Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3138372e36332e38382e302f32332d3233203d3e20323632343434.roa
File:                     3138372e36332e38382e302f32332d3233203d3e20323632343434.roa (raw, json)
Hash identifier:          okp+xosi4xk7b+BWEBSgdBpQtHVkIbHDDNUa6BqjGlg=
Subject key identifier:   F7:E9:C6:08:4B:09:A0:D0:1B:B2:69:72:36:FA:04:EC:C7:71:95:FC
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       4F6228158A55CC406844D4DA6AB618C98697F499
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3138372e36332e38382e302f32332d3233203d3e20323632343434.roa
Signing time:             Wed 10 Jun 2026 14:27:21 +0000
ROA not before:           Wed 10 Jun 2026 14:22:21 +0000
ROA not after:            Wed 09 Jun 2027 14:27:21 +0000
asID:                     262444
IP address blocks:        187.63.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
                          rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 19:44:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:62:28:15:8a:55:cc:40:68:44:d4:da:6a:b6:18:c9:86:97:f4:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Jun 10 14:22:21 2026 GMT
            Not After : Jun  9 14:27:21 2027 GMT
        Subject: CN=F7E9C6084B09A0D01BB2697236FA04ECC77195FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:66:b1:d1:9b:cc:bf:35:bd:89:bf:e4:9b:b3:
                    e3:d4:b2:a5:4c:ca:ec:01:e2:7d:04:b0:62:bc:ee:
                    21:2d:a3:23:78:f3:16:5a:5a:2d:37:65:f0:35:b0:
                    a9:8b:3c:10:a7:ea:5a:01:7b:07:d6:08:a6:52:2c:
                    e7:dc:93:b5:21:d4:6b:1e:b5:61:5e:8c:55:af:f3:
                    c3:6e:ae:48:65:a0:49:99:fe:46:6c:61:57:d0:9a:
                    f5:d6:1a:70:32:ca:a9:85:16:43:25:6e:75:e1:af:
                    2e:d5:1e:10:33:6d:ab:40:b6:b9:7c:99:b4:f0:18:
                    4b:a0:ee:a6:e9:2b:50:ce:55:d6:c9:8b:33:0a:5a:
                    8f:0b:8b:99:39:c7:31:d0:79:d1:e9:69:75:d8:54:
                    fa:c9:ea:43:6c:28:ba:10:0f:b8:93:e9:67:62:4b:
                    b1:1a:69:4d:c6:ef:b5:2f:2c:ff:03:35:b2:c6:a4:
                    ad:40:ce:11:52:8f:e6:95:01:5a:16:70:bd:40:ca:
                    96:74:32:8e:f3:7b:e7:ee:18:1d:54:74:2a:71:2e:
                    bc:bd:4f:47:85:1e:a8:e7:c1:ba:d5:0a:f6:9d:56:
                    da:9d:99:de:58:c4:e1:53:9d:e3:b6:6a:f2:a2:48:
                    f5:48:bd:20:50:ab:53:cc:8a:6a:ff:05:df:4b:31:
                    12:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E9:C6:08:4B:09:A0:D0:1B:B2:69:72:36:FA:04:EC:C7:71:95:FC
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3138372e36332e38382e302f32332d3233203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:77:9a:82:80:0d:e1:28:15:78:61:ed:cc:96:de:a0:42:c6:
         ec:66:f4:75:e4:4e:c1:50:0b:83:4a:06:ad:c9:db:68:31:2e:
         c8:50:13:08:d6:d1:a7:05:31:2d:29:c1:6f:2e:66:81:0c:b1:
         9a:00:9e:5d:e5:62:a1:64:f6:33:af:77:23:27:9e:60:97:13:
         95:e5:7f:72:63:33:b6:45:ad:68:c7:b7:82:8f:22:29:5c:17:
         1f:1b:b4:dc:7d:26:ac:d9:b6:2e:06:09:c5:a7:78:53:29:72:
         dd:37:ba:63:e7:44:e5:92:da:dc:ec:fe:15:39:d2:1e:80:b7:
         de:3b:e0:14:ea:15:f5:33:19:a3:27:33:af:5a:ea:c6:44:94:
         89:4a:3d:0f:03:ed:b6:ac:b3:1e:eb:c0:ce:70:c3:ad:e4:9d:
         b3:52:58:da:c3:82:e2:5b:4b:05:7c:0a:e1:00:da:67:ab:c8:
         72:48:b6:8f:05:d6:9a:94:f2:1e:06:13:a9:34:82:1a:d6:7a:
         06:79:5b:5a:84:95:c4:e5:f0:29:e1:d8:0b:88:d9:36:54:0d:
         35:b0:2a:e9:5f:27:60:94:2d:f3:cf:00:9b:86:c2:24:1c:74:
         72:01:e9:2b:c6:65:1a:11:a4:f2:02:e2:37:0d:0a:ab:98:97:
         ab:0b:ec:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 12:26:32 2026 by rpki-client