:32:f0:8a:c7:10:e4:34:a5:
         a4:b0:6e:96:0a:61:14:e0:42:b0:0b:48:f7:68:b3:2e:c6:f7:
         9f:91:94:d0:3a:5b:f4:75:7c:57:0e:30:ea:90:5d:a6:1d:87:
         a6:bc:cd:a4:4d:1f:e2:ae:6b:5e:e4:82:d0:6f:ba:14:1f:88:
         5c:e3:e7:ab:58:e6:7a:eb:bc:a8:51:82:51:d6:12:0e:5e:d8:
         ec:12:18:56:d1:85:79:89:3e:6d:c8:53:83:04:f7:fb:f9:93:
         51:4b:b7:98:30:99:52:b2:b2:33:d7:46:c9:b6:ea:fb:c0:82:
         a5:e1:d4:65:43:48:d6:eb:fd:ef:d8:d5:57:7c:47:11:04:2d:
         9c:68:42:4e:be:66:16:8f:14:3a:54:af:1d:34:1e:28:9b:f3:
         21:27:0b:e2:ea:92:c4:8b:35:5c:2b:b4:1f:ac:4a:aa:7a:4b:
         4c:45:91:be:ee:5e:3d:4b:48:d8:1a:79:38:af:4c:68:ae:af:
         32:eb:7e:0b:6d:9b:ad:e1:0f:91:04:ab:13:14:d6:dc:5b:e2:
         df:4e:28:30:d0:39:ae:ba:45:fa:ca:45:de:8d:31:ad:f3:3e:
         7e:76:76:bf:33:1c:c6:af:ad:ae:90:2b:e2:ab:a8:d1:16:e5:
         3c:ec:3a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:43:37 2026 by rpki-client