Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/3138372e3130382e31322e302f32342d3234203d3e203238323637.roa
File:                     3138372e3130382e31322e302f32342d3234203d3e203238323637.roa (raw, json)
Hash identifier:          eMM9uoAugl9kgNxfE3ksig1no48qSgQZ12VvKYxBuCM=
Subject key identifier:   B5:74:0A:26:19:59:B8:76:35:5C:1E:E4:14:6B:D1:90:F5:CE:B3:4C
Certificate issuer:       /CN=FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0
Certificate serial:       2F6739C2BA6EFE3D33B9E32F1CC9F8F07BA772B9
Authority key identifier: FA:97:6E:B7:9B:C9:FD:D1:D7:28:3B:D5:CE:10:AC:B2:2C:1B:98:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/3138372e3130382e31322e302f32342d3234203d3e203238323637.roa
Signing time:             Fri 27 Feb 2026 20:37:51 +0000
ROA not before:           Fri 27 Feb 2026 20:32:51 +0000
ROA not after:            Fri 26 Feb 2027 20:37:51 +0000
asID:                     28267
IP address blocks:        187.108.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.crl
                          rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 04:06:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:67:39:c2:ba:6e:fe:3d:33:b9:e3:2f:1c:c9:f8:f0:7b:a7:72:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0
        Validity
            Not Before: Feb 27 20:32:51 2026 GMT
            Not After : Feb 26 20:37:51 2027 GMT
        Subject: CN=B5740A261959B876355C1EE4146BD190F5CEB34C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:40:de:bf:65:d6:cb:6d:30:ec:f2:d8:73:17:
                    c6:15:ee:b7:15:0a:35:35:d6:56:35:05:78:32:78:
                    2f:78:d1:20:f7:ad:c5:03:34:b5:85:35:bd:24:b8:
                    18:b5:99:8d:f3:26:d1:4d:09:b9:10:50:dc:5e:9a:
                    78:cd:86:0e:b7:9d:bb:7e:f0:b6:b0:f1:c0:10:df:
                    5a:78:15:ce:9d:82:e6:e3:be:c4:99:f1:ee:e5:ad:
                    4d:92:70:d2:5f:d8:08:c3:85:4a:fc:4d:7a:2f:ad:
                    87:d5:66:c9:e6:e7:e2:2d:15:8a:d0:f5:79:92:ca:
                    e0:89:b6:80:c6:6d:f2:6b:88:f7:6c:84:2c:d4:1e:
                    8b:f0:85:5a:7a:fb:58:d8:41:c9:5e:ba:af:eb:3a:
                    a7:38:e8:b2:f2:1c:2f:c3:68:23:47:a8:08:0b:c7:
                    ba:0c:90:f8:36:18:37:2c:0d:70:3c:1f:4d:cb:81:
                    91:b0:9a:6a:be:a7:b9:34:d8:39:3c:8a:e5:8a:25:
                    14:f4:f7:13:85:5a:97:1e:ef:b5:1f:98:9e:a9:0a:
                    42:55:68:2a:63:f8:13:58:a2:91:2b:d0:06:b2:8b:
                    57:d5:3d:41:bf:b0:e6:af:2f:a7:bb:02:24:72:32:
                    63:59:d4:74:fc:4d:30:93:90:5c:92:28:8b:b3:b9:
                    26:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:74:0A:26:19:59:B8:76:35:5C:1E:E4:14:6B:D1:90:F5:CE:B3:4C
            X509v3 Authority Key Identifier:
                keyid:FA:97:6E:B7:9B:C9:FD:D1:D7:28:3B:D5:CE:10:AC:B2:2C:1B:98:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/3138372e3130382e31322e302f32342d3234203d3e203238323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:cd:84:ae:7c:af:57:87:b7:1c:65:17:da:6d:f1:a4:0f:3a:
         aa:85:fa:63:a3:25:90:5b:76:fd:08:26:a1:ea:72:7b:e5:67:
         ac:4b:10:a7:13:c0:62:01:5c:bf:54:a6:2f:25:2f:2d:99:26:
         40:e8:b1:a1:eb:74:61:6e:4c:56:e8:17:aa:78:5f:de:da:d3:
         57:18:d4:0a:5b:58:84:82:c3:cc:d5:38:e5:7d:9e:76:b1:93:
         a1:63:94:53:2f:25:74:b8:be:e5:4a:63:44:1d:99:2f:16:15:
         b7:60:7b:6c:c0:ab:25:89:60:f1:83:c1:b5:d3:d9:8f:06:07:
         29:5f:9b:82:d7:b6:1e:52:74:04:56:da:2c:fd:86:9f:3d:50:
         8d:c2:1f:9d:8e:f2:7a:69:63:42:35:19:4b:09:c2:de:96:d7:
         7e:6b:34:ad:28:79:18:ca:21:47:52:e1:49:2b:39:bc:9b:6f:
         92:e3:31:22:57:33:a6:c0:e1:2d:5c:11:b2:4d:a8:26:9d:0b:
         18:d2:73:26:23:59:dc:c1:03:62:1a:97:26:ad:79:06:b3:e2:
         17:0a:e7:c2:f1:ad:3f:62:c0:21:91:7c:42:61:2c:5e:16:3b:
         3c:e0:77:e0:74:75:9b:f0:22:86:1b:09:4a:ff:1d:0f:dc:2e:
         df:ad:2a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:04:34 2026 by rpki-client