Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7KobXW123o5SU4mwUndRT8NjLSKH9xjNqEzcbgnYGUA/0/3138362e3231392e3137322e302f32342d3234203d3e20323632373534.roa
File:                     3138362e3231392e3137322e302f32342d3234203d3e20323632373534.roa (raw, json)
Hash identifier:          Y3TN4R/SCDOn2pKGzHk2KX4jfcK28rJ+hu/JXR6SA2o=
Subject key identifier:   50:DB:14:84:EC:A6:76:A7:3C:41:4B:BD:F5:33:76:84:76:17:7F:15
Certificate issuer:       /CN=75C4EB1C867E4EE2947D5E310FB7F25B8E79A37B
Certificate serial:       440836B57558F1BDF30974FCC6EC1692EA5456E0
Authority key identifier: 75:C4:EB:1C:86:7E:4E:E2:94:7D:5E:31:0F:B7:F2:5B:8E:79:A3:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75C4EB1C867E4EE2947D5E310FB7F25B8E79A37B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KobXW123o5SU4mwUndRT8NjLSKH9xjNqEzcbgnYGUA/0/3138362e3231392e3137322e302f32342d3234203d3e20323632373534.roa
Signing time:             Mon 05 Oct 2026 14:41:16 +0000
ROA not before:           Mon 05 Oct 2026 14:36:16 +0000
ROA not after:            Mon 04 Oct 2027 14:41:16 +0000
asID:                     262754
IP address blocks:        186.219.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7KobXW123o5SU4mwUndRT8NjLSKH9xjNqEzcbgnYGUA/0/75C4EB1C867E4EE2947D5E310FB7F25B8E79A37B.crl
                          rsync://rpki-repo.registro.br/repo/7KobXW123o5SU4mwUndRT8NjLSKH9xjNqEzcbgnYGUA/0/75C4EB1C867E4EE2947D5E310FB7F25B8E79A37B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75C4EB1C867E4EE2947D5E310FB7F25B8E79A37B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 16:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:08:36:b5:75:58:f1:bd:f3:09:74:fc:c6:ec:16:92:ea:54:56:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75C4EB1C867E4EE2947D5E310FB7F25B8E79A37B
        Validity
            Not Before: Oct  5 14:36:16 2026 GMT
            Not After : Oct  4 14:41:16 2027 GMT
        Subject: CN=50DB1484ECA676A73C414BBDF533768476177F15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8f:c8:79:ca:ca:33:27:15:a4:f6:83:bf:f6:
                    8d:36:f5:47:ac:e2:2f:13:34:80:14:ee:04:1b:1a:
                    0c:9b:15:6b:e4:fc:b2:4d:55:5e:a4:99:13:fb:47:
                    ab:13:bf:73:da:73:3d:e3:45:16:35:70:8a:e4:c9:
                    bd:1c:43:db:6d:12:54:e3:b6:2f:9f:a3:32:e0:05:
                    91:04:36:2f:24:65:2d:dd:fb:cc:ac:b8:fb:85:b1:
                    f3:cf:58:77:18:ae:85:6a:bf:6b:f3:34:91:1c:cf:
                    da:9e:0d:d5:ee:3d:ad:dd:09:cc:04:75:02:86:fa:
                    1f:c7:ec:cc:e0:54:ad:7d:9f:e4:96:36:e8:26:f1:
                    26:7e:7a:96:42:6d:6e:4a:cf:99:24:e7:24:23:50:
                    72:25:19:ed:8b:fa:0d:e3:04:ba:9b:48:ac:93:78:
                    d9:fd:fd:63:9b:03:83:dc:9b:da:23:73:50:0c:41:
                    ce:38:d1:dc:3d:4b:95:55:dc:5e:e4:4c:c2:27:c6:
                    29:20:10:2f:9f:1a:34:ac:43:10:28:ef:5d:e7:80:
                    ed:d0:dc:9f:a3:17:c7:f9:fe:75:94:ad:7e:9a:71:
                    6a:76:73:be:b7:44:01:e3:13:5a:75:f4:a1:e7:d3:
                    47:23:92:c1:fc:b8:eb:f1:34:14:be:9a:7d:7b:80:
                    b6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:DB:14:84:EC:A6:76:A7:3C:41:4B:BD:F5:33:76:84:76:17:7F:15
            X509v3 Authority Key Identifier:
                keyid:75:C4:EB:1C:86:7E:4E:E2:94:7D:5E:31:0F:B7:F2:5B:8E:79:A3:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KobXW123o5SU4mwUndRT8NjLSKH9xjNqEzcbgnYGUA/0/75C4EB1C867E4EE2947D5E310FB7F25B8E79A37B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75C4EB1C867E4EE2947D5E310FB7F25B8E79A37B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KobXW123o5SU4mwUndRT8NjLSKH9xjNqEzcbgnYGUA/0/3138362e3231392e3137322e302f32342d3234203d3e20323632373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:ad:d1:9a:07:a4:44:5a:cb:de:4e:85:53:c6:6a:d4:21:96:
         e7:c6:d3:82:20:7a:5f:07:75:f2:3e:e9:9e:34:0e:fe:a4:ba:
         26:8c:84:c3:0a:61:b9:91:9a:ab:c4:d0:07:13:17:34:ad:4b:
         c2:9a:4d:3a:fb:71:c4:27:45:19:52:18:f4:34:89:d8:62:02:
         7f:c4:3f:83:68:19:94:2a:c0:c7:d4:1a:fe:a2:b3:ee:54:16:
         78:5e:94:b1:ce:5e:68:bb:2a:02:67:4c:19:cb:7c:56:b3:d3:
         35:78:60:6b:7f:6b:a6:ea:34:3c:e2:75:dc:3c:d3:f5:14:c6:
         19:07:a7:ab:75:fc:93:20:20:e3:7c:ef:d2:56:32:50:4d:bc:
         97:3a:c3:a9:90:d1:ad:25:88:41:50:9f:7c:e0:d9:67:df:36:
         a9:ce:6c:4d:5b:a9:db:5c:2c:80:d5:4b:46:69:a3:9c:4d:8a:
         fc:92:57:c7:dd:4b:3a:50:86:01:78:f3:e3:ff:0a:cf:83:b9:
         4a:5a:97:86:e1:61:4c:7e:1b:e0:c2:9a:a1:6b:fa:92:53:c4:
         cc:40:ad:ec:ae:c7:fe:35:5b:95:15:9c:72:63:3f:67:5b:92:
         f6:0f:b4:7a:dd:44:79:87:83:55:59:6e:19:3a:53:c6:48:a5:
         53:cc:d3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:52:16 2026 by rpki-client