Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/3138362e3139362e302e302f32312d3234203d3e203535323031.roa
File:                     3138362e3139362e302e302f32312d3234203d3e203535323031.roa (raw, json)
Hash identifier:          b6/njw2B8bnQtLRKUzf2dOQ4VO496fsb35PTaQKL7kM=
Subject key identifier:   9E:19:7C:0D:7A:DB:39:38:B3:A1:E0:77:DF:38:BC:F2:CE:EA:D5:28
Certificate issuer:       /CN=A7ACFB4517623B0EA29CFE21AED99E020EC43239
Certificate serial:       2D92EBCF315ED99372FB422E7941AF1C3F6B7E0E
Authority key identifier: A7:AC:FB:45:17:62:3B:0E:A2:9C:FE:21:AE:D9:9E:02:0E:C4:32:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/3138362e3139362e302e302f32312d3234203d3e203535323031.roa
Signing time:             Fri 22 May 2026 16:03:28 +0000
ROA not before:           Fri 22 May 2026 15:58:28 +0000
ROA not after:            Fri 21 May 2027 16:03:28 +0000
asID:                     55201
IP address blocks:        186.196.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.crl
                          rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 09:56:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:92:eb:cf:31:5e:d9:93:72:fb:42:2e:79:41:af:1c:3f:6b:7e:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7ACFB4517623B0EA29CFE21AED99E020EC43239
        Validity
            Not Before: May 22 15:58:28 2026 GMT
            Not After : May 21 16:03:28 2027 GMT
        Subject: CN=9E197C0D7ADB3938B3A1E077DF38BCF2CEEAD528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c7:b6:d7:98:c4:af:85:63:64:4f:f1:10:94:
                    a9:cc:b7:2c:cb:7f:43:c8:77:17:43:96:0b:c8:df:
                    c2:cb:49:79:31:ae:8d:ac:a2:5e:3f:c0:3d:91:ec:
                    6b:30:60:83:93:de:37:1b:9e:ce:68:2b:c9:ca:5b:
                    1a:67:d4:e8:34:eb:2d:9a:f0:bd:8f:95:ea:8b:d4:
                    60:af:d7:05:9c:0f:71:32:bd:e4:19:58:b1:e1:f8:
                    81:c5:79:41:ad:6f:58:28:af:1b:ad:59:a2:7b:dd:
                    c7:ae:6e:83:1d:40:d6:fb:57:49:e7:11:be:c1:51:
                    1d:3f:84:e5:0e:5f:88:1e:63:42:6c:49:3e:e6:85:
                    bc:2d:cf:71:05:4f:6a:3d:ab:49:e1:74:a9:e8:b9:
                    0f:51:80:b1:ba:8f:ab:08:46:7f:18:0e:37:4c:7d:
                    5e:d8:d2:54:3e:d7:52:54:22:a4:05:e6:8a:b1:ce:
                    a5:f1:56:3d:67:0d:4e:11:64:c6:a6:4c:f2:04:72:
                    47:21:21:07:ad:95:f6:1f:a8:8c:eb:3b:ef:a5:fd:
                    44:a2:02:be:bf:58:90:00:15:71:16:53:83:82:0b:
                    d2:78:f0:39:db:cc:ee:d3:15:1f:a9:08:23:80:b6:
                    20:84:78:aa:a3:23:11:c5:2b:e3:fe:13:ea:b7:0b:
                    1d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:19:7C:0D:7A:DB:39:38:B3:A1:E0:77:DF:38:BC:F2:CE:EA:D5:28
            X509v3 Authority Key Identifier:
                keyid:A7:AC:FB:45:17:62:3B:0E:A2:9C:FE:21:AE:D9:9E:02:0E:C4:32:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/3138362e3139362e302e302f32312d3234203d3e203535323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.196.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         98:ef:88:ce:de:d8:62:cd:f0:30:99:9c:88:b5:34:eb:fa:9f:
         2e:32:2f:4c:6f:98:89:0d:75:32:da:94:97:bc:62:5f:97:bb:
         09:f6:f3:ab:37:0d:19:0f:ad:a4:41:fa:cb:2e:d2:cc:94:e0:
         0b:d9:5a:6c:46:40:a1:38:70:c4:e2:d3:e2:71:b7:c3:fe:33:
         4b:d1:e8:e2:d8:bc:d1:d4:09:8a:3f:1f:56:50:ae:e6:8d:c9:
         6f:41:58:37:92:86:9b:3c:27:ff:b6:c9:50:10:51:32:7d:bb:
         94:5b:c6:98:e7:80:7c:4c:34:27:2b:33:40:53:ec:68:c0:ff:
         95:10:a1:3d:1e:55:5f:b7:65:5d:f5:39:48:fc:52:77:f1:6e:
         57:e9:65:e3:c5:35:a3:95:fb:fe:10:d4:b7:5a:f7:a3:b5:40:
         9b:0d:b9:7a:09:ff:b9:2c:e8:75:10:93:86:ac:74:6f:30:84:
         fb:64:46:d6:04:af:f3:2b:64:b2:4d:12:20:61:16:5c:0a:b3:
         1f:bd:54:a6:0a:18:47:43:d9:6f:81:dc:de:12:de:9e:4b:b0:
         62:4f:e9:cd:c9:74:e8:02:d9:ca:02:7a:c1:43:d5:be:56:64:
         bf:06:67:8b:c6:22:cd:00:d8:de:d2:9d:50:15:4e:93:e2:ed:
         5f:30:f7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 17:08:07 2026 by rpki-client