Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FbLVfquAvJY6szesYESJ4PRX2S1LUvEMhU2G7bj59xG7/0/3138362e3235302e34382e302f32312d3234203d3e20323632383037.roa
File:                     3138362e3235302e34382e302f32312d3234203d3e20323632383037.roa (raw, json)
Hash identifier:          Ac8WoUt5QwehqLodE7jnyPhAgDMEmxrlR8DpGKBlXgE=
Subject key identifier:   F2:C4:8B:8F:75:8B:32:F5:BC:F1:4D:37:33:A9:8F:6C:AD:D3:A6:83
Certificate issuer:       /CN=6D026DFAD46B31E93AF9ADE46FE698A5B2CFBCD1
Certificate serial:       3E2EBE40F58063BBAFC1FB13B81E1AA562E7F7B9
Authority key identifier: 6D:02:6D:FA:D4:6B:31:E9:3A:F9:AD:E4:6F:E6:98:A5:B2:CF:BC:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D026DFAD46B31E93AF9ADE46FE698A5B2CFBCD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FbLVfquAvJY6szesYESJ4PRX2S1LUvEMhU2G7bj59xG7/0/3138362e3235302e34382e302f32312d3234203d3e20323632383037.roa
Signing time:             Thu 20 Aug 2026 10:55:10 +0000
ROA not before:           Thu 20 Aug 2026 10:50:10 +0000
ROA not after:            Thu 19 Aug 2027 10:55:10 +0000
asID:                     262807
IP address blocks:        186.250.48.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FbLVfquAvJY6szesYESJ4PRX2S1LUvEMhU2G7bj59xG7/0/6D026DFAD46B31E93AF9ADE46FE698A5B2CFBCD1.crl
                          rsync://rpki-repo.registro.br/repo/FbLVfquAvJY6szesYESJ4PRX2S1LUvEMhU2G7bj59xG7/0/6D026DFAD46B31E93AF9ADE46FE698A5B2CFBCD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D026DFAD46B31E93AF9ADE46FE698A5B2CFBCD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 20:58:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:2e:be:40:f5:80:63:bb:af:c1:fb:13:b8:1e:1a:a5:62:e7:f7:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D026DFAD46B31E93AF9ADE46FE698A5B2CFBCD1
        Validity
            Not Before: Aug 20 10:50:10 2026 GMT
            Not After : Aug 19 10:55:10 2027 GMT
        Subject: CN=F2C48B8F758B32F5BCF14D3733A98F6CADD3A683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3c:d7:99:af:6b:db:ef:87:8d:96:57:e7:01:
                    87:df:74:64:08:e1:7f:f4:b2:0e:38:dd:c1:86:ac:
                    aa:12:ea:82:e9:2b:37:36:12:b6:5e:39:a7:a2:ea:
                    ce:e6:32:33:fa:6c:b0:e5:02:1d:f1:53:ab:b7:c0:
                    a1:b2:03:87:f7:d8:51:0b:77:ed:96:e6:8a:f6:69:
                    b7:13:2e:15:e9:79:d9:fd:cb:28:f9:c9:d1:71:19:
                    56:eb:ca:95:a2:48:f2:ce:ac:15:d0:f6:53:58:f7:
                    ff:be:15:73:d4:8d:72:a7:13:5e:74:ac:26:f1:ef:
                    d5:08:01:2b:7a:bb:76:82:72:47:01:65:85:58:58:
                    fb:28:5d:af:9b:2f:0e:fb:4d:88:33:41:b6:ef:96:
                    fa:71:2e:00:db:4f:b0:1f:7f:d5:0e:e6:85:ce:8c:
                    65:53:d8:3c:e1:f9:10:c2:9b:ba:f9:95:6f:db:ed:
                    5e:52:52:e9:4d:1d:c3:3b:14:a7:d7:90:52:1d:9f:
                    13:5d:94:c6:5e:89:a2:b1:7c:77:bc:8d:57:97:11:
                    cd:d1:82:56:e0:d1:ea:19:52:03:cc:ba:1b:a1:a5:
                    91:3a:2f:d6:57:df:d6:2f:f9:24:f0:e4:4a:54:70:
                    e8:ff:93:6d:83:09:50:44:c3:8c:55:b7:f0:5d:37:
                    e0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:C4:8B:8F:75:8B:32:F5:BC:F1:4D:37:33:A9:8F:6C:AD:D3:A6:83
            X509v3 Authority Key Identifier:
                keyid:6D:02:6D:FA:D4:6B:31:E9:3A:F9:AD:E4:6F:E6:98:A5:B2:CF:BC:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FbLVfquAvJY6szesYESJ4PRX2S1LUvEMhU2G7bj59xG7/0/6D026DFAD46B31E93AF9ADE46FE698A5B2CFBCD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D026DFAD46B31E93AF9ADE46FE698A5B2CFBCD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FbLVfquAvJY6szesYESJ4PRX2S1LUvEMhU2G7bj59xG7/0/3138362e3235302e34382e302f32312d3234203d3e20323632383037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3e:76:f9:1c:c7:46:98:62:05:f3:52:4e:5b:a4:91:8e:40:28:
         f7:2e:6c:bf:31:a4:14:64:fa:9e:db:91:49:95:3a:ab:05:38:
         1c:a6:b1:92:69:cd:fc:25:2f:09:4b:6c:8c:5b:3a:d4:e7:68:
         50:98:aa:9d:7e:1e:1f:7b:91:5a:21:bc:8f:12:a3:b7:26:85:
         e8:4f:b0:81:c9:c1:93:3a:63:50:39:1c:82:25:1a:db:07:4d:
         95:0a:72:a5:d4:a7:d2:90:61:04:e4:a7:e3:cc:65:0b:66:28:
         90:6f:6f:e6:03:60:80:9a:37:79:db:9e:f0:fe:bd:04:38:74:
         29:cd:25:e0:4d:84:87:36:34:98:17:bf:8b:d9:46:6e:6b:4c:
         22:16:e6:22:9b:cc:f9:b5:82:d9:32:7c:7a:eb:41:ee:3e:ef:
         18:c2:ab:4c:0f:fa:d4:25:a0:9b:ee:be:ee:d2:39:61:16:64:
         13:ea:99:0f:4a:b2:1e:02:f2:64:a9:c5:81:67:62:f3:79:48:
         07:af:72:7f:6f:b9:1a:d9:b8:47:0b:ee:44:08:bf:5a:c4:79:
         17:20:54:c6:69:9a:3a:eb:e1:93:92:b6:dd:13:8f:fd:e8:fd:
         7d:a9:91:53:73:9b:ef:fe:8b:d1:b6:b7:ad:92:d0:f0:0f:13:
         9b:d7:1c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 05:55:51 2026 by rpki-client