Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/3138372e3130382e31312e302f32342d3234203d3e203238323637.roa
File:                     3138372e3130382e31312e302f32342d3234203d3e203238323637.roa (raw, json)
Hash identifier:          P9zsW2CjWQr0Z0AePu8rGsMt46Ng3uyC2JKrrdnlWLg=
Subject key identifier:   6D:F0:DB:E3:1A:34:EE:C7:8C:9E:3B:68:7D:1C:97:18:A2:8B:84:64
Certificate issuer:       /CN=FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0
Certificate serial:       6DF7BC3E2EDE2BAF343D17F60B3F1AD30FC40A96
Authority key identifier: FA:97:6E:B7:9B:C9:FD:D1:D7:28:3B:D5:CE:10:AC:B2:2C:1B:98:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/3138372e3130382e31312e302f32342d3234203d3e203238323637.roa
Signing time:             Fri 27 Feb 2026 20:37:57 +0000
ROA not before:           Fri 27 Feb 2026 20:32:57 +0000
ROA not after:            Fri 26 Feb 2027 20:37:57 +0000
asID:                     28267
IP address blocks:        187.108.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.crl
                          rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 04:06:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:f7:bc:3e:2e:de:2b:af:34:3d:17:f6:0b:3f:1a:d3:0f:c4:0a:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0
        Validity
            Not Before: Feb 27 20:32:57 2026 GMT
            Not After : Feb 26 20:37:57 2027 GMT
        Subject: CN=6DF0DBE31A34EEC78C9E3B687D1C9718A28B8464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d6:7b:0d:92:50:51:89:ee:8e:2c:52:32:f0:
                    c6:4c:15:57:06:29:d1:4c:7e:3e:25:63:c6:66:ce:
                    db:e8:40:85:9e:79:dc:ff:99:a8:fe:ae:e7:01:36:
                    e1:e4:2c:67:cf:b6:79:5e:1e:ae:2a:0c:7b:31:30:
                    d5:59:3d:b5:56:3e:de:ed:7f:7e:a6:cf:e7:ea:bd:
                    f5:8d:bc:af:f5:f2:9a:e2:d2:df:c2:7f:d5:5a:b4:
                    a0:0c:8a:cc:1c:02:e8:a2:6c:58:32:52:27:8b:b4:
                    f1:95:ed:9d:73:6f:8c:c7:7a:d8:9f:47:3b:20:c5:
                    d8:be:42:91:17:b1:3f:6a:04:fc:d8:f2:fa:8d:3b:
                    84:2f:27:a7:ad:36:d9:42:8d:dd:b6:72:6f:9f:5e:
                    36:e4:7a:1c:97:4c:6e:c6:41:c3:ee:f5:6b:37:47:
                    d4:d5:f0:06:42:1a:ec:c2:32:a1:39:a5:b5:d5:81:
                    b1:64:72:8b:93:9a:64:42:bd:40:35:8c:dc:ba:ce:
                    8d:95:49:7c:99:5d:73:a5:28:e5:d5:ac:e4:42:45:
                    cb:8a:50:32:c1:8e:16:7f:ac:62:a6:66:62:ac:e1:
                    16:84:db:b5:28:29:32:f5:d0:e1:14:79:70:b8:d3:
                    b7:25:4d:0f:ab:8f:f9:3e:17:0e:cc:02:7b:dc:b8:
                    cc:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F0:DB:E3:1A:34:EE:C7:8C:9E:3B:68:7D:1C:97:18:A2:8B:84:64
            X509v3 Authority Key Identifier:
                keyid:FA:97:6E:B7:9B:C9:FD:D1:D7:28:3B:D5:CE:10:AC:B2:2C:1B:98:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/3138372e3130382e31312e302f32342d3234203d3e203238323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:05:43:f8:8f:df:8b:e7:0e:e9:0a:87:9e:ed:46:2b:c0:5e:
         9d:3a:1d:63:63:22:af:ac:93:d5:3d:1e:cd:6c:43:c0:0a:38:
         d2:f1:d6:82:30:d7:cc:cc:14:e4:8e:2b:3e:1d:7e:54:5b:8d:
         8d:38:4f:84:70:52:97:e5:4a:be:c7:f5:d4:bf:7d:3a:d0:a1:
         e9:67:db:c2:83:2d:67:2d:eb:de:97:b1:9a:70:c1:b9:c3:1e:
         bb:dc:2f:24:7a:f9:cc:aa:a1:46:3b:a6:51:fc:3a:cc:a0:1d:
         06:c8:a9:65:c3:6d:43:20:08:34:78:e3:cf:c5:53:2e:86:d6:
         0e:f2:6c:3f:c1:1c:1a:a3:32:13:78:55:d8:eb:54:e6:e7:be:
         5b:4a:76:1a:5d:26:ef:80:91:d9:0c:b6:03:85:65:5e:a9:ff:
         04:9a:ee:3f:8a:e1:c6:57:7e:f9:07:67:e1:f9:81:57:d0:1e:
         e3:e1:ea:fd:5b:83:6c:38:d5:2f:4c:49:37:72:2f:6b:44:60:
         96:c5:4f:35:06:b5:a6:c6:a6:c1:4c:cd:94:f6:e8:0f:6b:88:
         a9:f5:4d:76:91:7f:bc:10:9f:9e:65:f4:99:2e:ca:89:8c:79:
         3d:05:3a:e4:17:8a:06:53:e5:f5:e1:b8:de:47:66:11:d4:fc:
         b6:2f:29:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:34:51 2026 by rpki-client