Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Fk7kfj6X6wr5vxXzCu8YgRTN6Pwz4UQi7QaQ8NZBri7t/0/3138372e33332e3234302e302f32302d3234203d3e203533303837.roa
File:                     3138372e33332e3234302e302f32302d3234203d3e203533303837.roa (raw, json)
Hash identifier:          pk6nww7t553EmLUQ/SqpG8fgSFEROhV42XfHvAt9oSw=
Subject key identifier:   C8:FD:B9:DE:52:53:38:DA:BB:45:70:06:D6:0A:86:B7:D8:95:9A:AF
Certificate issuer:       /CN=E5ED411E2AC1A91A8A35D2B5D1476B8009DF6F4F
Certificate serial:       107803F8424CD78B6B680651AD041552EE5A935C
Authority key identifier: E5:ED:41:1E:2A:C1:A9:1A:8A:35:D2:B5:D1:47:6B:80:09:DF:6F:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5ED411E2AC1A91A8A35D2B5D1476B8009DF6F4F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fk7kfj6X6wr5vxXzCu8YgRTN6Pwz4UQi7QaQ8NZBri7t/0/3138372e33332e3234302e302f32302d3234203d3e203533303837.roa
Signing time:             Wed 19 Aug 2026 20:30:35 +0000
ROA not before:           Wed 19 Aug 2026 20:25:35 +0000
ROA not after:            Wed 18 Aug 2027 20:30:35 +0000
asID:                     53087
IP address blocks:        187.33.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fk7kfj6X6wr5vxXzCu8YgRTN6Pwz4UQi7QaQ8NZBri7t/0/E5ED411E2AC1A91A8A35D2B5D1476B8009DF6F4F.crl
                          rsync://rpki-repo.registro.br/repo/Fk7kfj6X6wr5vxXzCu8YgRTN6Pwz4UQi7QaQ8NZBri7t/0/E5ED411E2AC1A91A8A35D2B5D1476B8009DF6F4F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5ED411E2AC1A91A8A35D2B5D1476B8009DF6F4F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 18:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:78:03:f8:42:4c:d7:8b:6b:68:06:51:ad:04:15:52:ee:5a:93:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5ED411E2AC1A91A8A35D2B5D1476B8009DF6F4F
        Validity
            Not Before: Aug 19 20:25:35 2026 GMT
            Not After : Aug 18 20:30:35 2027 GMT
        Subject: CN=C8FDB9DE525338DABB457006D60A86B7D8959AAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7c:84:b3:57:4a:b5:2c:33:f1:3c:57:99:b8:
                    3a:38:80:d7:1c:cb:a4:d5:d5:a2:7c:05:74:24:a5:
                    30:28:62:01:bc:bb:c7:11:c3:cc:3d:d0:42:41:f9:
                    27:31:1f:ad:99:24:f7:ae:4f:50:22:ef:fc:b6:9b:
                    5a:62:73:8a:cf:bc:4c:58:43:fe:74:76:9e:6d:91:
                    f1:91:81:eb:fd:ed:dd:1f:ab:f0:37:07:3e:65:4c:
                    e7:98:e5:3a:2b:ca:51:30:60:06:f3:cf:7b:78:6b:
                    df:aa:44:5e:69:b9:f5:88:13:af:d6:96:f1:62:4a:
                    96:4d:62:b1:0f:5e:58:db:6f:0e:2e:c7:03:0a:f9:
                    c5:7a:86:8c:3b:ac:15:97:cc:f4:50:57:df:2e:32:
                    67:e4:fe:a3:28:5e:a1:6e:83:02:38:d3:91:0d:bf:
                    0c:d0:1d:c2:8b:bf:42:bc:6a:67:02:d6:a8:69:8a:
                    4f:c4:5e:86:dc:83:1d:8d:11:14:65:99:99:1f:3b:
                    81:84:2d:80:8d:6b:b1:6a:ce:b1:61:ca:45:26:e3:
                    30:98:69:fa:2b:76:cf:c1:d4:63:b8:46:84:9f:0c:
                    ac:52:76:eb:d5:84:a3:ab:d9:f0:85:bb:89:02:b7:
                    15:c9:38:67:b0:a1:53:9c:72:3c:ee:68:7f:59:2d:
                    cc:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:FD:B9:DE:52:53:38:DA:BB:45:70:06:D6:0A:86:B7:D8:95:9A:AF
            X509v3 Authority Key Identifier:
                keyid:E5:ED:41:1E:2A:C1:A9:1A:8A:35:D2:B5:D1:47:6B:80:09:DF:6F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fk7kfj6X6wr5vxXzCu8YgRTN6Pwz4UQi7QaQ8NZBri7t/0/E5ED411E2AC1A91A8A35D2B5D1476B8009DF6F4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5ED411E2AC1A91A8A35D2B5D1476B8009DF6F4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fk7kfj6X6wr5vxXzCu8YgRTN6Pwz4UQi7QaQ8NZBri7t/0/3138372e33332e3234302e302f32302d3234203d3e203533303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.33.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         54:86:a2:fd:a6:33:2c:90:ac:aa:3d:c5:59:ce:29:74:1e:96:
         da:34:83:c2:4f:c7:59:55:36:38:80:0e:f9:cc:ab:79:6c:a8:
         d6:88:33:12:35:6c:a3:9f:9e:ef:42:f3:d8:8c:cc:f7:99:4a:
         8a:18:47:c4:dd:ef:83:81:d2:e7:2c:10:c9:84:3d:ea:e1:4a:
         cc:a8:a2:27:2c:d0:ac:a7:af:5f:ff:27:5d:e8:00:c6:66:c8:
         d9:9a:4b:2b:51:28:24:c1:08:3c:6f:f1:b8:7b:3f:66:a5:d6:
         92:40:14:1b:07:4e:cd:1a:c2:20:da:d2:af:d4:75:41:56:16:
         c0:1e:d7:e2:d5:11:bd:10:4a:45:5b:ca:43:15:67:55:5b:28:
         6a:cd:73:2b:dc:79:b0:9a:7e:91:c3:a2:26:ad:0f:dc:74:53:
         a5:d9:3a:3a:8c:0a:3b:47:6f:eb:bd:8f:e0:16:6b:01:6e:72:
         a8:08:10:67:d8:13:f6:fb:c2:b0:52:d6:09:cb:d1:7f:af:8d:
         f2:6a:91:0f:64:db:e4:b0:68:c0:39:42:95:72:f1:51:90:6b:
         3f:2e:09:7f:89:b8:0a:4a:33:b6:03:66:18:2c:9f:a5:cd:9b:
         b5:39:ba:99:93:5e:b5:de:8c:fd:ea:dd:45:4f:db:28:56:46:
         d2:80:1b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 22:11:03 2026 by rpki-client