Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/3138372e3130382e362e302f32342d3234203d3e203238323637.roa
File:                     3138372e3130382e362e302f32342d3234203d3e203238323637.roa (raw, json)
Hash identifier:          AQtnVfNCMFTxt720V0U+XyyK0Tkio2gWAM0JuLlQDsg=
Subject key identifier:   F8:FA:31:D3:E5:07:21:45:4E:19:9E:14:51:2D:36:40:C5:6B:D4:05
Certificate issuer:       /CN=FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0
Certificate serial:       56A0115629202AADC3C427818B7099D2A92F69FF
Authority key identifier: FA:97:6E:B7:9B:C9:FD:D1:D7:28:3B:D5:CE:10:AC:B2:2C:1B:98:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/3138372e3130382e362e302f32342d3234203d3e203238323637.roa
Signing time:             Fri 27 Feb 2026 20:38:09 +0000
ROA not before:           Fri 27 Feb 2026 20:33:09 +0000
ROA not after:            Fri 26 Feb 2027 20:38:09 +0000
asID:                     28267
IP address blocks:        187.108.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.crl
                          rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 04:06:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:a0:11:56:29:20:2a:ad:c3:c4:27:81:8b:70:99:d2:a9:2f:69:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0
        Validity
            Not Before: Feb 27 20:33:09 2026 GMT
            Not After : Feb 26 20:38:09 2027 GMT
        Subject: CN=F8FA31D3E50721454E199E14512D3640C56BD405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2d:85:7c:f0:85:4d:b3:0b:43:a1:87:c5:27:
                    4b:1e:f5:b6:28:0d:b6:6a:d5:fb:38:1e:b4:92:ad:
                    a8:07:e5:56:ec:e1:39:4c:2e:6d:96:a2:00:e1:b4:
                    fd:68:3e:dc:6a:c2:7a:a2:e5:f1:e8:02:d7:d2:4e:
                    a8:fa:ee:12:b8:27:f4:7a:d7:8e:7c:86:2d:61:8b:
                    fa:5a:22:57:2c:93:fa:aa:49:42:6d:43:b7:69:ba:
                    b5:0a:07:45:72:d0:11:b6:65:43:85:01:d7:e0:21:
                    02:f1:e5:a5:60:37:35:df:b1:f8:98:73:82:35:5d:
                    e7:b2:a6:b5:e0:59:c2:31:ef:82:06:a4:53:b5:8f:
                    2c:a0:20:ce:fe:ec:fd:4d:17:36:a3:b5:75:39:94:
                    1f:9a:ca:f1:60:ba:d2:fc:22:67:8c:e6:76:b1:12:
                    f0:6c:d9:57:01:de:10:dc:1e:08:d0:70:5f:2f:aa:
                    d5:ee:b6:d8:d6:fc:56:ca:89:66:86:7d:e6:31:5c:
                    37:50:b2:fd:79:11:e4:d1:bf:4c:34:6a:3c:f2:f0:
                    1f:db:40:53:9b:9d:a1:4d:17:ee:55:7f:96:1e:19:
                    cd:60:11:00:7d:bf:07:ae:ec:50:87:18:44:af:a3:
                    5e:2c:8e:0d:b7:54:64:a2:48:29:68:92:a9:1a:37:
                    ab:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FA:31:D3:E5:07:21:45:4E:19:9E:14:51:2D:36:40:C5:6B:D4:05
            X509v3 Authority Key Identifier:
                keyid:FA:97:6E:B7:9B:C9:FD:D1:D7:28:3B:D5:CE:10:AC:B2:2C:1B:98:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/3138372e3130382e362e302f32342d3234203d3e203238323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:4d:b0:9f:8a:b8:04:d7:08:0f:ce:a2:ad:54:40:d8:b9:22:
         63:94:98:05:cd:40:0e:d8:2c:7a:40:b0:a1:dd:c0:65:20:93:
         92:d1:66:f7:1e:da:9b:bd:b4:7a:5d:3d:d6:06:cc:ac:27:0e:
         0a:e9:53:2d:98:6f:e8:f0:65:61:1b:c6:e9:d1:bf:4c:cf:5a:
         35:d2:e5:34:3f:0f:8d:97:db:48:5a:38:e3:c3:3b:db:d6:4c:
         5e:c5:e9:3a:a4:d0:4d:32:ab:9b:55:fd:3e:57:42:47:27:dc:
         00:dd:11:c7:45:a8:0a:b0:2d:98:a3:d3:c8:12:86:b8:e4:d6:
         cb:73:fb:08:fe:eb:5e:d7:85:1e:c8:a5:aa:96:44:a0:9c:c7:
         b7:c4:34:1c:16:61:6c:1e:8c:c4:c8:57:1b:81:29:ef:50:72:
         e0:f9:49:86:16:7b:3c:e5:ef:17:a5:7f:19:c8:07:b0:f9:79:
         d4:71:f5:a7:61:f0:7d:d4:01:4b:52:79:7c:3f:eb:33:03:9b:
         17:00:c7:b5:b0:5b:20:05:56:63:35:f7:7e:6d:7d:45:8b:32:
         45:0f:d0:7e:c6:cd:3b:87:68:25:d8:3f:68:88:36:e2:40:5f:
         a8:e7:04:cb:a8:1b:83:3b:37:b0:4b:a5:02:5e:96:bc:1c:f3:
         d1:10:cc:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:17:10 2026 by rpki-client