Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DUGFHJZPq4WQjFhdddbDZmzLs39b6Qkkbz2ruT56VKtX/0/3138362e3231392e38382e302f32322d3232203d3e203532383838.roa
File:                     3138362e3231392e38382e302f32322d3232203d3e203532383838.roa (raw, json)
Hash identifier:          MSjuzuckK3HjPapJd/HjZF26AyejLVWYIBFdLDRzPX4=
Subject key identifier:   71:27:DC:11:D2:0F:52:B9:11:4D:BF:50:6D:C8:1A:ED:23:22:E7:99
Certificate issuer:       /CN=55D70B4F48CAC50C41471718B18C78D87F0E9E2B
Certificate serial:       6EBAFEC94C1A8CB197FA70FBAEBF552B61D85EE8
Authority key identifier: 55:D7:0B:4F:48:CA:C5:0C:41:47:17:18:B1:8C:78:D8:7F:0E:9E:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55D70B4F48CAC50C41471718B18C78D87F0E9E2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DUGFHJZPq4WQjFhdddbDZmzLs39b6Qkkbz2ruT56VKtX/0/3138362e3231392e38382e302f32322d3232203d3e203532383838.roa
Signing time:             Wed 15 Jul 2026 19:56:00 +0000
ROA not before:           Wed 15 Jul 2026 19:51:00 +0000
ROA not after:            Wed 14 Jul 2027 19:56:00 +0000
asID:                     52888
IP address blocks:        186.219.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DUGFHJZPq4WQjFhdddbDZmzLs39b6Qkkbz2ruT56VKtX/0/55D70B4F48CAC50C41471718B18C78D87F0E9E2B.crl
                          rsync://rpki-repo.registro.br/repo/DUGFHJZPq4WQjFhdddbDZmzLs39b6Qkkbz2ruT56VKtX/0/55D70B4F48CAC50C41471718B18C78D87F0E9E2B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55D70B4F48CAC50C41471718B18C78D87F0E9E2B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Jul 2026 02:35:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ba:fe:c9:4c:1a:8c:b1:97:fa:70:fb:ae:bf:55:2b:61:d8:5e:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55D70B4F48CAC50C41471718B18C78D87F0E9E2B
        Validity
            Not Before: Jul 15 19:51:00 2026 GMT
            Not After : Jul 14 19:56:00 2027 GMT
        Subject: CN=7127DC11D20F52B9114DBF506DC81AED2322E799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:83:aa:c8:23:f9:38:db:64:b6:fc:e6:71:34:
                    2e:5c:30:45:d5:36:19:2a:b5:ae:e6:5c:42:1e:d7:
                    15:24:9f:7d:b9:4c:94:1d:66:34:69:20:0e:c5:53:
                    ff:2c:59:7c:b7:24:0c:69:93:e3:50:85:6b:ca:17:
                    96:d8:42:75:24:a5:88:8e:f6:8f:8e:71:a3:6c:db:
                    35:b9:15:8c:d2:c5:27:56:25:d4:5c:51:65:9e:91:
                    8b:f2:36:e5:c7:15:d8:b8:80:00:8d:ac:5c:3a:e3:
                    e4:e5:c7:7a:a2:79:c2:1c:4f:c3:92:8c:66:97:b7:
                    e4:08:27:ff:35:5e:0b:a3:19:22:13:db:0b:f1:aa:
                    dc:b2:c1:75:bb:e6:38:cb:d8:d3:cf:bf:dc:be:c3:
                    35:b5:30:7e:83:31:24:9f:ff:44:fb:82:a7:9b:81:
                    93:50:02:cf:74:5e:68:57:d7:c8:96:00:06:ee:4a:
                    5c:53:d3:c6:69:ba:00:ab:83:ba:e8:a5:9a:8d:36:
                    b6:14:03:5f:ab:d4:ad:b4:7f:aa:31:a3:fd:98:85:
                    c3:37:c8:5a:d6:0a:2b:21:ad:56:94:62:f5:57:9c:
                    ca:4b:04:4f:b7:63:b6:fa:27:8a:79:31:e5:4d:f8:
                    aa:c9:e6:ec:da:f7:8f:bd:ec:9e:64:b7:cf:93:ab:
                    10:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:27:DC:11:D2:0F:52:B9:11:4D:BF:50:6D:C8:1A:ED:23:22:E7:99
            X509v3 Authority Key Identifier:
                keyid:55:D7:0B:4F:48:CA:C5:0C:41:47:17:18:B1:8C:78:D8:7F:0E:9E:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DUGFHJZPq4WQjFhdddbDZmzLs39b6Qkkbz2ruT56VKtX/0/55D70B4F48CAC50C41471718B18C78D87F0E9E2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55D70B4F48CAC50C41471718B18C78D87F0E9E2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DUGFHJZPq4WQjFhdddbDZmzLs39b6Qkkbz2ruT56VKtX/0/3138362e3231392e38382e302f32322d3232203d3e203532383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:ed:98:7a:3b:cf:91:5c:3b:d0:42:40:97:fd:f7:c5:c2:01:
         6f:da:ec:72:95:fb:74:f2:0d:cd:e0:21:45:e9:cd:8b:4e:89:
         3b:63:47:2e:5d:cd:d8:da:cd:c7:8e:b4:37:87:2c:97:15:3c:
         83:a4:ed:4c:9b:aa:86:43:f9:a8:c9:82:4c:02:e2:76:ba:a6:
         ca:ce:0b:5c:33:7f:b7:16:55:c3:a6:f6:bb:41:9a:98:da:0b:
         79:4b:63:fb:d8:78:0d:b4:88:6a:d3:ab:79:e9:ea:1c:44:27:
         91:ef:3a:c3:68:79:af:0e:e9:1f:47:f9:13:0b:bc:e5:86:85:
         2f:6d:19:47:01:0d:05:61:8c:9a:81:8d:79:4b:c6:e7:20:25:
         37:5b:66:e0:b3:e9:9d:6a:36:2c:58:87:92:b4:b0:cf:b3:8b:
         42:a7:99:9e:27:65:7a:5f:10:09:ff:f4:97:24:f1:ba:ee:dd:
         c9:78:2f:fa:0b:cb:32:87:e7:44:e1:63:ee:33:ea:aa:10:88:
         8a:a0:27:d3:44:29:4c:07:b0:8d:b0:c3:c2:cd:2a:2a:8f:8b:
         cf:cd:2a:9b:53:0c:27:8c:7e:0e:25:fc:54:dc:2d:c6:49:62:
         3c:67:e1:89:64:a9:4b:f1:1f:99:ca:24:91:dd:c0:7e:52:9c:
         04:ce:f3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:43:37 2026 by rpki-client