Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GkHfuriXujNXss6WfMy8Wzyvb2CgshmGh8WmZWZcqjzn/0/3138362e3139362e37352e302f32342d3332203d3e20323734333638.roa
File:                     3138362e3139362e37352e302f32342d3332203d3e20323734333638.roa (raw, json)
Hash identifier:          3rn6Em3IcW8Lx9MET+FP56iG6a6gNrDa4uUYKr0kYs8=
Subject key identifier:   68:61:BD:FB:86:87:C1:07:3D:CE:D7:2C:9A:44:3F:05:8D:D4:19:48
Certificate issuer:       /CN=DBC95DB002A014070D4111459856E390931EFEE7
Certificate serial:       34E7082D8A86EDE586343AA110C17D4F7A5707F2
Authority key identifier: DB:C9:5D:B0:02:A0:14:07:0D:41:11:45:98:56:E3:90:93:1E:FE:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBC95DB002A014070D4111459856E390931EFEE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkHfuriXujNXss6WfMy8Wzyvb2CgshmGh8WmZWZcqjzn/0/3138362e3139362e37352e302f32342d3332203d3e20323734333638.roa
Signing time:             Fri 21 Aug 2026 14:55:35 +0000
ROA not before:           Fri 21 Aug 2026 14:50:35 +0000
ROA not after:            Fri 20 Aug 2027 14:55:35 +0000
asID:                     274368
IP address blocks:        186.196.75.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GkHfuriXujNXss6WfMy8Wzyvb2CgshmGh8WmZWZcqjzn/0/DBC95DB002A014070D4111459856E390931EFEE7.crl
                          rsync://rpki-repo.registro.br/repo/GkHfuriXujNXss6WfMy8Wzyvb2CgshmGh8WmZWZcqjzn/0/DBC95DB002A014070D4111459856E390931EFEE7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBC95DB002A014070D4111459856E390931EFEE7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 05:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:e7:08:2d:8a:86:ed:e5:86:34:3a:a1:10:c1:7d:4f:7a:57:07:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBC95DB002A014070D4111459856E390931EFEE7
        Validity
            Not Before: Aug 21 14:50:35 2026 GMT
            Not After : Aug 20 14:55:35 2027 GMT
        Subject: CN=6861BDFB8687C1073DCED72C9A443F058DD41948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:06:2d:79:c8:cf:7d:c1:40:0d:27:02:5a:63:
                    e8:55:18:fc:45:42:d2:7e:7a:6a:3e:c7:da:99:18:
                    85:8d:7f:2e:65:57:c4:00:d8:25:3b:30:58:16:a0:
                    09:89:0f:08:c1:67:4a:a3:1d:d0:19:47:8b:b3:fb:
                    85:43:fc:39:2d:8b:2b:45:00:8a:32:86:7f:17:34:
                    60:d6:e2:d7:fd:f8:5d:06:15:01:4c:af:d1:7c:c4:
                    3f:4a:a3:b1:d6:09:1c:22:72:40:f1:93:ce:ac:9d:
                    85:f8:d5:db:18:01:41:a3:62:c6:35:d5:1a:58:77:
                    0b:9d:45:14:a4:b2:f1:2d:57:78:d2:4b:fa:fd:5e:
                    3f:ad:29:24:e4:1e:1c:f3:48:50:1f:8b:ff:4e:68:
                    12:79:a9:70:c2:dc:b1:66:4e:fe:29:e4:ff:09:ec:
                    cd:f9:36:86:8e:73:8f:f3:70:2a:be:d2:50:53:1c:
                    06:ff:98:24:f0:d2:5d:a2:c9:82:46:49:67:2d:81:
                    e8:c2:23:54:3c:50:87:7b:26:c7:43:f1:7f:b9:44:
                    8d:d9:31:5f:27:38:95:e6:18:27:50:6f:32:a7:19:
                    16:90:17:8a:29:87:b9:ec:66:b8:cd:6c:7e:87:3c:
                    f0:25:83:3a:ba:77:ae:66:ce:36:df:6f:77:11:ce:
                    e3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:61:BD:FB:86:87:C1:07:3D:CE:D7:2C:9A:44:3F:05:8D:D4:19:48
            X509v3 Authority Key Identifier:
                keyid:DB:C9:5D:B0:02:A0:14:07:0D:41:11:45:98:56:E3:90:93:1E:FE:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkHfuriXujNXss6WfMy8Wzyvb2CgshmGh8WmZWZcqjzn/0/DBC95DB002A014070D4111459856E390931EFEE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBC95DB002A014070D4111459856E390931EFEE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkHfuriXujNXss6WfMy8Wzyvb2CgshmGh8WmZWZcqjzn/0/3138362e3139362e37352e302f32342d3332203d3e20323734333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.196.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:47:99:81:6d:aa:f2:bf:b9:c9:8c:e9:90:61:d5:00:fe:08:
         70:61:f8:3a:2e:f7:1b:0c:04:09:4a:4c:58:dc:3f:51:f9:b1:
         3a:65:51:77:0b:2c:09:23:6d:16:5a:44:86:e4:e0:f3:c1:89:
         7f:37:40:90:91:63:ed:7f:11:66:4a:5c:29:49:44:e9:44:a3:
         bc:f9:6d:be:5c:1c:09:9a:c6:23:f5:60:6c:2f:1c:c5:6a:d0:
         dd:e3:32:66:39:98:e5:2b:84:2a:dc:75:1d:3d:01:51:a4:5b:
         88:d1:80:c3:7d:70:3c:6b:21:9a:3e:7c:b7:e2:ca:ec:72:ca:
         64:75:d6:43:70:36:39:07:ca:c8:11:74:c2:52:ba:9d:5f:e3:
         33:21:66:b7:ed:72:c9:89:db:aa:34:22:01:94:1a:21:57:15:
         b5:75:ae:f2:a0:81:89:96:61:95:09:80:ab:e6:42:3e:89:9c:
         19:34:79:a8:cd:8c:76:c7:e5:ba:16:c7:35:ff:3f:79:e5:2b:
         a6:3c:f2:2c:00:6c:59:89:e3:2e:05:03:ae:f5:83:a3:5f:26:
         48:0f:4b:12:37:f4:52:d8:b9:49:eb:94:a3:a1:d1:ba:3b:ee:
         79:1d:78:47:88:ad:e3:ea:8c:35:88:a0:03:ad:b8:01:81:35:
         92:00:1c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 18:12:36 2026 by rpki-client