Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/1/3138372e3130392e3139382e302f32342d3234203d3e20323632333632.roa
File:                     3138372e3130392e3139382e302f32342d3234203d3e20323632333632.roa (raw, json)
Hash identifier:          WG966mD12wIpSWN8CGMAVfaSRwZZp+9ipHjtYUFvPQI=
Subject key identifier:   CC:7B:A8:C0:55:FB:AC:DC:DF:9C:D6:84:9E:D1:53:BD:FE:0C:3F:CD
Certificate issuer:       /CN=600921937E8C82CCBB357FE8103E7D3356A4C6BE
Certificate serial:       365131DE68AAEEC9A4E3EBD380916FCFBAF54BB7
Authority key identifier: 60:09:21:93:7E:8C:82:CC:BB:35:7F:E8:10:3E:7D:33:56:A4:C6:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/600921937E8C82CCBB357FE8103E7D3356A4C6BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/1/3138372e3130392e3139382e302f32342d3234203d3e20323632333632.roa
Signing time:             Fri 14 Aug 2026 19:48:44 +0000
ROA not before:           Fri 14 Aug 2026 19:43:44 +0000
ROA not after:            Fri 13 Aug 2027 19:48:44 +0000
asID:                     262362
IP address blocks:        187.109.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/1/600921937E8C82CCBB357FE8103E7D3356A4C6BE.crl
                          rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/1/600921937E8C82CCBB357FE8103E7D3356A4C6BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/600921937E8C82CCBB357FE8103E7D3356A4C6BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 08:30:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:51:31:de:68:aa:ee:c9:a4:e3:eb:d3:80:91:6f:cf:ba:f5:4b:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600921937E8C82CCBB357FE8103E7D3356A4C6BE
        Validity
            Not Before: Aug 14 19:43:44 2026 GMT
            Not After : Aug 13 19:48:44 2027 GMT
        Subject: CN=CC7BA8C055FBACDCDF9CD6849ED153BDFE0C3FCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:99:1b:ec:11:51:7a:6d:03:47:53:df:ab:59:
                    19:83:19:89:18:1c:b7:92:4a:bc:26:a1:38:01:5f:
                    cc:2a:72:0b:d3:cb:10:da:c3:55:37:80:dd:25:89:
                    4e:3c:51:5a:08:a9:23:f6:fe:e5:24:33:88:1c:95:
                    99:a6:4b:48:02:18:3a:05:c8:f9:3c:f2:fe:4e:30:
                    f9:a7:a3:4d:1d:79:4e:a4:d4:31:18:c8:65:5e:df:
                    05:9a:f5:8a:05:2a:85:be:a3:0f:16:42:f0:5b:4f:
                    ff:8c:27:93:d7:ef:f2:a1:92:23:43:38:b4:a7:4c:
                    0b:9a:e4:f7:6a:4b:98:4b:cb:e6:f7:66:cc:4c:d0:
                    ee:0f:aa:97:05:2b:82:73:e7:b6:3d:f9:9d:c6:cf:
                    a0:53:2c:64:f1:76:0f:af:c7:d4:99:93:66:1a:1e:
                    77:72:c2:7f:6f:c4:31:88:46:d5:d5:3a:e6:99:7e:
                    ed:dc:8f:f1:e3:45:67:41:6d:77:d8:43:b3:e8:61:
                    87:4a:8c:03:ff:2c:37:70:58:23:b1:1b:a4:95:4b:
                    c8:26:c3:bc:4d:d3:b8:58:23:1d:ad:e2:9d:1c:87:
                    9d:9d:18:30:8a:dc:7c:25:62:8c:e8:e4:dc:ca:4f:
                    55:45:db:52:58:3e:54:6e:d9:2a:71:57:96:af:08:
                    25:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:7B:A8:C0:55:FB:AC:DC:DF:9C:D6:84:9E:D1:53:BD:FE:0C:3F:CD
            X509v3 Authority Key Identifier:
                keyid:60:09:21:93:7E:8C:82:CC:BB:35:7F:E8:10:3E:7D:33:56:A4:C6:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/1/600921937E8C82CCBB357FE8103E7D3356A4C6BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/600921937E8C82CCBB357FE8103E7D3356A4C6BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/1/3138372e3130392e3139382e302f32342d3234203d3e20323632333632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.109.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:6d:24:6e:0d:7e:96:e5:09:e8:ce:7b:96:15:f7:1b:87:88:
         fe:7c:5d:81:88:cd:21:de:49:21:0e:4e:be:90:bf:c5:8a:f5:
         34:43:7a:e5:a8:90:dd:71:30:93:bd:43:47:7d:2d:2c:23:24:
         e1:9e:ef:49:01:ee:0b:04:44:0f:a6:65:ee:09:35:97:ed:1b:
         29:86:24:9a:d0:a8:67:8a:11:8a:12:73:10:fa:98:e5:be:34:
         45:56:d4:ce:4b:be:6b:24:f2:32:63:de:7f:a1:d1:2d:f6:87:
         8e:d6:fb:6b:12:67:3f:d3:79:0a:e7:8b:18:5e:cd:f4:6d:69:
         f6:b3:6c:6a:c0:e5:ba:ea:d1:47:ca:a9:21:32:6b:b7:d2:13:
         17:76:39:94:f6:f4:69:e5:63:ee:86:df:08:1b:a7:1f:64:30:
         27:6a:4a:97:97:cb:ee:e9:59:3c:22:61:e0:2e:3f:99:cd:59:
         25:1b:d4:5b:5a:ce:c2:5f:7d:36:c6:c4:e2:21:38:35:57:37:
         65:93:04:a0:78:a6:2b:8e:0c:97:39:ff:1f:b0:dd:56:45:78:
         49:45:fb:1c:aa:4c:eb:9b:5b:4a:ba:2a:82:4d:b9:27:6c:6f:
         84:71:f3:fc:49:e3:4a:cd:7f:ec:25:51:ba:f6:84:7b:e5:d1:
         45:3f:fd:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 01:16:17 2026 by rpki-client