Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/3138362e3235302e34332e302f32342d3234203d3e20323632383035.roa
File:                     3138362e3235302e34332e302f32342d3234203d3e20323632383035.roa (raw, json)
Hash identifier:          X5z0Y6+69C0kZAkJupJut5V2Q1T6BbvOU9eezkh4D2A=
Subject key identifier:   E0:85:32:ED:87:EC:1E:CB:93:BA:1D:7F:10:5F:03:33:A0:03:8F:21
Certificate issuer:       /CN=F7ECED1FAE9A90D251231BC04051D1B557DF53FB
Certificate serial:       67A8D2C50E49C28246BC38AA0E6F7BCA00F43818
Authority key identifier: F7:EC:ED:1F:AE:9A:90:D2:51:23:1B:C0:40:51:D1:B5:57:DF:53:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7ECED1FAE9A90D251231BC04051D1B557DF53FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/3138362e3235302e34332e302f32342d3234203d3e20323632383035.roa
Signing time:             Thu 13 Aug 2026 19:37:29 +0000
ROA not before:           Thu 13 Aug 2026 19:32:29 +0000
ROA not after:            Thu 12 Aug 2027 19:37:29 +0000
asID:                     262805
IP address blocks:        186.250.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/F7ECED1FAE9A90D251231BC04051D1B557DF53FB.crl
                          rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/F7ECED1FAE9A90D251231BC04051D1B557DF53FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7ECED1FAE9A90D251231BC04051D1B557DF53FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 15:44:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:a8:d2:c5:0e:49:c2:82:46:bc:38:aa:0e:6f:7b:ca:00:f4:38:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7ECED1FAE9A90D251231BC04051D1B557DF53FB
        Validity
            Not Before: Aug 13 19:32:29 2026 GMT
            Not After : Aug 12 19:37:29 2027 GMT
        Subject: CN=E08532ED87EC1ECB93BA1D7F105F0333A0038F21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:74:d1:18:58:3b:e4:12:4a:e5:bf:10:f0:9c:
                    58:6c:86:bd:58:47:5d:3f:37:08:f8:1a:5e:3d:22:
                    ae:54:61:a6:04:3b:8b:23:09:f8:b5:d5:35:ef:e8:
                    bf:6d:d2:70:06:47:e6:82:24:dc:6f:a2:84:4f:b1:
                    fa:aa:b9:ed:65:65:be:77:e1:49:f3:63:8f:93:10:
                    22:e4:91:29:b8:95:a5:20:bc:44:ad:37:dc:d0:cd:
                    1a:a2:8d:33:47:23:a4:3a:b0:8f:3a:9f:49:6e:ff:
                    23:6a:92:89:ff:18:fc:7b:83:09:c6:0c:7e:77:17:
                    0d:39:f1:23:9c:0d:79:2a:07:8f:68:15:0f:6d:9f:
                    70:a1:8d:03:cc:9f:b8:21:02:7c:05:4c:6e:ab:58:
                    b9:95:82:fd:3b:87:9e:01:8c:c8:98:44:5b:b4:75:
                    3f:bd:01:d5:ae:a4:4d:bb:d3:52:fd:d8:fc:d6:90:
                    7b:24:a5:52:c6:05:7d:fc:76:ae:0b:5a:da:41:34:
                    33:b4:c6:fa:c2:54:47:a9:c4:4c:2a:e8:6e:92:0b:
                    17:72:7e:a0:8b:ac:52:fe:b2:bc:a2:13:a7:f1:dd:
                    fd:f9:8c:e5:0f:5a:72:eb:26:c9:03:eb:0a:af:72:
                    59:0b:58:ec:62:e2:ad:2d:61:d2:d2:16:90:39:57:
                    ba:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:85:32:ED:87:EC:1E:CB:93:BA:1D:7F:10:5F:03:33:A0:03:8F:21
            X509v3 Authority Key Identifier:
                keyid:F7:EC:ED:1F:AE:9A:90:D2:51:23:1B:C0:40:51:D1:B5:57:DF:53:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/F7ECED1FAE9A90D251231BC04051D1B557DF53FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7ECED1FAE9A90D251231BC04051D1B557DF53FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/3138362e3235302e34332e302f32342d3234203d3e20323632383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:c9:0b:5f:e2:24:96:e1:67:08:1c:f1:0e:85:34:c1:9f:14:
         3b:fe:2b:a5:6d:8c:de:c2:fd:1a:ce:6d:5e:e7:88:31:46:f7:
         25:57:a0:3b:30:55:cc:ab:56:2f:05:5c:33:65:51:85:7b:f4:
         32:4b:42:cf:a5:9f:df:21:fb:f2:1a:f4:94:32:af:52:00:dd:
         23:76:46:b6:79:71:9f:7b:89:a0:2e:a6:e9:fe:24:14:33:87:
         fd:d3:f6:5d:f9:8d:33:da:7f:87:bf:ee:25:02:93:5d:9b:4d:
         e2:90:96:3f:f9:cf:71:f4:a1:48:1c:53:af:9e:41:68:e6:ea:
         97:71:d1:f5:07:ad:f8:a9:a0:4c:ff:2e:5d:b1:9f:ad:9e:d1:
         a4:ce:8b:e9:fa:00:ee:f0:fe:44:fa:3b:c2:91:4a:2f:c0:f3:
         da:71:3e:04:a3:52:80:82:4d:ce:76:f2:74:e0:17:a3:be:a2:
         d8:e3:68:5d:78:31:de:e4:07:2a:70:0f:ac:e9:64:15:50:70:
         3a:df:5b:8d:af:3b:01:c9:08:73:4c:0c:44:b6:e9:c2:b2:54:
         28:ff:4b:c3:b0:cf:a4:ed:7c:62:0e:7c:32:11:0b:63:33:e8:
         b0:ba:c4:9a:fb:42:37:25:55:84:d6:df:8b:1a:a8:7b:c4:81:
         b9:bc:a6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 01:41:31 2026 by rpki-client