Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/3138362e3139362e31302e302f32342d3234203d3e203533303535.roa
File:                     3138362e3139362e31302e302f32342d3234203d3e203533303535.roa (raw, json)
Hash identifier:          YcF9pAzrPH1mVtfJ+GE2zxGYkzpIM/++kWeq43zrkII=
Subject key identifier:   E8:20:32:C5:03:B6:3F:BD:34:94:6F:91:EA:E0:0B:23:8B:E5:C6:54
Certificate issuer:       /CN=A7ACFB4517623B0EA29CFE21AED99E020EC43239
Certificate serial:       13D4AFF1E68B11CBBD8DD1E4CA8208F002DDE27E
Authority key identifier: A7:AC:FB:45:17:62:3B:0E:A2:9C:FE:21:AE:D9:9E:02:0E:C4:32:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/3138362e3139362e31302e302f32342d3234203d3e203533303535.roa
Signing time:             Thu 13 Aug 2026 18:56:32 +0000
ROA not before:           Thu 13 Aug 2026 18:51:32 +0000
ROA not after:            Thu 12 Aug 2027 18:56:32 +0000
asID:                     53055
IP address blocks:        186.196.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.crl
                          rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 23:08:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:d4:af:f1:e6:8b:11:cb:bd:8d:d1:e4:ca:82:08:f0:02:dd:e2:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7ACFB4517623B0EA29CFE21AED99E020EC43239
        Validity
            Not Before: Aug 13 18:51:32 2026 GMT
            Not After : Aug 12 18:56:32 2027 GMT
        Subject: CN=E82032C503B63FBD34946F91EAE00B238BE5C654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4a:f4:31:fc:f8:56:d5:f3:7a:78:ea:27:a8:
                    22:5b:9e:30:d9:00:26:ec:7a:5a:85:9e:16:58:3b:
                    38:d9:69:33:ce:66:74:f2:e0:ae:01:e8:db:ce:6f:
                    67:49:10:e0:2b:80:90:29:97:8a:be:a5:3b:91:98:
                    fa:ea:85:96:02:b1:6a:82:54:a3:a6:eb:24:4b:0b:
                    fb:e1:ec:82:ae:c5:9a:6b:ad:14:5b:0a:a1:2e:d9:
                    6c:7d:7d:79:4d:c2:09:1c:2a:6b:76:04:37:80:67:
                    11:94:10:83:78:66:92:e9:e9:6b:30:54:a9:1c:09:
                    18:d5:9f:3b:40:92:7f:29:39:66:d2:f2:c9:d9:83:
                    7d:ca:56:29:e0:79:04:67:a0:8c:60:1d:b8:dc:e9:
                    74:89:8c:c0:f9:e4:01:31:37:1c:6b:81:f6:9b:4c:
                    1c:e9:5f:e2:3a:bc:aa:97:ba:cc:5f:67:96:cf:ee:
                    f3:67:58:19:90:c2:da:37:0d:71:3b:24:f8:95:b1:
                    4c:b6:8d:d3:36:4a:01:35:54:9d:a9:e0:73:d3:e7:
                    b0:2b:ec:a6:cc:ae:a5:aa:32:d6:9d:7b:15:27:2a:
                    45:3b:8a:da:1c:14:a7:95:c6:92:97:6d:b9:95:55:
                    f9:af:1c:bb:94:1c:1c:77:63:1b:ce:8b:13:72:74:
                    86:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:20:32:C5:03:B6:3F:BD:34:94:6F:91:EA:E0:0B:23:8B:E5:C6:54
            X509v3 Authority Key Identifier:
                keyid:A7:AC:FB:45:17:62:3B:0E:A2:9C:FE:21:AE:D9:9E:02:0E:C4:32:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/3138362e3139362e31302e302f32342d3234203d3e203533303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.196.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:e2:53:51:bc:43:eb:2e:e7:14:32:1c:b8:2e:a7:8b:d0:50:
         54:f8:78:f1:da:58:ee:72:92:59:8b:7d:5d:73:8e:df:4f:bd:
         96:ea:d8:e1:71:83:b0:08:96:cc:8b:6a:0e:e3:b7:74:99:b9:
         ad:fd:c4:17:c6:61:de:8a:8e:ba:1b:45:3a:22:dc:64:eb:a1:
         d1:7f:6d:55:62:46:3b:fb:20:0c:37:02:50:0b:b0:dc:6c:97:
         ec:18:35:97:f1:3f:90:bb:a9:cc:f9:93:9e:3b:e9:fa:4c:c3:
         55:99:66:e6:46:13:f7:9b:37:ca:b4:56:0e:11:74:05:2e:50:
         68:82:f1:b4:1c:14:2a:1e:64:bc:a1:e7:00:a7:ab:b5:e0:da:
         a3:d8:7e:65:16:6d:70:0b:e2:18:80:04:9f:f0:7b:cd:77:17:
         56:56:d3:9e:7f:bd:4f:b3:46:5e:c7:0e:2d:34:e9:15:51:79:
         1d:24:b7:ce:d7:01:ea:1f:02:92:00:d2:14:27:92:ae:e3:66:
         a7:46:9b:2f:ef:95:42:f7:b0:80:5a:63:e8:8e:ce:46:88:04:
         c5:8e:4b:08:c5:03:c3:1a:72:a6:49:b8:eb:0d:a8:45:2e:68:
         44:73:6c:e9:75:2a:17:ea:c5:e3:23:66:cd:af:74:4f:66:12:
         d4:7e:7e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:27:25 2026 by rpki-client