Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1EeHiNzW5SY9UPKcLqebstJD2RZU8NeN4ZGUyYrsvKc/0/3138362e3235302e3233362e302f32322d3332203d3e20323632383231.roa
File:                     3138362e3235302e3233362e302f32322d3332203d3e20323632383231.roa (raw, json)
Hash identifier:          sOhaZgD0aumMqyyRi8hTXOlN5BFW5X6lp+9dR1SBziw=
Subject key identifier:   2B:3A:EE:01:62:B5:9E:11:C0:2F:8F:8B:E0:8D:39:B6:E8:9B:B9:16
Certificate issuer:       /CN=EB8181693A9CCB6DED5E600379193536AEE60C32
Certificate serial:       32B43F41F7E68E5FC07F3D6F1CE3D53D8F4974CC
Authority key identifier: EB:81:81:69:3A:9C:CB:6D:ED:5E:60:03:79:19:35:36:AE:E6:0C:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB8181693A9CCB6DED5E600379193536AEE60C32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1EeHiNzW5SY9UPKcLqebstJD2RZU8NeN4ZGUyYrsvKc/0/3138362e3235302e3233362e302f32322d3332203d3e20323632383231.roa
Signing time:             Wed 01 Apr 2026 13:58:47 +0000
ROA not before:           Wed 01 Apr 2026 13:53:47 +0000
ROA not after:            Wed 31 Mar 2027 13:58:47 +0000
asID:                     262821
IP address blocks:        186.250.236.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E1EeHiNzW5SY9UPKcLqebstJD2RZU8NeN4ZGUyYrsvKc/0/EB8181693A9CCB6DED5E600379193536AEE60C32.crl
                          rsync://rpki-repo.registro.br/repo/E1EeHiNzW5SY9UPKcLqebstJD2RZU8NeN4ZGUyYrsvKc/0/EB8181693A9CCB6DED5E600379193536AEE60C32.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB8181693A9CCB6DED5E600379193536AEE60C32.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 19:03:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:b4:3f:41:f7:e6:8e:5f:c0:7f:3d:6f:1c:e3:d5:3d:8f:49:74:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB8181693A9CCB6DED5E600379193536AEE60C32
        Validity
            Not Before: Apr  1 13:53:47 2026 GMT
            Not After : Mar 31 13:58:47 2027 GMT
        Subject: CN=2B3AEE0162B59E11C02F8F8BE08D39B6E89BB916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:af:ef:39:ac:ba:f0:99:c8:39:82:c2:6c:49:
                    b3:01:37:64:27:83:43:73:f4:b7:9c:d0:56:22:f3:
                    60:43:d1:eb:14:f4:68:88:4c:4b:12:7b:bb:ae:6f:
                    a8:53:32:3e:8d:75:27:a1:3e:6e:c3:b9:03:73:ae:
                    e1:2b:42:b3:7a:3e:fc:81:5f:63:b7:a9:de:03:0a:
                    f3:d8:94:51:b0:97:a1:25:0f:8b:17:80:6e:7c:c5:
                    1f:61:9b:81:e1:6d:b4:f5:96:ef:5e:b3:cb:14:9a:
                    b6:4a:f9:bf:67:2c:15:22:73:46:f7:3a:4d:95:cb:
                    aa:17:3a:8c:69:6c:b2:49:06:f8:23:c0:bc:35:7e:
                    00:8d:13:ec:5e:97:42:f7:c4:24:ff:95:6d:17:cd:
                    32:b0:81:69:b5:5c:f1:0d:95:20:32:f2:0f:5d:9d:
                    a9:21:0d:41:a9:5e:e6:68:bc:91:eb:b4:e6:1b:c5:
                    7f:de:2a:97:55:c2:7d:9d:1c:d6:36:b7:47:e6:1c:
                    83:3f:e9:30:2a:7a:10:e6:87:fe:25:ef:5f:86:7b:
                    aa:d2:a6:c3:71:14:b7:fb:02:1d:fc:a2:c9:3f:34:
                    21:c9:f1:dd:e1:8d:0e:da:25:07:ac:0e:de:f6:e0:
                    34:b9:b2:56:9c:c0:ee:7a:1f:30:f4:e8:dd:79:d2:
                    4b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:3A:EE:01:62:B5:9E:11:C0:2F:8F:8B:E0:8D:39:B6:E8:9B:B9:16
            X509v3 Authority Key Identifier:
                keyid:EB:81:81:69:3A:9C:CB:6D:ED:5E:60:03:79:19:35:36:AE:E6:0C:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1EeHiNzW5SY9UPKcLqebstJD2RZU8NeN4ZGUyYrsvKc/0/EB8181693A9CCB6DED5E600379193536AEE60C32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB8181693A9CCB6DED5E600379193536AEE60C32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1EeHiNzW5SY9UPKcLqebstJD2RZU8NeN4ZGUyYrsvKc/0/3138362e3235302e3233362e302f32322d3332203d3e20323632383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:27:9e:29:a9:ca:ec:2a:40:c2:ce:36:96:33:e1:ca:77:1c:
         3a:7c:46:de:9e:6a:eb:d1:a5:32:f2:52:6c:eb:98:40:39:5b:
         eb:fa:19:e5:d4:f4:70:94:c4:bd:df:99:20:85:32:d9:f2:f2:
         6f:88:dd:9d:db:ba:c0:ae:d0:e8:86:aa:b3:17:32:1e:31:be:
         db:32:14:36:d9:b8:59:c6:1b:92:97:5f:48:3d:b7:0e:49:98:
         e1:9d:39:59:b4:5a:f9:d9:b3:6b:9b:97:f9:50:3a:c0:0f:f4:
         60:72:cc:37:43:8c:c1:d9:13:bb:95:da:8a:aa:27:7b:e0:e9:
         85:b9:8b:ea:7f:ad:5f:71:b6:04:1d:d9:39:f1:e6:56:43:8c:
         80:96:2e:97:42:4e:2f:7f:18:d5:bf:2d:30:fd:05:24:4a:23:
         d9:59:57:26:a7:a8:7b:66:e7:7c:db:82:f0:d6:2e:a7:dd:10:
         2b:99:3f:fc:d5:cb:43:db:c0:1f:91:4b:47:d4:8d:da:69:7d:
         e0:8c:b7:56:49:5e:50:e6:69:75:e0:e1:7d:16:e4:1f:73:59:
         a3:e7:17:c8:96:7d:84:b0:c6:0b:c4:95:d4:db:c4:97:58:ed:
         97:7e:b5:55:d5:56:d4:60:96:91:99:f2:20:db:06:a9:45:1b:
         cf:de:54:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 21:40:04 2026 by rpki-client