Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/R3BCuQkCmtm9XPtsYgVjTwkmdj1o3pzVniduHXfMvtw/0/3138372e36322e38342e302f32322d3234203d3e20323639373135.roa
File:                     3138372e36322e38342e302f32322d3234203d3e20323639373135.roa (raw, json)
Hash identifier:          fBUTsr4FEtJYbxs9cmO6Cp77EUwB0S1heiuUA7tE5M8=
Subject key identifier:   0A:A3:05:00:55:60:1C:A1:E3:36:E3:2F:5A:41:0C:12:9C:AB:67:54
Certificate issuer:       /CN=522BB6EAE8DB57CFE80C2B5CE41D68103344C3E5
Certificate serial:       13C180B6F624204B9B6DEFBEB65B2C1B6FDCA0B4
Authority key identifier: 52:2B:B6:EA:E8:DB:57:CF:E8:0C:2B:5C:E4:1D:68:10:33:44:C3:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/522BB6EAE8DB57CFE80C2B5CE41D68103344C3E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/R3BCuQkCmtm9XPtsYgVjTwkmdj1o3pzVniduHXfMvtw/0/3138372e36322e38342e302f32322d3234203d3e20323639373135.roa
Signing time:             Mon 31 Aug 2026 16:45:21 +0000
ROA not before:           Mon 31 Aug 2026 16:40:21 +0000
ROA not after:            Mon 30 Aug 2027 16:45:21 +0000
asID:                     269715
IP address blocks:        187.62.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/R3BCuQkCmtm9XPtsYgVjTwkmdj1o3pzVniduHXfMvtw/0/522BB6EAE8DB57CFE80C2B5CE41D68103344C3E5.crl
                          rsync://rpki-repo.registro.br/repo/R3BCuQkCmtm9XPtsYgVjTwkmdj1o3pzVniduHXfMvtw/0/522BB6EAE8DB57CFE80C2B5CE41D68103344C3E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/522BB6EAE8DB57CFE80C2B5CE41D68103344C3E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 03:12:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:c1:80:b6:f6:24:20:4b:9b:6d:ef:be:b6:5b:2c:1b:6f:dc:a0:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522BB6EAE8DB57CFE80C2B5CE41D68103344C3E5
        Validity
            Not Before: Aug 31 16:40:21 2026 GMT
            Not After : Aug 30 16:45:21 2027 GMT
        Subject: CN=0AA3050055601CA1E336E32F5A410C129CAB6754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:30:ae:20:09:8c:e8:13:c0:45:3e:45:2f:e4:
                    98:6c:0c:f5:cb:01:84:7d:df:e4:9c:55:b5:50:33:
                    dd:0b:95:6b:0d:d6:ff:57:42:89:b3:cd:0d:8b:7d:
                    34:18:34:65:c8:1b:95:76:b3:71:0c:a4:aa:e5:6a:
                    05:ae:a7:04:f7:ad:e3:ab:59:e9:3e:3d:44:ba:22:
                    7b:a2:53:e9:9d:68:c0:11:f2:8a:35:4f:41:51:49:
                    1b:0f:70:a9:84:77:e2:38:fa:95:14:2a:53:63:a5:
                    68:84:89:19:b4:f7:a6:29:7c:64:91:33:d7:87:7d:
                    ec:98:fc:2e:14:51:cf:5b:89:b1:f4:a1:93:63:2a:
                    8c:3e:e5:12:ce:89:ba:e4:f1:0e:72:d8:14:52:6d:
                    78:e4:6d:83:1b:5e:8e:5e:47:63:d6:2c:3e:52:15:
                    11:b4:46:e9:f2:5a:a9:33:89:d6:48:d5:18:18:68:
                    1e:c2:8d:f9:5e:3e:d4:83:22:de:01:0c:c6:18:2e:
                    b0:3b:a9:8f:9c:0c:f5:1b:bb:32:2d:3d:6a:d5:74:
                    e6:f9:46:82:89:54:ac:e3:5c:82:3f:94:64:e2:e4:
                    d7:e3:c5:08:cc:ac:e0:d7:39:33:b7:90:54:a2:10:
                    86:95:99:78:83:5d:9c:c2:66:0f:82:0c:71:b9:72:
                    22:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A3:05:00:55:60:1C:A1:E3:36:E3:2F:5A:41:0C:12:9C:AB:67:54
            X509v3 Authority Key Identifier:
                keyid:52:2B:B6:EA:E8:DB:57:CF:E8:0C:2B:5C:E4:1D:68:10:33:44:C3:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/R3BCuQkCmtm9XPtsYgVjTwkmdj1o3pzVniduHXfMvtw/0/522BB6EAE8DB57CFE80C2B5CE41D68103344C3E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/522BB6EAE8DB57CFE80C2B5CE41D68103344C3E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/R3BCuQkCmtm9XPtsYgVjTwkmdj1o3pzVniduHXfMvtw/0/3138372e36322e38342e302f32322d3234203d3e20323639373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:4b:4e:f9:18:da:19:81:70:26:32:00:40:b0:a5:0c:fc:05:
         f7:34:e8:5f:b9:11:47:44:1f:fb:6b:c1:5c:ea:78:c7:ca:e7:
         34:53:fe:d9:a7:16:13:26:f7:e5:8d:5b:87:eb:c1:db:57:8d:
         73:33:d4:5d:84:1b:dd:56:54:07:a6:e7:50:3c:e9:75:da:ee:
         e5:8c:c4:e0:d5:ab:dc:c3:8e:73:3b:db:ff:f3:63:1b:23:72:
         95:ec:cf:7e:8a:2c:83:92:0c:17:75:5d:05:1b:d0:d7:ba:19:
         f2:70:7d:44:32:2d:4c:51:28:ea:46:4a:be:4d:9b:d1:a9:aa:
         b3:0b:60:26:b7:4a:15:cc:ad:ce:13:20:94:e3:e3:be:0d:b0:
         c4:db:0b:85:32:7b:66:e6:ab:0b:10:d8:82:d4:9a:80:28:0b:
         fa:d7:39:27:3f:b9:df:28:68:c1:e1:09:c2:9a:1e:b4:ab:ec:
         3e:ce:f5:87:d0:6a:5f:81:96:36:88:2b:87:58:cc:39:1d:75:
         5c:77:ad:9b:2e:cd:eb:6a:43:3d:1f:77:72:c4:11:28:9b:39:
         46:1c:ee:2b:6a:44:8f:66:95:73:a0:3b:5e:25:81:be:6f:13:
         3d:a3:44:53:d3:14:90:c9:d0:d5:fd:bd:95:54:1f:7c:7b:ce:
         18:54:61:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:01:43 2026 by rpki-client