Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3138372e32342e302e302f31342d3234203d3e203232303835.roa
File:                     3138372e32342e302e302f31342d3234203d3e203232303835.roa (raw, json)
Hash identifier:          5jkgGv6GO8KL+CHi5SxSGom/qHen9JoDabkReP2Fpeo=
Subject key identifier:   52:11:4F:CE:CA:F7:E2:C3:36:0E:CB:57:E7:5C:BD:AE:E9:AC:38:1B
Certificate issuer:       /CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
Certificate serial:       2C3B865E8BD29A944A30530457F643B0347F005A
Authority key identifier: D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3138372e32342e302e302f31342d3234203d3e203232303835.roa
Signing time:             Tue 19 May 2026 15:00:00 +0000
ROA not before:           Tue 19 May 2026 14:55:00 +0000
ROA not after:            Tue 18 May 2027 15:00:00 +0000
asID:                     22085
IP address blocks:        187.24.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl
                          rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 08:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:3b:86:5e:8b:d2:9a:94:4a:30:53:04:57:f6:43:b0:34:7f:00:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
        Validity
            Not Before: May 19 14:55:00 2026 GMT
            Not After : May 18 15:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1f:37:b5:28:e3:75:d0:65:60:51:92:3e:b8:
                    14:50:cc:f1:9c:2c:ae:e7:61:76:3e:49:2a:14:f9:
                    f1:9b:ed:35:d5:96:f7:0b:72:42:4a:0d:dc:3c:4a:
                    9a:2d:ff:62:3a:c0:95:32:a6:dd:79:8d:6a:ac:c1:
                    4a:91:55:68:96:1c:56:46:06:48:53:c1:4f:09:20:
                    22:e0:25:a4:50:19:e4:40:0c:8f:a3:a3:34:d8:85:
                    1c:59:a1:9b:57:ad:69:2c:b1:b7:24:bf:85:42:4f:
                    68:95:26:b0:a2:05:c8:2f:2c:2d:5b:6f:d8:8f:f9:
                    ee:9f:d3:46:ad:f6:c3:43:13:9b:48:fa:94:8c:b1:
                    60:36:76:12:27:09:8d:13:62:aa:76:ed:06:a7:ba:
                    ba:3e:3f:58:03:43:92:cb:e4:a6:78:55:0f:e3:bd:
                    ac:2e:bb:87:61:94:3b:03:63:fb:5f:43:da:e1:37:
                    1c:02:2c:56:c6:c1:3c:2c:14:91:39:ae:33:9c:2b:
                    4d:9f:b6:ad:0b:c4:73:5c:90:dc:fa:cf:12:b0:b6:
                    40:90:8e:09:e8:96:d9:4e:7c:04:f0:a3:0d:5b:1c:
                    65:cd:ee:0d:96:07:53:de:ca:44:07:59:a0:51:1b:
                    89:50:67:29:6d:2f:91:a7:cb:95:cd:d8:b4:47:f8:
                    a3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:11:4F:CE:CA:F7:E2:C3:36:0E:CB:57:E7:5C:BD:AE:E9:AC:38:1B
            X509v3 Authority Key Identifier:
                keyid:D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3138372e32342e302e302f31342d3234203d3e203232303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.24.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         c3:fb:62:1b:2a:55:94:10:18:2e:56:17:4d:6c:52:f2:64:3b:
         c0:b3:f2:0c:32:a6:69:2b:42:28:d4:32:26:49:8d:c2:64:be:
         f7:a9:52:12:20:4a:37:a7:2b:f1:a9:c3:2e:97:d1:fd:5b:95:
         a4:aa:90:02:13:41:20:94:42:99:2f:82:1d:61:2f:d8:c3:fd:
         86:fa:94:14:4d:cd:77:89:72:f0:80:54:c2:20:e8:d0:74:7f:
         d5:d2:c1:e4:71:71:72:61:0a:e9:b7:9b:1a:f7:41:d5:82:86:
         c5:22:08:84:e9:2d:52:5e:04:69:a4:3a:f9:52:ab:1a:0b:1f:
         9c:f9:aa:ae:20:69:2c:7c:41:9a:44:49:39:86:f8:ff:ba:f6:
         6d:dc:5f:be:6b:60:39:bc:f6:ab:e7:f7:d9:05:31:28:84:5e:
         34:93:66:bf:d5:70:e2:07:b8:1a:90:7d:72:ff:4c:0d:bc:74:
         e0:9b:99:cf:1c:4e:2e:c6:ea:d2:97:15:10:78:8d:5a:53:cd:
         38:38:71:e6:7b:05:76:47:5b:56:04:aa:87:01:d1:57:5b:19:
         68:f7:67:99:29:1b:4a:50:42:c7:03:55:d2:70:c6:b6:1c:22:
         d1:eb:21:67:e1:d7:a9:21:91:40:49:3f:d7:ab:87:bd:ed:06:
         17:1c:32:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 13:33:52 2026 by rpki-client