Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3138392e33382e32322e302f32342d3234203d3e20323733343336.roa
File:                     3138392e33382e32322e302f32342d3234203d3e20323733343336.roa (raw, json)
Hash identifier:          uqVATVAXHxGzXRKWZce/xfZFE7+uQYQNycn8pFxZclM=
Subject key identifier:   E7:A8:A7:47:0F:94:32:68:15:14:BD:F0:88:17:18:D6:FB:F4:F0:6D
Certificate issuer:       /CN=BD1E87C8514998E362292741C70F693178FDD20E
Certificate serial:       4CD5A09DBE030D7CBF9282D84B877DBF895F4E3C
Authority key identifier: BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3138392e33382e32322e302f32342d3234203d3e20323733343336.roa
Signing time:             Fri 05 Jun 2026 21:32:43 +0000
ROA not before:           Fri 05 Jun 2026 21:27:43 +0000
ROA not after:            Fri 04 Jun 2027 21:32:43 +0000
asID:                     273436
IP address blocks:        189.38.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl
                          rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 13:30:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:d5:a0:9d:be:03:0d:7c:bf:92:82:d8:4b:87:7d:bf:89:5f:4e:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD1E87C8514998E362292741C70F693178FDD20E
        Validity
            Not Before: Jun  5 21:27:43 2026 GMT
            Not After : Jun  4 21:32:43 2027 GMT
        Subject: CN=E7A8A7470F9432681514BDF0881718D6FBF4F06D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5a:23:e7:c8:ae:d6:7f:95:1e:97:a8:e6:8b:
                    df:0b:fe:fc:60:2a:9d:56:4c:26:62:79:34:db:46:
                    df:5c:c8:77:a5:b5:17:17:fb:c7:17:74:a7:24:46:
                    37:23:56:ae:9c:6d:2e:2f:28:24:60:ab:61:f7:a1:
                    90:0a:7a:a4:12:ef:92:d5:82:a9:d7:13:42:5f:11:
                    11:f6:d4:1e:86:87:b2:88:7a:68:18:a4:92:93:a8:
                    87:4d:99:0a:af:25:f2:63:10:b0:58:7f:3f:e6:ee:
                    ba:b6:38:48:2d:fd:c8:6d:e2:a3:54:c4:1b:e6:a9:
                    e6:9f:ba:83:29:38:44:a0:b2:66:72:1c:02:06:34:
                    c3:1b:ae:60:e2:85:21:e9:db:1d:d9:f3:5e:78:e0:
                    bc:68:52:50:e1:2b:76:29:39:a4:c3:51:1e:7f:8e:
                    59:e9:67:49:34:e1:06:a3:9f:3e:37:2c:30:be:1f:
                    05:c5:91:85:da:c0:30:2f:a5:56:90:c8:43:46:cc:
                    38:d9:7d:e4:f3:6c:94:5d:c7:e1:b8:4f:20:d2:bf:
                    8e:fa:f6:28:d2:08:fe:07:b1:31:d7:2b:97:92:8b:
                    dc:97:2c:49:2d:a6:08:2f:0c:77:70:d4:a1:70:a9:
                    67:6a:ab:90:0d:2f:3b:a1:6f:a8:65:9e:d1:80:40:
                    25:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A8:A7:47:0F:94:32:68:15:14:BD:F0:88:17:18:D6:FB:F4:F0:6D
            X509v3 Authority Key Identifier:
                keyid:BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3138392e33382e32322e302f32342d3234203d3e20323733343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:3c:a8:57:c8:40:ce:81:94:e4:94:23:8f:25:57:5e:0a:90:
         7a:e7:ed:55:e8:30:cf:b6:dc:80:9a:ac:01:a3:c0:3f:9f:4e:
         3c:43:9f:34:c3:b9:2f:32:75:98:eb:f5:cd:52:af:4d:b4:35:
         e8:d9:93:6f:89:54:0b:8c:13:76:50:99:99:0c:e6:b9:49:7f:
         c4:7d:9f:3f:9f:82:8c:b8:3c:d3:77:27:ec:49:6b:18:04:a9:
         50:68:7c:81:37:8f:70:44:3b:41:cd:ef:fc:fb:b8:85:b4:ff:
         e8:b6:8b:5b:b2:ce:96:02:29:ab:c5:5a:53:16:73:2e:fc:f1:
         b0:72:50:2f:33:50:e6:7d:4e:83:0f:e9:e6:8e:b0:a5:fe:bb:
         35:17:e9:67:cb:ae:cc:18:9b:92:0c:0b:e3:d5:2b:6f:da:11:
         14:5d:8e:db:1f:e4:0c:f0:b4:85:67:0d:33:7a:a9:a7:6f:30:
         b6:65:1a:b7:a7:ad:17:f9:11:be:11:77:d1:81:2a:b5:e5:7e:
         e0:9a:66:18:06:b4:c7:fe:43:a6:2a:e9:55:82:14:39:fa:e0:
         eb:3c:f9:01:be:45:a6:6b:0b:4f:26:7a:e6:bb:78:59:7e:bb:
         38:c7:c3:53:c2:0c:0d:44:cb:50:1d:64:80:ab:48:7e:19:de:
         09:72:ca:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:40:31 2026 by rpki-client