Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/3138372e3130382e3234302e302f32342d3234203d3e20323633343135.roa
File:                     3138372e3130382e3234302e302f32342d3234203d3e20323633343135.roa (raw, json)
Hash identifier:          6ZBkrOVQZpmEymy7HbXRJWwZF/H6PAKXr3M4arIBAmY=
Subject key identifier:   96:20:01:25:7C:67:98:31:C6:EE:A0:26:39:48:17:D5:3C:CB:4C:01
Certificate issuer:       /CN=04AB90797AE9DE69FBC4F57A12AB8CB92133ED01
Certificate serial:       7695BF1066AE162594E6C8124FA054563BA5CAA9
Authority key identifier: 04:AB:90:79:7A:E9:DE:69:FB:C4:F5:7A:12:AB:8C:B9:21:33:ED:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04AB90797AE9DE69FBC4F57A12AB8CB92133ED01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/3138372e3130382e3234302e302f32342d3234203d3e20323633343135.roa
Signing time:             Tue 11 Aug 2026 17:29:06 +0000
ROA not before:           Tue 11 Aug 2026 17:24:06 +0000
ROA not after:            Tue 10 Aug 2027 17:29:06 +0000
asID:                     263415
IP address blocks:        187.108.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/04AB90797AE9DE69FBC4F57A12AB8CB92133ED01.crl
                          rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/04AB90797AE9DE69FBC4F57A12AB8CB92133ED01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04AB90797AE9DE69FBC4F57A12AB8CB92133ED01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 01:25:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:95:bf:10:66:ae:16:25:94:e6:c8:12:4f:a0:54:56:3b:a5:ca:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04AB90797AE9DE69FBC4F57A12AB8CB92133ED01
        Validity
            Not Before: Aug 11 17:24:06 2026 GMT
            Not After : Aug 10 17:29:06 2027 GMT
        Subject: CN=962001257C679831C6EEA026394817D53CCB4C01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:10:ca:b0:73:5c:ec:ca:fb:bc:fb:fe:46:2c:
                    56:12:7e:8b:63:de:d9:1e:60:31:2b:23:24:36:47:
                    71:5b:b1:56:ff:9f:a7:c5:fd:82:44:3b:4d:84:da:
                    c5:f4:da:11:71:5a:aa:fa:4f:bd:6d:2f:88:6c:a1:
                    9a:11:23:b2:a9:26:ca:01:f6:dd:6f:17:77:10:7c:
                    df:1a:ba:e3:45:70:7e:57:01:e3:9a:c3:4c:4c:8b:
                    59:5e:48:76:41:55:02:bd:9d:78:60:ed:ed:04:b1:
                    fd:33:93:f2:8f:55:19:ab:40:e2:94:c1:0b:c8:47:
                    73:4d:02:88:e9:e2:04:d5:09:b4:e5:11:ab:bf:53:
                    ff:83:fa:77:b3:c4:74:e3:fd:bc:0b:2e:60:5e:e1:
                    d4:9e:95:4a:88:5c:68:7f:22:4e:83:59:3f:a4:13:
                    5d:f2:50:fb:f7:c5:79:a2:e7:da:1d:bd:8b:27:b3:
                    03:40:f0:67:42:86:5d:02:c0:7d:50:37:13:9d:ab:
                    18:90:d4:7f:fb:ed:60:e4:15:20:ef:5d:f5:89:b1:
                    32:2f:ff:bc:25:60:56:0f:43:a5:2c:c8:84:24:32:
                    da:42:a1:7a:92:7c:e4:b0:e4:ba:c3:c4:06:6a:2e:
                    ab:a2:44:4c:78:f2:f4:21:3a:e2:17:15:55:ef:53:
                    89:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:20:01:25:7C:67:98:31:C6:EE:A0:26:39:48:17:D5:3C:CB:4C:01
            X509v3 Authority Key Identifier:
                keyid:04:AB:90:79:7A:E9:DE:69:FB:C4:F5:7A:12:AB:8C:B9:21:33:ED:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/04AB90797AE9DE69FBC4F57A12AB8CB92133ED01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04AB90797AE9DE69FBC4F57A12AB8CB92133ED01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/3138372e3130382e3234302e302f32342d3234203d3e20323633343135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:a0:59:f6:c6:a7:ff:c3:fe:32:8d:cc:57:a7:60:03:7b:7a:
         07:71:cd:ad:02:2c:ce:9f:fe:f8:7c:88:90:2a:ab:05:63:fa:
         24:93:fd:75:4a:c8:d6:96:26:b4:63:2c:f9:e3:94:60:9f:e9:
         f3:b2:c5:66:4d:ac:32:c8:7e:99:e3:4e:43:61:82:30:4f:48:
         fc:63:3a:71:07:44:50:56:c9:ea:14:8e:e3:d2:1a:83:30:1f:
         95:92:be:8a:3c:16:a8:ea:4e:a6:33:53:c9:fd:5b:9d:f6:5f:
         26:c1:e5:61:22:27:ba:42:d2:7b:28:16:74:7b:30:5f:b1:21:
         ef:37:d5:87:69:1f:c8:b4:75:5b:37:62:97:23:3e:2c:5d:3b:
         24:d4:2a:43:9e:93:94:2c:04:fd:9d:92:97:06:0b:c3:39:de:
         52:21:34:de:b7:57:37:0a:6f:2e:ed:74:bb:22:7a:b7:97:3c:
         84:74:8c:52:a3:a4:f1:9f:3d:15:60:f5:04:ed:c5:3c:6c:21:
         87:a4:c7:30:86:73:1d:40:30:80:f8:9d:be:0c:63:bd:2d:a8:
         f9:3d:9b:e9:62:6d:25:6a:ac:6b:fb:75:b3:17:60:e8:f0:17:
         5c:de:30:2b:53:87:ff:3d:0e:03:aa:0b:2a:0b:9a:42:2e:f6:
         e1:3b:76:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 16:35:51 2026 by rpki-client