Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3138362e3230382e3134342e302f32302d3230203d3e20323632343539.roa
File:                     3138362e3230382e3134342e302f32302d3230203d3e20323632343539.roa (raw, json)
Hash identifier:          QPqlbTHX8AdB8C+SiBrZUWUa4DfSwkzH3/7HOTKIJwI=
Subject key identifier:   DD:A0:23:10:39:90:3B:2D:E4:B4:C1:8E:C1:F1:9E:CA:DC:A2:28:F5
Certificate issuer:       /CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
Certificate serial:       0FEA191C53C34ECCC27E813A4738FC169AD81587
Authority key identifier: B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3138362e3230382e3134342e302f32302d3230203d3e20323632343539.roa
Signing time:             Fri 17 Apr 2026 21:55:46 +0000
ROA not before:           Fri 17 Apr 2026 21:50:46 +0000
ROA not after:            Fri 16 Apr 2027 21:55:46 +0000
asID:                     262459
IP address blocks:        186.208.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl
                          rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Apr 2026 00:37:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ea:19:1c:53:c3:4e:cc:c2:7e:81:3a:47:38:fc:16:9a:d8:15:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
        Validity
            Not Before: Apr 17 21:50:46 2026 GMT
            Not After : Apr 16 21:55:46 2027 GMT
        Subject: CN=DDA0231039903B2DE4B4C18EC1F19ECADCA228F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:7e:73:b8:00:e9:09:41:4f:e9:dc:e4:b7:85:
                    c3:2b:97:22:57:32:58:f8:8f:d3:8d:b1:d1:a4:e1:
                    3c:22:3c:43:e8:29:e7:a3:b7:a7:4e:88:4e:3a:5c:
                    82:73:cd:c7:89:b0:0a:79:4b:66:12:48:cf:38:7a:
                    82:02:8a:1d:ab:81:20:87:d2:83:54:84:7c:2d:04:
                    0e:60:14:7c:6c:45:80:49:c4:e2:6f:ee:1a:e0:8e:
                    65:15:17:ce:5b:c4:91:dc:7d:78:1d:7a:52:c8:2c:
                    bc:eb:45:b8:6d:d0:80:dc:8d:13:02:da:d4:17:0e:
                    16:4e:11:fd:46:1f:bd:bb:12:03:45:81:00:3c:f8:
                    ef:38:9b:33:79:d5:66:06:6f:52:ce:aa:77:84:12:
                    b9:b1:f0:eb:41:78:a0:e7:ff:cf:bc:f8:22:4b:6e:
                    03:56:db:f3:f1:79:58:ec:84:f5:a9:d1:90:55:b7:
                    55:d0:93:14:d4:50:0f:47:74:16:1a:ca:e3:df:6d:
                    b7:69:67:08:03:0a:f8:90:04:75:a6:1d:ab:bc:88:
                    ca:70:64:d4:91:94:6c:46:9e:c2:1f:9a:4f:c0:c2:
                    66:f1:3d:19:0f:74:c0:84:a4:0f:55:5e:6e:f7:1f:
                    64:fd:02:52:14:e4:0f:55:2f:63:f2:0e:a9:46:86:
                    4b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A0:23:10:39:90:3B:2D:E4:B4:C1:8E:C1:F1:9E:CA:DC:A2:28:F5
            X509v3 Authority Key Identifier:
                keyid:B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3138362e3230382e3134342e302f32302d3230203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8d:87:de:68:ea:c5:00:66:28:a9:5c:92:3e:68:c7:cf:41:a9:
         a6:32:24:1c:2d:33:f4:bd:4f:b6:1c:dc:d5:d2:0e:e4:ed:2e:
         59:90:c8:1f:51:6a:d1:a6:19:85:2a:95:21:e0:16:b7:64:e0:
         8f:61:6a:1d:9f:28:dd:66:1c:ac:af:19:27:73:89:1f:f0:7a:
         2e:df:08:29:62:68:4b:49:a8:a7:47:cf:7a:0e:1b:4a:6e:8f:
         c5:10:74:16:d3:dd:1f:80:be:ff:52:d9:51:f3:e8:9a:45:de:
         b4:bd:9d:73:6d:0b:a1:9e:3c:fc:98:26:d5:88:f2:89:6f:73:
         a2:a2:cd:5a:b3:3a:65:73:e1:f0:6d:db:5a:a8:7a:70:c6:9c:
         ef:c6:84:0c:4a:9f:2a:62:c6:ee:cd:89:14:7f:54:21:cc:1a:
         37:42:1c:3e:fe:08:6c:7b:cf:8c:49:5d:0a:c8:64:c6:b1:97:
         8f:b9:25:83:22:00:41:49:7a:4d:94:f8:89:ba:2c:6b:f0:be:
         f5:b5:8d:be:22:a2:ab:74:e7:c0:27:bb:cb:fa:a4:ad:87:ef:
         3d:2d:1b:bf:86:68:01:86:23:34:8a:d7:f1:9f:87:59:f5:46:
         ce:72:91:6f:c4:8f:76:8b:89:62:b3:38:14:28:ba:08:24:c2:
         79:57:a2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:13:00 2026 by rpki-client