Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/3138372e3131312e3139322e302f32302d3234203d3e203533313233.roa
File:                     3138372e3131312e3139322e302f32302d3234203d3e203533313233.roa (raw, json)
Hash identifier:          VRFrJprIjIHcRu+a9kjCDD7HJd3K0CbW1yIU/yRP4/c=
Subject key identifier:   B8:CA:81:8D:44:87:C1:12:9D:94:C8:5B:4E:B9:0B:C1:52:C7:00:40
Certificate issuer:       /CN=EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193
Certificate serial:       133D66846EE310800F280D0AB9C1996B696FA4F3
Authority key identifier: EB:C5:8A:E8:BA:FE:DA:0B:B7:1F:C4:E6:45:19:F7:56:E1:FE:71:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/3138372e3131312e3139322e302f32302d3234203d3e203533313233.roa
Signing time:             Fri 18 Sep 2026 16:08:28 +0000
ROA not before:           Fri 18 Sep 2026 16:03:28 +0000
ROA not after:            Fri 17 Sep 2027 16:08:28 +0000
asID:                     53123
IP address blocks:        187.111.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193.crl
                          rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 12:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:3d:66:84:6e:e3:10:80:0f:28:0d:0a:b9:c1:99:6b:69:6f:a4:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193
        Validity
            Not Before: Sep 18 16:03:28 2026 GMT
            Not After : Sep 17 16:08:28 2027 GMT
        Subject: CN=B8CA818D4487C1129D94C85B4EB90BC152C70040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b8:07:d2:e8:d8:72:3a:5d:c7:9f:7c:25:68:
                    3e:5d:fb:18:c7:c1:70:0e:da:d8:0d:4d:53:57:89:
                    ea:07:ec:22:41:58:cd:06:e6:37:9c:cf:7d:32:7c:
                    41:9d:c5:a0:34:db:c6:50:61:c4:bf:a2:46:8a:4b:
                    7e:78:75:b7:f2:e5:9b:df:fc:88:e4:67:5f:63:4f:
                    ff:70:da:e8:cd:80:eb:aa:fb:7d:4b:fa:4c:f4:4f:
                    de:7f:e9:24:21:42:82:7a:80:84:df:54:67:ba:5e:
                    13:b2:74:b0:9d:d8:26:78:76:64:1c:61:92:df:38:
                    d0:0e:cc:42:09:cf:6c:e2:c2:5d:99:b9:b1:68:8b:
                    cf:07:22:bd:34:aa:6e:b7:d8:74:27:f0:7d:79:17:
                    7b:b2:69:94:58:5a:cd:20:4a:e8:db:f7:b3:2a:4d:
                    2e:79:0c:83:53:ff:68:f9:7f:f6:38:8f:8b:c4:92:
                    cf:ad:10:bd:61:69:20:0e:42:4d:01:23:ba:59:41:
                    0c:2c:33:86:aa:21:93:6d:94:eb:bf:b5:c6:8c:59:
                    20:62:20:1a:3c:d4:86:50:3e:52:c2:ff:58:e8:b0:
                    c1:7f:d9:9a:f1:6b:9d:40:ad:f2:9f:e1:92:b1:5e:
                    fa:50:9a:54:4d:f4:ef:cf:d0:b7:9b:53:68:80:5c:
                    3c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:CA:81:8D:44:87:C1:12:9D:94:C8:5B:4E:B9:0B:C1:52:C7:00:40
            X509v3 Authority Key Identifier:
                keyid:EB:C5:8A:E8:BA:FE:DA:0B:B7:1F:C4:E6:45:19:F7:56:E1:FE:71:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/3138372e3131312e3139322e302f32302d3234203d3e203533313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         16:f1:fd:de:39:7d:b2:ed:4f:07:0c:66:a9:4c:26:a9:b8:e1:
         eb:9b:b9:fa:08:ea:fe:b6:f0:43:8a:42:15:f7:3f:e2:bc:d6:
         44:4f:f8:0a:0c:d2:f4:3a:68:2c:2e:ab:ea:53:7a:fd:a4:a0:
         b5:61:17:b7:92:1e:0d:b7:16:e5:14:61:0d:11:eb:12:db:52:
         21:ea:ca:b0:6a:0b:54:35:38:9e:60:b5:a8:ee:06:e0:2d:c6:
         2e:cc:38:f5:bc:4f:dc:e2:32:04:a3:e4:9e:55:73:dc:a8:94:
         c8:fc:6a:86:d2:f7:38:fa:7a:34:12:d3:d7:e3:b1:b2:6e:0e:
         70:cb:99:2d:92:06:b5:ea:d9:03:e1:e8:47:f6:af:ee:30:44:
         cc:44:f0:24:a2:47:1a:38:68:c7:8c:00:7e:34:07:88:35:9d:
         36:fa:58:b4:04:ea:a1:14:28:3f:ae:5a:c8:7d:7d:b1:8c:88:
         c2:0b:8f:87:c5:ca:fd:9f:ad:51:43:8d:d2:96:c4:96:9c:e2:
         ba:59:49:db:94:25:f8:9f:1e:8c:87:4c:8d:26:cd:f0:f3:ee:
         aa:ed:00:a3:28:f4:a9:e9:2a:de:a7:b5:0a:6f:d3:a1:c5:3c:
         90:22:85:01:e6:83:b8:a8:d2:d7:3d:6d:9d:72:32:f1:8e:55:
         d6:ff:84:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 02:15:46 2026 by rpki-client