Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DUGFHJZPq4WQjFhdddbDZmzLs39b6Qkkbz2ruT56VKtX/0/3138362e3231392e39322e302f32322d3232203d3e203532383838.roa
File:                     3138362e3231392e39322e302f32322d3232203d3e203532383838.roa (raw, json)
Hash identifier:          kI47RNdUtrPYOV0Jg2m87rLVJlgbFY048yNY652fJqM=
Subject key identifier:   F0:D0:48:CF:55:B2:45:26:EB:37:43:F7:2A:66:63:7E:FB:EB:2B:17
Certificate issuer:       /CN=55D70B4F48CAC50C41471718B18C78D87F0E9E2B
Certificate serial:       3166FAB6ACA4AA0FE4D306800949AB98755860F6
Authority key identifier: 55:D7:0B:4F:48:CA:C5:0C:41:47:17:18:B1:8C:78:D8:7F:0E:9E:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55D70B4F48CAC50C41471718B18C78D87F0E9E2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DUGFHJZPq4WQjFhdddbDZmzLs39b6Qkkbz2ruT56VKtX/0/3138362e3231392e39322e302f32322d3232203d3e203532383838.roa
Signing time:             Wed 15 Jul 2026 19:56:16 +0000
ROA not before:           Wed 15 Jul 2026 19:51:16 +0000
ROA not after:            Wed 14 Jul 2027 19:56:16 +0000
asID:                     52888
IP address blocks:        186.219.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DUGFHJZPq4WQjFhdddbDZmzLs39b6Qkkbz2ruT56VKtX/0/55D70B4F48CAC50C41471718B18C78D87F0E9E2B.crl
                          rsync://rpki-repo.registro.br/repo/DUGFHJZPq4WQjFhdddbDZmzLs39b6Qkkbz2ruT56VKtX/0/55D70B4F48CAC50C41471718B18C78D87F0E9E2B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55D70B4F48CAC50C41471718B18C78D87F0E9E2B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Jul 2026 02:35:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:66:fa:b6:ac:a4:aa:0f:e4:d3:06:80:09:49:ab:98:75:58:60:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55D70B4F48CAC50C41471718B18C78D87F0E9E2B
        Validity
            Not Before: Jul 15 19:51:16 2026 GMT
            Not After : Jul 14 19:56:16 2027 GMT
        Subject: CN=F0D048CF55B24526EB3743F72A66637EFBEB2B17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d6:14:60:69:bc:b0:11:ff:a8:68:33:a2:63:
                    31:0e:a7:d2:36:06:9b:36:ed:b3:df:ec:f4:aa:4f:
                    ef:45:ac:2e:d9:5e:a1:d4:f0:92:5f:e3:7d:44:8b:
                    95:fa:77:57:93:92:d0:6c:08:22:fb:3a:20:2e:93:
                    38:8b:56:b8:0a:a3:ff:41:3e:6d:ad:b1:f4:8b:e6:
                    90:70:ac:8c:24:39:62:a0:60:65:8d:06:9c:b4:97:
                    a3:d7:41:8b:dd:d5:18:4d:81:7c:83:6b:b8:0e:0b:
                    f4:82:23:c7:d5:43:d2:28:1b:0c:02:22:1e:5a:0c:
                    6a:43:f5:ff:88:89:61:25:61:d9:f1:73:fb:57:4d:
                    6b:37:aa:51:54:73:e0:cf:b9:59:67:b1:7c:fb:ce:
                    19:c6:9a:b0:9f:22:26:99:c5:b9:05:22:07:c8:b2:
                    46:2f:3e:36:49:ca:27:ad:c9:09:f5:9c:9e:0f:f8:
                    0b:5d:e1:7c:3a:69:ca:e5:d7:dd:12:21:5b:4a:be:
                    b9:39:f2:ee:86:b2:a1:63:2d:6e:77:1a:c2:86:8c:
                    2e:b6:1e:b5:98:28:e0:e5:a7:0f:e0:01:a3:d5:e0:
                    9a:4d:1d:88:e4:1d:ab:36:ec:a5:8e:f9:bc:8c:4e:
                    87:bc:81:81:6d:d7:be:2a:44:ab:96:29:80:8b:8b:
                    dd:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D0:48:CF:55:B2:45:26:EB:37:43:F7:2A:66:63:7E:FB:EB:2B:17
            X509v3 Authority Key Identifier:
                keyid:55:D7:0B:4F:48:CA:C5:0C:41:47:17:18:B1:8C:78:D8:7F:0E:9E:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DUGFHJZPq4WQjFhdddbDZmzLs39b6Qkkbz2ruT56VKtX/0/55D70B4F48CAC50C41471718B18C78D87F0E9E2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55D70B4F48CAC50C41471718B18C78D87F0E9E2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DUGFHJZPq4WQjFhdddbDZmzLs39b6Qkkbz2ruT56VKtX/0/3138362e3231392e39322e302f32322d3232203d3e203532383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:e6:21:c8:e2:21:d6:fa:6d:b0:63:28:30:3d:0e:b0:17:7f:
         af:90:78:e5:ef:86:2e:f4:7e:14:5c:90:00:ee:ed:92:e8:5d:
         21:71:f9:a1:6d:04:ba:65:c9:f1:0b:26:be:14:ea:1c:0a:77:
         29:64:0f:c6:10:e4:b3:ad:e5:60:e3:0d:00:5a:2e:f4:da:e4:
         02:69:b5:1e:fc:e7:73:26:34:28:45:ec:45:62:eb:77:09:11:
         ff:34:11:07:5c:32:56:09:f6:d9:79:e7:f9:5b:25:3f:b6:7d:
         46:d3:e8:cd:46:57:8c:63:43:25:eb:c2:e9:2a:3e:4e:d2:3c:
         dc:b4:24:f0:aa:7e:fb:64:25:ef:81:c1:a6:31:93:df:48:dd:
         32:5b:f7:ce:aa:40:a8:ab:3e:1b:33:ca:98:34:e1:cc:2d:90:
         3d:9d:17:39:ee:9e:c1:1a:f9:df:c9:80:01:9e:bc:3e:57:fc:
         b9:1a:2f:b9:7c:4b:15:d8:da:e3:a6:44:25:2e:54:eb:87:b3:
         ee:58:6e:8b:58:09:31:25:1d:b8:6b:83:03:d3:69:d0:d2:15:
         95:ae:57:a5:d0:8f:6a:6a:2a:3c:38:af:d8:7d:27:d3:e6:f4:
         a0:c1:e9:09:c0:c4:4b:90:5e:93:5a:6b:95:fb:ec:dd:73:e8:
         af:54:c8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:43:36 2026 by rpki-client