Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3138362e3139322e3234302e302f32302d3332203d3e203533313338.roa
File:                     3138362e3139322e3234302e302f32302d3332203d3e203533313338.roa (raw, json)
Hash identifier:          YWKrnbYgIeVW4vKjtQ4mkmrxaiS2jUAfjNZDr6nbfBk=
Subject key identifier:   14:1F:C8:49:69:1A:F1:5F:1C:B9:29:E8:84:DF:8F:BE:5A:F4:94:32
Certificate issuer:       /CN=3917E4BBB4D1FD99400ED98C98A323ADAAB38977
Certificate serial:       51CFAA070930B7CE1E9519035E3C1A32E5E784E3
Authority key identifier: 39:17:E4:BB:B4:D1:FD:99:40:0E:D9:8C:98:A3:23:AD:AA:B3:89:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3138362e3139322e3234302e302f32302d3332203d3e203533313338.roa
Signing time:             Fri 21 Aug 2026 13:58:40 +0000
ROA not before:           Fri 21 Aug 2026 13:53:40 +0000
ROA not after:            Fri 20 Aug 2027 13:58:40 +0000
asID:                     53138
IP address blocks:        186.192.240.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.crl
                          rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 23:52:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:cf:aa:07:09:30:b7:ce:1e:95:19:03:5e:3c:1a:32:e5:e7:84:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3917E4BBB4D1FD99400ED98C98A323ADAAB38977
        Validity
            Not Before: Aug 21 13:53:40 2026 GMT
            Not After : Aug 20 13:58:40 2027 GMT
        Subject: CN=141FC849691AF15F1CB929E884DF8FBE5AF49432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:24:da:69:96:e8:17:79:b4:b3:a2:20:e8:74:
                    9c:92:23:e2:9c:bc:f3:29:ae:f6:08:5b:c1:aa:6b:
                    6a:3c:98:ee:6a:05:dd:44:3a:cd:cb:e1:89:e1:6a:
                    27:2b:31:00:52:0b:d5:66:4f:04:36:9c:88:7b:6c:
                    38:84:a1:5f:a9:2b:d3:9b:77:e0:73:a3:d1:4a:36:
                    2b:99:a9:0d:ca:ac:29:e5:98:6f:f2:af:8f:49:d6:
                    42:94:55:04:37:86:a7:f2:0c:7d:7c:e3:c3:32:e0:
                    09:08:2e:53:65:93:88:14:04:ed:0e:52:a5:94:94:
                    4a:63:a9:17:8f:e7:b7:79:72:dd:25:8a:f7:c9:2b:
                    71:86:42:42:c4:c9:64:c9:17:56:f4:d2:3a:31:0d:
                    fd:08:eb:f3:a7:81:a7:32:ed:c2:6a:cd:ee:e8:6a:
                    7c:47:09:be:a2:a3:d2:1d:61:ac:ef:a0:cc:26:14:
                    d1:b3:79:d8:7f:1f:2d:18:48:6e:90:d4:06:64:dc:
                    9b:89:51:d4:9c:39:81:d7:19:1e:58:c3:a8:d5:84:
                    4b:89:86:62:c9:61:9d:de:59:39:d4:7e:4a:51:fb:
                    d4:ea:ff:37:9f:d1:f1:6c:fa:f9:0b:02:fc:47:97:
                    2b:05:bf:8a:9c:cf:45:93:20:28:1a:1c:15:3d:7a:
                    84:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:1F:C8:49:69:1A:F1:5F:1C:B9:29:E8:84:DF:8F:BE:5A:F4:94:32
            X509v3 Authority Key Identifier:
                keyid:39:17:E4:BB:B4:D1:FD:99:40:0E:D9:8C:98:A3:23:AD:AA:B3:89:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3138362e3139322e3234302e302f32302d3332203d3e203533313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.192.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         85:42:e8:dd:42:20:28:68:aa:a5:32:06:d7:02:df:c0:85:34:
         4f:7d:f8:35:1c:2c:ac:83:7c:c3:bf:05:45:d3:91:d5:a9:68:
         c7:fc:4a:63:89:0b:53:24:87:3b:72:7b:c2:6c:da:78:b2:d2:
         a8:dd:64:9c:63:d2:10:6f:b1:c2:a3:0b:9f:bf:7b:73:0c:8c:
         52:7a:06:96:bb:c7:49:a9:df:39:43:28:69:bf:a5:62:9d:b1:
         c9:28:14:1d:5f:f2:13:37:ab:bf:9f:f6:62:c1:c3:0e:3b:15:
         c9:b5:25:80:d6:c4:e0:c4:a2:47:92:f9:c5:ab:51:c8:bc:09:
         69:52:90:99:35:40:3f:ee:77:9c:c9:30:32:d1:fc:1d:32:01:
         03:2d:41:8a:e5:96:38:66:e4:c4:54:c9:da:61:46:3e:7b:9c:
         2c:4f:ba:19:33:31:cc:4d:73:dd:48:45:60:91:69:02:e3:43:
         81:fc:10:5f:7e:4c:93:a2:29:fb:e7:73:7a:f1:c5:63:c2:9c:
         0e:52:da:b5:19:b8:c9:73:4d:7f:00:c8:3c:34:c0:8e:42:33:
         5d:91:57:5d:76:3a:5f:2f:2a:e1:70:51:3e:39:f1:09:1a:f4:
         d6:0b:2f:4e:67:3e:71:9d:1a:88:62:2b:30:21:c4:91:42:b6:
         10:58:50:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 14:26:48 2026 by rpki-client