Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/3138372e3130382e3235322e302f32322d3232203d3e20323633343135.roa
File:                     3138372e3130382e3235322e302f32322d3232203d3e20323633343135.roa (raw, json)
Hash identifier:          QjMmKdAEUEdxIMDR4krbgA1gDIj6BAherz7nVHxZSew=
Subject key identifier:   0E:97:C9:E2:CE:75:65:0C:F4:BF:8A:57:F3:A7:A9:7E:23:E2:37:07
Certificate issuer:       /CN=04AB90797AE9DE69FBC4F57A12AB8CB92133ED01
Certificate serial:       3024DE0D9371332DFEDD8C29CFB8B996D341669A
Authority key identifier: 04:AB:90:79:7A:E9:DE:69:FB:C4:F5:7A:12:AB:8C:B9:21:33:ED:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04AB90797AE9DE69FBC4F57A12AB8CB92133ED01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/3138372e3130382e3235322e302f32322d3232203d3e20323633343135.roa
Signing time:             Tue 11 Aug 2026 17:29:06 +0000
ROA not before:           Tue 11 Aug 2026 17:24:06 +0000
ROA not after:            Tue 10 Aug 2027 17:29:06 +0000
asID:                     263415
IP address blocks:        187.108.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/04AB90797AE9DE69FBC4F57A12AB8CB92133ED01.crl
                          rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/04AB90797AE9DE69FBC4F57A12AB8CB92133ED01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04AB90797AE9DE69FBC4F57A12AB8CB92133ED01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 20:31:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:24:de:0d:93:71:33:2d:fe:dd:8c:29:cf:b8:b9:96:d3:41:66:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04AB90797AE9DE69FBC4F57A12AB8CB92133ED01
        Validity
            Not Before: Aug 11 17:24:06 2026 GMT
            Not After : Aug 10 17:29:06 2027 GMT
        Subject: CN=0E97C9E2CE75650CF4BF8A57F3A7A97E23E23707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:16:5c:99:0f:de:e6:43:ea:cd:30:b4:16:34:
                    cd:d8:b6:cc:76:c2:28:50:59:cf:d4:60:42:56:bd:
                    4c:33:1b:df:8b:26:83:74:78:5f:03:cb:c5:bf:1a:
                    43:68:99:b3:38:af:f3:45:cc:c4:d1:14:9e:4c:4a:
                    d6:c3:07:d2:f1:bb:75:3f:e4:5f:3b:74:8d:19:54:
                    0f:1a:9a:34:1d:91:4b:94:f6:51:c2:92:68:21:80:
                    46:b5:c4:43:80:39:76:ff:10:7a:cf:e9:0b:8a:b0:
                    8f:69:cf:2d:c6:14:88:47:4f:7b:9a:fe:d9:13:c5:
                    49:cd:f8:ae:79:ed:5b:03:29:42:ac:a5:2c:9f:e8:
                    a1:3e:e1:20:0c:f4:00:96:e7:fc:77:81:48:ea:39:
                    f1:ba:2d:1f:66:f2:80:59:0a:e3:2c:bc:ba:c0:65:
                    1f:44:2e:3d:4d:34:b1:f1:b9:19:81:98:89:df:66:
                    72:d9:c3:2c:16:aa:2b:51:8c:8a:a1:a9:b5:80:b9:
                    72:53:d1:fa:46:3f:47:56:22:3e:26:44:f8:ac:1c:
                    8f:bf:fd:c2:57:85:7c:be:f4:88:41:57:2b:9b:a1:
                    4e:c1:22:b4:cd:7b:86:ca:93:1d:61:2c:25:7f:06:
                    67:b4:e5:0a:63:a0:b9:10:ce:42:9f:3b:62:95:99:
                    23:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:97:C9:E2:CE:75:65:0C:F4:BF:8A:57:F3:A7:A9:7E:23:E2:37:07
            X509v3 Authority Key Identifier:
                keyid:04:AB:90:79:7A:E9:DE:69:FB:C4:F5:7A:12:AB:8C:B9:21:33:ED:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/04AB90797AE9DE69FBC4F57A12AB8CB92133ED01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04AB90797AE9DE69FBC4F57A12AB8CB92133ED01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/3138372e3130382e3235322e302f32322d3232203d3e20323633343135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:51:e7:92:a6:cb:94:81:60:0f:fd:04:11:c4:c5:62:c4:f8:
         b2:f9:e6:86:11:5c:71:68:68:20:d3:7f:15:ec:51:39:1b:3d:
         cc:40:fc:95:46:42:55:3f:08:2e:d1:32:4f:47:ad:e9:46:d0:
         e6:77:30:82:86:02:12:06:a4:c7:40:31:43:5e:5d:91:1a:89:
         e2:52:9d:a4:c7:33:d3:2c:ba:f4:40:fe:a4:f4:c6:7f:70:8f:
         9d:12:dc:d2:d4:2d:4c:2c:3e:21:78:7d:21:00:7c:d2:83:47:
         c1:49:e8:dc:42:2f:b5:5f:c4:70:ea:5a:fa:14:47:43:74:00:
         4a:d9:4f:ac:95:51:c0:0f:6a:df:8d:de:22:7d:d4:13:4b:4f:
         ac:85:19:d5:a6:24:a5:56:46:bb:3e:bc:2d:23:f8:92:69:62:
         33:6a:28:c9:1d:36:b9:99:23:d2:96:ef:e7:19:57:d4:d4:88:
         7a:e0:1f:e2:43:e5:51:e6:c0:78:ac:8b:0d:8a:e1:fa:0b:be:
         23:e8:fc:8b:5a:67:ee:d6:e2:5a:27:00:09:54:52:09:4d:95:
         11:6c:48:25:8a:09:ab:58:2b:c5:7f:23:75:05:94:6c:63:61:
         2f:90:35:6f:a9:21:54:de:1c:e4:78:5e:a6:28:97:63:b6:cd:
         cd:3d:2a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 05:21:12 2026 by rpki-client