Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/3138362e3139362e382e302f32332d3234203d3e203533303535.roa
File:                     3138362e3139362e382e302f32332d3234203d3e203533303535.roa (raw, json)
Hash identifier:          yroZj0U0Y+Plt9tC8yJE1tmU66ZZJZ0m+fs3Lf7Uq2Y=
Subject key identifier:   E5:E9:27:43:F3:A8:63:C6:2D:53:6F:A3:9D:9F:2B:D3:59:9B:26:7A
Certificate issuer:       /CN=A7ACFB4517623B0EA29CFE21AED99E020EC43239
Certificate serial:       65928EDDCE7ADD4B5741768DF907A9FDE8A3BEA4
Authority key identifier: A7:AC:FB:45:17:62:3B:0E:A2:9C:FE:21:AE:D9:9E:02:0E:C4:32:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/3138362e3139362e382e302f32332d3234203d3e203533303535.roa
Signing time:             Fri 22 May 2026 20:35:28 +0000
ROA not before:           Fri 22 May 2026 20:30:28 +0000
ROA not after:            Fri 21 May 2027 20:35:28 +0000
asID:                     53055
IP address blocks:        186.196.8.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.crl
                          rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 09:56:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:92:8e:dd:ce:7a:dd:4b:57:41:76:8d:f9:07:a9:fd:e8:a3:be:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7ACFB4517623B0EA29CFE21AED99E020EC43239
        Validity
            Not Before: May 22 20:30:28 2026 GMT
            Not After : May 21 20:35:28 2027 GMT
        Subject: CN=E5E92743F3A863C62D536FA39D9F2BD3599B267A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:75:18:4a:03:3d:09:68:b8:13:8b:dc:65:df:
                    8b:d0:2a:da:a8:c6:8e:c7:1a:10:0e:33:01:3a:9d:
                    3d:cb:9c:b6:c5:8b:3d:5d:bc:2a:6d:0a:23:a5:ba:
                    71:25:bd:4b:ac:6d:de:2b:8a:46:94:0e:87:48:1d:
                    49:5d:8d:15:00:a3:71:b7:3f:ae:88:3d:0e:f8:54:
                    ec:60:c5:77:92:c4:2c:97:d2:1b:53:f8:3f:c8:d6:
                    9a:f0:a4:c7:94:83:5c:c7:97:91:76:de:ce:82:2c:
                    95:84:58:7a:7c:54:69:3f:38:62:94:a4:2c:5c:40:
                    e0:e4:9e:7d:6e:98:af:ee:05:6c:bf:6d:ce:62:c7:
                    a4:ef:63:42:3c:4e:53:c6:ac:07:a6:c6:32:15:8e:
                    a8:e8:3b:48:5c:9f:00:39:bd:dc:32:77:20:db:e6:
                    f8:e5:55:14:6c:a5:1f:a5:4c:cc:3e:30:e2:9f:6b:
                    da:1b:0e:d5:16:04:d5:7b:b3:3e:3f:cd:13:73:4f:
                    3f:97:93:ec:85:9f:65:c1:f3:aa:fc:2b:b5:6e:db:
                    08:e3:6f:eb:89:18:43:27:4e:d0:c9:b0:76:25:9d:
                    da:0f:31:c7:3e:5a:98:e8:66:f5:10:59:f5:18:4c:
                    a2:b4:7a:46:d1:0c:3f:98:95:91:9f:3b:85:b0:c6:
                    97:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E9:27:43:F3:A8:63:C6:2D:53:6F:A3:9D:9F:2B:D3:59:9B:26:7A
            X509v3 Authority Key Identifier:
                keyid:A7:AC:FB:45:17:62:3B:0E:A2:9C:FE:21:AE:D9:9E:02:0E:C4:32:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/3138362e3139362e382e302f32332d3234203d3e203533303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.196.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:18:ab:f4:55:22:09:fa:bc:3d:d2:7b:c4:77:35:f7:be:07:
         ac:6a:06:58:ee:98:2e:ca:3e:5a:0e:3c:14:69:74:f7:78:79:
         fb:20:fe:12:77:07:6f:e6:9d:df:56:5a:86:70:74:27:8f:1c:
         5d:6e:c1:78:40:db:f1:af:52:6c:00:f3:cb:fe:b6:d6:82:32:
         af:9c:00:19:f8:31:94:bf:b4:c3:46:b7:88:fb:67:6d:b5:66:
         db:5e:be:69:ce:97:93:df:f6:16:02:0e:d1:24:d9:1a:05:bb:
         3e:46:cb:2c:e8:50:71:79:97:16:9f:62:de:11:0a:b3:8f:b2:
         16:3a:b6:b6:b6:57:cc:74:31:13:1b:15:87:a2:30:c4:7b:2f:
         90:3e:b8:90:e1:1b:1d:ac:ce:dd:66:1b:2d:59:bf:0e:87:27:
         76:57:a6:86:6b:fb:17:31:0e:fc:cc:31:73:a2:89:e5:43:09:
         2c:b5:dc:55:9a:6c:82:a5:a6:5b:83:93:f0:b2:7c:9b:6f:9f:
         c5:43:44:79:81:4e:45:58:ba:80:56:37:8a:72:0e:bc:e3:c3:
         93:fb:fc:16:22:46:05:fa:89:49:6c:e1:20:2b:8e:5f:28:e5:
         95:52:0b:b2:cd:0d:c5:5f:9c:30:c8:89:c9:c7:ff:16:39:01:
         5a:71:cc:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 17:08:04 2026 by rpki-client