Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/3138372e3130382e3234362e302f32342d3234203d3e20323633343135.roa
File:                     3138372e3130382e3234362e302f32342d3234203d3e20323633343135.roa (raw, json)
Hash identifier:          igdFfobOEh6bie6wCrJ//c4jTfva7I4Jh2MCYr9pb3M=
Subject key identifier:   AC:6C:E6:85:8A:07:6B:65:66:AA:CF:28:17:65:77:27:04:6D:CF:5A
Certificate issuer:       /CN=04AB90797AE9DE69FBC4F57A12AB8CB92133ED01
Certificate serial:       5027E0C1E3CC2A1CFC7622663C340A498FFB1A46
Authority key identifier: 04:AB:90:79:7A:E9:DE:69:FB:C4:F5:7A:12:AB:8C:B9:21:33:ED:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04AB90797AE9DE69FBC4F57A12AB8CB92133ED01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/3138372e3130382e3234362e302f32342d3234203d3e20323633343135.roa
Signing time:             Tue 11 Aug 2026 17:29:06 +0000
ROA not before:           Tue 11 Aug 2026 17:24:06 +0000
ROA not after:            Tue 10 Aug 2027 17:29:06 +0000
asID:                     263415
IP address blocks:        187.108.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/04AB90797AE9DE69FBC4F57A12AB8CB92133ED01.crl
                          rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/04AB90797AE9DE69FBC4F57A12AB8CB92133ED01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04AB90797AE9DE69FBC4F57A12AB8CB92133ED01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 20:31:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:27:e0:c1:e3:cc:2a:1c:fc:76:22:66:3c:34:0a:49:8f:fb:1a:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04AB90797AE9DE69FBC4F57A12AB8CB92133ED01
        Validity
            Not Before: Aug 11 17:24:06 2026 GMT
            Not After : Aug 10 17:29:06 2027 GMT
        Subject: CN=AC6CE6858A076B6566AACF2817657727046DCF5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f3:a8:0b:e2:d0:5f:c6:9d:c6:89:ac:1a:f7:
                    f6:09:90:a4:ff:73:d5:7b:0a:f4:23:29:0c:eb:c9:
                    f8:05:34:7f:bf:2c:43:26:ba:66:68:55:e5:b7:62:
                    e8:b3:fe:bc:78:7d:4d:dd:44:95:e1:28:04:93:1d:
                    fb:ac:c3:e3:00:8d:35:b0:9f:e6:cd:11:90:fb:9a:
                    0d:a5:05:db:fb:6d:5e:53:17:04:c5:d3:94:e6:48:
                    23:73:fb:e5:03:46:a6:ed:bf:71:ad:7e:cc:0e:50:
                    0c:9c:e3:b0:e8:37:f6:60:82:be:40:0c:2e:32:8c:
                    9b:bd:36:85:ce:d9:c7:95:b5:b2:fc:34:2e:91:a6:
                    3e:e9:12:67:59:30:98:ae:c2:a3:2e:dc:de:17:f7:
                    a6:0a:df:bd:32:91:a2:5f:67:76:c8:22:e6:45:36:
                    41:fc:1b:0d:40:ec:6e:a5:fe:50:4b:e0:b9:a8:35:
                    f6:9c:68:76:61:54:56:a2:ea:45:76:c5:61:14:20:
                    7c:fa:7b:93:ec:49:3c:6f:09:6f:26:01:fc:8d:23:
                    24:60:0f:ac:21:49:f1:c9:9d:3d:3a:af:26:71:df:
                    7d:1e:a6:9f:b7:3c:cc:2b:e1:05:46:9c:50:84:69:
                    5c:be:bc:b5:12:96:2e:6b:69:b5:2e:a6:26:1d:6f:
                    05:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:6C:E6:85:8A:07:6B:65:66:AA:CF:28:17:65:77:27:04:6D:CF:5A
            X509v3 Authority Key Identifier:
                keyid:04:AB:90:79:7A:E9:DE:69:FB:C4:F5:7A:12:AB:8C:B9:21:33:ED:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/04AB90797AE9DE69FBC4F57A12AB8CB92133ED01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04AB90797AE9DE69FBC4F57A12AB8CB92133ED01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/3138372e3130382e3234362e302f32342d3234203d3e20323633343135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:dd:69:32:ff:63:bd:22:bb:ef:e7:12:6e:92:03:80:45:f8:
         c7:aa:4c:07:be:3d:33:81:12:0f:83:a7:c4:78:6e:79:43:a4:
         d0:3a:d5:48:a3:4d:55:4c:36:11:b2:45:43:0f:39:e7:93:9a:
         73:cf:42:bb:79:78:a2:6b:5f:0c:1c:d9:fc:5b:bf:b8:25:46:
         37:3f:66:91:4e:8a:84:42:74:b6:6e:b1:01:4e:f8:22:b0:70:
         1d:1d:92:df:e1:82:f4:9c:53:82:7b:13:6f:8f:d4:15:c5:02:
         9f:87:36:04:73:10:2d:f1:cd:a9:bf:66:e7:49:4c:9e:cf:94:
         f9:2a:d7:14:7f:fd:8f:99:5d:5e:b6:64:6e:de:2e:d5:82:f8:
         8f:86:ec:5b:9d:8c:6e:4f:3c:e4:e5:a2:1b:d3:b3:a9:33:ff:
         2a:c9:3a:d4:01:34:da:2d:98:15:d9:d4:35:71:35:7c:62:af:
         14:bb:1f:4a:ac:79:36:b2:b5:2d:ae:31:d4:26:92:16:71:c0:
         97:44:7e:eb:48:ba:b2:95:4b:bc:00:0f:20:4e:1a:19:e6:4e:
         85:d5:ee:07:86:a1:da:04:62:84:de:ae:3c:91:c8:94:cc:e1:
         d9:0a:10:bc:20:01:47:fe:4a:5d:e4:1a:f1:df:c2:c2:37:62:
         58:31:7e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 01:16:37 2026 by rpki-client