Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/3138362e3139362e31312e302f32342d3234203d3e203533303535.roa
File:                     3138362e3139362e31312e302f32342d3234203d3e203533303535.roa (raw, json)
Hash identifier:          hZ7T5a78iLLTMm5hpvWf1dYomtv8xBhJcdv2NlAsGdw=
Subject key identifier:   7D:83:77:F6:92:6F:99:C1:B8:B7:D4:A7:F8:B0:70:CA:1C:05:34:91
Certificate issuer:       /CN=A7ACFB4517623B0EA29CFE21AED99E020EC43239
Certificate serial:       29E6D7C0B1FFEC740E096CE12AAF6C3E2F8033F2
Authority key identifier: A7:AC:FB:45:17:62:3B:0E:A2:9C:FE:21:AE:D9:9E:02:0E:C4:32:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/3138362e3139362e31312e302f32342d3234203d3e203533303535.roa
Signing time:             Thu 13 Aug 2026 18:56:32 +0000
ROA not before:           Thu 13 Aug 2026 18:51:32 +0000
ROA not after:            Thu 12 Aug 2027 18:56:32 +0000
asID:                     53055
IP address blocks:        186.196.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.crl
                          rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 23:08:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:e6:d7:c0:b1:ff:ec:74:0e:09:6c:e1:2a:af:6c:3e:2f:80:33:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7ACFB4517623B0EA29CFE21AED99E020EC43239
        Validity
            Not Before: Aug 13 18:51:32 2026 GMT
            Not After : Aug 12 18:56:32 2027 GMT
        Subject: CN=7D8377F6926F99C1B8B7D4A7F8B070CA1C053491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:09:df:e6:cc:fe:2a:a9:72:66:ff:ee:a7:41:
                    81:47:20:ab:0d:74:70:79:d5:4d:97:cf:5e:de:87:
                    c3:e1:08:79:9e:04:c9:84:69:b1:79:c3:24:22:f1:
                    dd:92:6d:7c:32:5d:ba:78:52:cd:b3:a0:b4:94:a5:
                    01:d0:e2:f4:98:05:f9:fd:a5:21:a0:22:ac:9a:ab:
                    82:0c:ea:90:5c:a2:55:ea:d0:f2:da:39:2e:ed:49:
                    16:44:04:8d:71:60:66:df:fd:b2:f4:e1:15:94:e3:
                    83:07:ad:4a:ac:4f:91:b4:ba:7d:6b:e6:09:28:5b:
                    a5:a4:93:30:4a:00:c0:39:8f:66:26:75:f2:9d:49:
                    ec:67:84:90:69:3d:0c:f8:24:ea:0b:a7:21:3e:39:
                    a7:b0:47:79:1a:25:4d:ae:c2:21:81:fd:d3:4b:35:
                    c9:af:5b:7b:52:a4:0d:72:72:9d:27:6f:e7:39:c3:
                    c7:ba:50:9a:61:f4:51:b9:03:60:d8:49:40:3f:5b:
                    8e:c8:f4:bc:e1:49:83:25:c3:15:4a:ba:69:25:0b:
                    b2:69:6d:85:ad:1a:0c:50:c1:04:6f:d6:04:e4:ce:
                    22:1e:d9:a8:ce:88:3b:4b:fa:0e:8b:b7:f7:c5:d5:
                    df:98:80:26:2f:9a:e4:09:83:c4:5c:a7:47:cd:32:
                    76:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:83:77:F6:92:6F:99:C1:B8:B7:D4:A7:F8:B0:70:CA:1C:05:34:91
            X509v3 Authority Key Identifier:
                keyid:A7:AC:FB:45:17:62:3B:0E:A2:9C:FE:21:AE:D9:9E:02:0E:C4:32:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/3138362e3139362e31312e302f32342d3234203d3e203533303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.196.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d5:6f:92:02:38:d0:60:55:a1:73:ea:81:cd:76:68:66:4b:61:
         8e:c5:a8:c0:b7:1c:d9:e0:59:68:22:8b:84:2b:20:42:1e:87:
         f5:af:80:83:be:5c:08:18:55:10:94:36:2b:de:99:69:0e:f3:
         7d:57:73:81:b0:3a:31:60:5d:85:69:9f:42:1d:c3:30:af:8d:
         4f:ee:e0:98:c8:d5:e7:ba:b9:d6:c2:49:c5:9d:e3:d8:d0:a3:
         99:1b:6e:26:fb:dd:8a:92:c5:75:3a:9e:af:44:c3:e2:35:59:
         68:30:42:6d:1e:6b:fa:83:0b:96:cb:08:8b:3b:44:69:fd:ce:
         a9:b1:25:d0:73:08:04:a7:3c:b1:97:0d:02:bc:c6:ba:74:fd:
         cb:1c:7c:56:a0:64:e9:f5:ac:fc:5e:0e:07:64:9d:42:44:89:
         57:7e:27:3c:58:0c:d6:c9:a8:7a:62:76:29:66:da:49:d8:6e:
         aa:d2:9e:bb:ea:f3:75:23:e5:12:64:0f:c9:2a:a9:50:e0:de:
         ae:35:38:e3:47:00:df:3d:6a:b8:74:40:3e:0f:3d:34:c8:79:
         f2:ba:c5:97:42:ae:4f:f5:18:45:61:9a:d9:6c:a4:3f:d7:35:
         17:a7:c5:8b:b4:7e:86:3f:bb:48:d6:34:64:ca:3f:94:fe:61:
         5c:64:e7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:27:23 2026 by rpki-client