Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/3138362e3139362e31322e302f32342d3234203d3e203533303535.roa
File:                     3138362e3139362e31322e302f32342d3234203d3e203533303535.roa (raw, json)
Hash identifier:          rkfSZlXfInYV7WvS3fbaZXSoBiZP2mo8reI5AWH5dhk=
Subject key identifier:   F1:B2:EF:D0:66:DF:63:D9:C8:31:26:C8:A9:26:3A:16:16:5D:51:5D
Certificate issuer:       /CN=A7ACFB4517623B0EA29CFE21AED99E020EC43239
Certificate serial:       06E18F7E07CAD9B2BF1A82DDC01F58A9D4652610
Authority key identifier: A7:AC:FB:45:17:62:3B:0E:A2:9C:FE:21:AE:D9:9E:02:0E:C4:32:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/3138362e3139362e31322e302f32342d3234203d3e203533303535.roa
Signing time:             Thu 13 Aug 2026 18:56:32 +0000
ROA not before:           Thu 13 Aug 2026 18:51:32 +0000
ROA not after:            Thu 12 Aug 2027 18:56:32 +0000
asID:                     53055
IP address blocks:        186.196.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.crl
                          rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 23:08:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:e1:8f:7e:07:ca:d9:b2:bf:1a:82:dd:c0:1f:58:a9:d4:65:26:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7ACFB4517623B0EA29CFE21AED99E020EC43239
        Validity
            Not Before: Aug 13 18:51:32 2026 GMT
            Not After : Aug 12 18:56:32 2027 GMT
        Subject: CN=F1B2EFD066DF63D9C83126C8A9263A16165D515D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:33:82:5c:13:29:73:4a:7e:a7:f2:0a:71:d6:
                    99:6a:93:e2:57:da:56:8b:9f:0e:8f:d8:92:ef:bd:
                    e6:36:ce:83:67:d5:a6:44:4d:e2:2b:99:15:f5:d3:
                    7a:e4:aa:7e:c4:2a:79:a2:54:1c:98:12:89:ea:4d:
                    9d:37:38:f5:3b:01:c1:0d:96:44:d4:52:60:66:69:
                    ff:7a:68:5c:d5:6e:aa:17:db:d7:13:17:07:5c:d2:
                    68:df:5a:d5:00:57:07:ec:35:07:8f:f9:5a:51:e1:
                    f9:34:bb:b7:28:18:2f:ff:2b:4a:e3:33:37:c3:e7:
                    91:bf:29:3e:ba:ad:45:62:e7:56:3a:d0:65:9b:08:
                    d3:9f:8d:dd:0e:84:95:38:cf:90:42:6b:0f:cf:1f:
                    12:c2:cd:34:05:8a:50:3b:bd:7d:3c:f8:ec:95:f9:
                    b6:18:ee:ad:50:e2:b6:d6:7b:32:71:b0:1e:38:c6:
                    33:81:af:0b:0c:d1:b9:21:17:c0:5e:b5:b1:fc:f8:
                    b4:f4:6e:43:3c:a8:9c:5c:18:6a:80:a2:e5:0d:a2:
                    8e:7d:12:e7:d1:9d:5b:68:dc:51:93:ee:19:cb:89:
                    b4:01:37:b9:a7:57:ce:87:fa:46:bb:d7:23:71:54:
                    f9:b1:b0:ff:67:4a:06:5f:a7:31:68:3d:93:f5:19:
                    86:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B2:EF:D0:66:DF:63:D9:C8:31:26:C8:A9:26:3A:16:16:5D:51:5D
            X509v3 Authority Key Identifier:
                keyid:A7:AC:FB:45:17:62:3B:0E:A2:9C:FE:21:AE:D9:9E:02:0E:C4:32:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/3138362e3139362e31322e302f32342d3234203d3e203533303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.196.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:37:42:ff:c0:45:9c:90:95:fe:37:b1:6d:19:a0:83:29:f6:
         73:2a:fb:57:5a:ef:9d:10:29:ce:c0:8b:3a:cf:e4:50:70:97:
         5a:53:90:e1:a4:d8:01:2a:1a:b5:5d:3a:32:5d:3e:98:f4:28:
         2b:cd:ec:74:51:c2:48:39:89:38:05:ea:d7:68:d0:46:d8:72:
         e4:65:d4:af:84:b6:1d:fd:c6:e5:37:8b:51:b6:ba:ef:58:36:
         80:c7:66:9f:39:dd:e1:6b:ed:96:2c:fe:e6:8f:e4:dc:ed:12:
         e7:4e:86:2e:0e:0f:2f:d8:4e:92:a6:9c:73:3d:31:0f:41:4b:
         d3:a1:01:41:8f:07:64:d2:98:6c:87:93:74:42:bc:32:cb:97:
         3f:5a:f5:ba:32:b3:2a:6c:59:52:a5:ba:af:56:e7:d6:64:96:
         eb:27:87:bc:e2:1e:81:38:64:e7:61:ac:6b:cc:47:24:3b:54:
         62:13:da:b7:9e:d6:31:25:ca:9c:72:c3:a6:e9:81:9c:ec:a2:
         d9:94:90:ba:fe:33:ff:79:e9:b6:10:f4:c3:39:1a:84:c8:b8:
         02:e9:64:54:82:9d:1a:ed:d0:f2:ac:26:8f:a5:a1:d5:13:5d:
         b5:c8:8c:bf:71:bb:04:96:f7:67:93:8d:ed:9e:95:c8:6b:d8:
         e3:f6:7f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:27:27 2026 by rpki-client