Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/3138372e3130382e302e302f32342d3234203d3e203238323637.roa
File:                     3138372e3130382e302e302f32342d3234203d3e203238323637.roa (raw, json)
Hash identifier:          6HPodlCTr5e6g4aOWjW5pew4QyFcwIk6aesv7tmNpVw=
Subject key identifier:   F3:68:D7:60:FD:40:70:4D:62:D5:20:CD:90:2D:36:B1:70:E9:EC:D6
Certificate issuer:       /CN=FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0
Certificate serial:       5D6579378BFAA77F1A61CE49EBD8CA89739489F9
Authority key identifier: FA:97:6E:B7:9B:C9:FD:D1:D7:28:3B:D5:CE:10:AC:B2:2C:1B:98:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/3138372e3130382e302e302f32342d3234203d3e203238323637.roa
Signing time:             Fri 27 Feb 2026 20:37:37 +0000
ROA not before:           Fri 27 Feb 2026 20:32:37 +0000
ROA not after:            Fri 26 Feb 2027 20:37:37 +0000
asID:                     28267
IP address blocks:        187.108.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.crl
                          rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 04:06:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:65:79:37:8b:fa:a7:7f:1a:61:ce:49:eb:d8:ca:89:73:94:89:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0
        Validity
            Not Before: Feb 27 20:32:37 2026 GMT
            Not After : Feb 26 20:37:37 2027 GMT
        Subject: CN=F368D760FD40704D62D520CD902D36B170E9ECD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:fd:b5:fd:84:b8:42:ea:73:71:0d:dd:65:51:
                    01:6b:8d:b9:dd:ea:8d:26:e5:2c:52:90:bd:73:27:
                    03:45:f6:d2:26:9b:1f:02:bb:d0:2d:16:6e:5e:3c:
                    0d:aa:33:3a:d1:bb:f0:54:a9:cf:08:c6:f6:ad:29:
                    ed:d1:ad:3c:e7:f1:ea:25:8a:c8:f8:56:c5:70:5f:
                    91:7b:e0:9e:27:2f:6c:9f:80:d9:eb:94:ae:ec:b1:
                    eb:ed:83:07:13:96:b0:db:f1:a7:d3:2d:a9:23:fe:
                    44:e1:f9:6d:09:08:42:1d:69:2b:98:1d:b9:e2:e2:
                    30:cb:5b:73:b7:2e:c9:78:ed:a9:9e:48:13:18:49:
                    01:fd:3d:84:3e:d7:27:fd:a5:28:59:f2:b9:d5:37:
                    19:9c:b2:94:49:4b:e1:32:68:db:40:ff:e4:2b:d3:
                    64:c5:69:07:8c:63:9c:4f:3a:73:28:45:09:e7:d3:
                    64:30:ff:40:da:4f:db:c9:e6:2e:c0:fe:0a:8b:83:
                    68:2a:9d:17:35:73:3e:42:e4:5b:31:17:e6:ee:63:
                    7c:68:cd:9b:ba:14:18:90:94:9a:e4:f0:70:d5:74:
                    4d:e2:43:76:a4:8a:ba:f4:b4:49:60:b9:27:54:54:
                    8e:8a:67:24:a6:52:db:b2:fb:af:4f:36:09:6e:8d:
                    74:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:68:D7:60:FD:40:70:4D:62:D5:20:CD:90:2D:36:B1:70:E9:EC:D6
            X509v3 Authority Key Identifier:
                keyid:FA:97:6E:B7:9B:C9:FD:D1:D7:28:3B:D5:CE:10:AC:B2:2C:1B:98:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/3138372e3130382e302e302f32342d3234203d3e203238323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:d5:67:c4:bf:99:18:10:03:18:e9:90:21:c9:a7:cf:7c:27:
         99:7b:18:1f:9c:0b:25:15:d3:41:5c:cc:65:71:68:ee:7a:fe:
         76:28:ba:f0:9a:bf:8f:83:de:c5:fc:d4:3f:ed:71:c0:3e:a5:
         73:f5:ce:c9:91:74:5b:e4:fa:bc:c3:4b:62:fe:f7:c2:9e:28:
         7a:51:04:d6:74:86:20:58:8e:86:8c:3d:a7:07:58:c0:db:d0:
         c6:85:73:38:3f:e2:e4:2f:54:34:34:60:92:29:e5:35:29:6c:
         ee:d7:5b:02:0b:2b:63:f9:32:13:79:a9:b0:c6:24:a0:8c:c2:
         b9:94:7c:ad:47:65:c0:ed:fa:53:c9:cd:01:b1:20:dd:c3:72:
         8e:34:aa:e7:44:64:b2:77:1a:6b:9e:6f:b8:73:d9:40:dd:2a:
         45:7b:38:34:26:b5:1d:c2:ea:fa:c3:5d:a2:d3:24:3d:71:06:
         fe:e9:63:df:3b:cd:b9:b1:d4:37:8f:c7:60:06:b1:97:96:7b:
         8d:b5:49:6f:8c:a9:3a:a1:77:2b:81:1d:b1:fb:f9:db:22:8d:
         49:ec:22:37:33:7c:87:d6:11:5f:11:02:38:ae:c7:86:9c:52:
         f6:60:3f:a0:a2:21:1a:8a:23:9f:1e:22:bc:af:7f:d3:08:e2:
         5c:95:d4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:21:27 2026 by rpki-client