Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/3138372e3130382e382e302f32342d3234203d3e203238323637.roa
File:                     3138372e3130382e382e302f32342d3234203d3e203238323637.roa (raw, json)
Hash identifier:          6z6dZnYBQvcY9cOSaFYedbiNmlEI88SkXAtOMhthylE=
Subject key identifier:   BB:D9:81:21:44:83:B7:A0:35:51:F0:51:16:77:1A:0F:B8:48:91:48
Certificate issuer:       /CN=FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0
Certificate serial:       06F8AF156E2411E11FB853E1A12C3F34250F92C2
Authority key identifier: FA:97:6E:B7:9B:C9:FD:D1:D7:28:3B:D5:CE:10:AC:B2:2C:1B:98:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/3138372e3130382e382e302f32342d3234203d3e203238323637.roa
Signing time:             Fri 27 Feb 2026 20:38:03 +0000
ROA not before:           Fri 27 Feb 2026 20:33:03 +0000
ROA not after:            Fri 26 Feb 2027 20:38:03 +0000
asID:                     28267
IP address blocks:        187.108.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.crl
                          rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 04:06:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:f8:af:15:6e:24:11:e1:1f:b8:53:e1:a1:2c:3f:34:25:0f:92:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0
        Validity
            Not Before: Feb 27 20:33:03 2026 GMT
            Not After : Feb 26 20:38:03 2027 GMT
        Subject: CN=BBD981214483B7A03551F05116771A0FB8489148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3f:13:3f:6c:17:a1:11:9e:fe:cd:5b:c6:a1:
                    33:53:c6:25:85:38:7f:80:a1:a6:1e:cc:a4:0c:29:
                    55:00:83:17:87:82:81:57:1d:84:fd:4d:bc:57:da:
                    56:ee:37:06:9a:55:fb:4e:55:0c:88:9c:de:78:18:
                    ba:7d:46:88:6f:af:ae:57:28:2a:7a:aa:d2:21:84:
                    1d:cf:97:f6:a0:55:3f:77:ca:41:43:41:44:84:36:
                    f2:ce:3e:74:fd:00:8a:1f:c3:fd:79:5d:55:1b:18:
                    d6:1a:ad:f8:26:d6:64:7a:9c:12:dc:9d:df:a9:b0:
                    a1:41:4f:49:c6:ac:08:e6:2b:c3:3b:6b:22:48:b0:
                    c3:52:88:26:4f:45:a7:39:e1:85:0e:16:04:6b:a2:
                    df:30:c8:b1:63:97:f0:27:cc:a0:1b:a2:ec:0f:ab:
                    cb:3f:8e:55:68:dd:6c:78:6d:b0:63:f0:32:6e:0d:
                    10:4c:7e:67:81:0b:41:ba:a0:dd:b1:30:98:70:84:
                    b6:fd:d5:66:b7:58:8d:7a:a4:b0:b3:b4:73:eb:26:
                    b8:56:29:cd:cd:fe:63:0b:93:c9:a9:27:f1:87:77:
                    a4:f5:76:3d:49:b8:7b:1b:52:62:a1:38:a1:91:0e:
                    d4:35:33:5c:4e:6c:fe:03:c5:3d:12:34:7e:61:77:
                    f3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D9:81:21:44:83:B7:A0:35:51:F0:51:16:77:1A:0F:B8:48:91:48
            X509v3 Authority Key Identifier:
                keyid:FA:97:6E:B7:9B:C9:FD:D1:D7:28:3B:D5:CE:10:AC:B2:2C:1B:98:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA976EB79BC9FDD1D7283BD5CE10ACB22C1B98C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/3138372e3130382e382e302f32342d3234203d3e203238323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:ba:ea:1d:78:27:40:90:2d:a5:e3:b1:cb:b5:7e:ef:39:22:
         93:35:67:0d:df:a9:ef:bc:ca:af:a8:c8:73:69:4f:ae:a2:e9:
         78:86:4e:03:7f:97:02:c6:31:7e:33:41:cf:c4:3a:c7:23:56:
         15:ca:e5:a0:89:98:42:62:5e:b6:e5:8a:4d:7d:f0:e7:ea:69:
         92:98:07:09:98:33:07:52:fb:3d:e3:e6:81:37:e8:06:30:d1:
         91:2e:2a:4d:d9:0b:f7:d6:38:e7:46:02:66:a2:3f:e9:2c:61:
         50:44:a9:c6:08:bc:31:fc:86:ad:af:39:fd:1b:5c:34:70:f2:
         24:f0:dc:71:80:5a:10:7e:36:dd:46:1a:15:7b:80:72:44:01:
         f0:81:70:b1:01:96:72:f6:8d:79:82:b2:0a:8e:2b:03:d0:21:
         d5:e5:da:32:72:6c:eb:37:f6:c3:d4:f1:f0:a5:20:45:64:07:
         e5:c5:18:2a:29:63:82:fd:d4:e6:0b:12:7a:30:41:bd:ac:18:
         bd:47:bb:a0:9e:cf:2e:2e:74:50:37:77:a2:0a:4f:8a:d5:5f:
         29:d1:62:79:b6:25:ee:a1:f5:47:66:b4:2d:30:62:74:92:a7:
         ec:2c:6f:7a:9f:1e:b1:93:43:ad:a8:44:3e:94:9a:34:a3:67:
         16:8b:08:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:40:26 2026 by rpki-client