Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuDjKPpJGh4kAUFgWDsui2Laicet4ps5RvZYnFWtxaU2/0/3138362e3233332e39382e302f32332d3233203d3e20323635303431.roa
File:                     3138362e3233332e39382e302f32332d3233203d3e20323635303431.roa (raw, json)
Hash identifier:          y4h0zAeWTYsvAaitAp7RraM3WKSJGxDAhHBHeEmLXzg=
Subject key identifier:   D3:86:A1:48:9B:40:5E:95:A2:D0:4E:50:20:16:FD:A3:24:F8:F2:3E
Certificate issuer:       /CN=CC78067B519494CC55A91E8673F4385D13F50F8D
Certificate serial:       73A8FC0B35C29E4798FC68B10434C1989672F9C4
Authority key identifier: CC:78:06:7B:51:94:94:CC:55:A9:1E:86:73:F4:38:5D:13:F5:0F:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC78067B519494CC55A91E8673F4385D13F50F8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuDjKPpJGh4kAUFgWDsui2Laicet4ps5RvZYnFWtxaU2/0/3138362e3233332e39382e302f32332d3233203d3e20323635303431.roa
Signing time:             Wed 08 Jul 2026 01:48:22 +0000
ROA not before:           Wed 08 Jul 2026 01:43:22 +0000
ROA not after:            Wed 07 Jul 2027 01:48:22 +0000
asID:                     265041
IP address blocks:        186.233.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuDjKPpJGh4kAUFgWDsui2Laicet4ps5RvZYnFWtxaU2/0/CC78067B519494CC55A91E8673F4385D13F50F8D.crl
                          rsync://rpki-repo.registro.br/repo/HuDjKPpJGh4kAUFgWDsui2Laicet4ps5RvZYnFWtxaU2/0/CC78067B519494CC55A91E8673F4385D13F50F8D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC78067B519494CC55A91E8673F4385D13F50F8D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 03:05:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:a8:fc:0b:35:c2:9e:47:98:fc:68:b1:04:34:c1:98:96:72:f9:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC78067B519494CC55A91E8673F4385D13F50F8D
        Validity
            Not Before: Jul  8 01:43:22 2026 GMT
            Not After : Jul  7 01:48:22 2027 GMT
        Subject: CN=D386A1489B405E95A2D04E502016FDA324F8F23E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0c:ae:d3:38:34:0b:83:3f:e6:99:99:4e:81:
                    c2:0f:fa:43:b9:bb:0b:e3:12:ce:fd:37:ca:2b:51:
                    ee:02:68:bf:2a:d8:27:38:5a:9f:e1:24:4a:7a:2a:
                    19:79:b6:71:45:69:fc:bc:aa:14:56:8f:37:a4:1f:
                    43:6d:a4:a8:9a:19:e2:31:ad:72:9b:5d:04:36:41:
                    52:ad:e6:74:e2:84:c5:e8:55:61:de:2e:83:32:03:
                    58:6f:d1:f9:50:9b:a3:df:d1:dd:2c:3a:57:0c:9b:
                    ab:77:97:39:e1:bb:0a:3f:f7:f2:44:29:2d:0d:09:
                    cf:0b:92:4e:a1:d3:c0:0e:a1:f3:c7:8f:ad:2e:07:
                    08:1d:df:18:d1:40:f9:26:23:a1:9e:44:9e:41:5f:
                    9a:39:01:4a:f1:84:b4:69:ca:b1:3d:24:eb:32:70:
                    d0:11:fd:45:d6:71:fd:32:d1:e1:13:20:59:b8:0f:
                    d0:43:36:57:de:23:ff:6b:bc:82:6b:9f:d1:a4:4a:
                    68:76:9d:d3:3d:7e:52:e9:94:fe:99:94:9f:8a:e3:
                    a0:90:ec:46:06:66:a5:88:81:11:57:f1:78:c2:a8:
                    4d:20:33:e9:d6:27:be:d3:df:30:21:0f:55:80:fb:
                    19:05:bb:de:e2:57:22:68:90:a4:10:f8:a7:ac:fb:
                    d4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:86:A1:48:9B:40:5E:95:A2:D0:4E:50:20:16:FD:A3:24:F8:F2:3E
            X509v3 Authority Key Identifier:
                keyid:CC:78:06:7B:51:94:94:CC:55:A9:1E:86:73:F4:38:5D:13:F5:0F:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuDjKPpJGh4kAUFgWDsui2Laicet4ps5RvZYnFWtxaU2/0/CC78067B519494CC55A91E8673F4385D13F50F8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC78067B519494CC55A91E8673F4385D13F50F8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuDjKPpJGh4kAUFgWDsui2Laicet4ps5RvZYnFWtxaU2/0/3138362e3233332e39382e302f32332d3233203d3e20323635303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:32:61:5f:bd:82:36:52:ae:78:76:95:7a:47:32:98:90:8a:
         55:4b:ea:4e:0b:2c:61:0c:4f:1f:d4:af:6b:01:76:29:e2:eb:
         e7:b4:0b:49:6f:2a:5a:2e:52:ff:14:89:b4:21:30:0c:8d:1d:
         cb:d1:ec:69:38:6d:4c:9e:67:3c:e9:1e:15:7c:45:81:b4:15:
         19:60:f3:5c:66:bf:57:11:1b:87:15:e9:30:11:c4:1d:0d:e2:
         c1:75:b5:0e:60:bc:94:c7:cd:af:84:98:ea:71:b0:8d:4d:09:
         e9:db:70:93:4d:aa:42:22:54:6e:06:18:02:7a:47:0d:4f:7a:
         40:bc:0a:be:42:d3:a0:3a:76:bb:04:07:de:d7:96:b0:ce:90:
         1d:8f:c7:b1:f9:20:df:30:5d:0c:5e:71:27:4d:99:e7:f8:f0:
         6f:fe:13:18:5b:e8:bd:0a:51:18:a8:9f:77:d5:3d:94:86:68:
         62:e1:b1:81:b7:f1:84:23:42:26:5b:44:60:b6:6d:b9:f6:6c:
         e1:12:f3:30:bc:69:e2:40:bd:a7:57:d5:dd:83:a8:1d:3c:f7:
         bc:c0:d2:91:49:f9:cf:93:cd:7b:f4:8e:7c:28:d6:81:6e:85:
         65:da:c5:b0:2d:05:ad:3a:db:0d:af:29:10:7e:5b:f9:5d:80:
         0f:35:40:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:55:31 2026 by rpki-client