Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7KobXW123o5SU4mwUndRT8NjLSKH9xjNqEzcbgnYGUA/0/3138362e3235312e3132372e302f32342d3234203d3e20323634343737.roa
File:                     3138362e3235312e3132372e302f32342d3234203d3e20323634343737.roa (raw, json)
Hash identifier:          TeoEkq8M96QgzryT6TPuyXSrT3iXRGrtYT37jnqaZBs=
Subject key identifier:   E7:44:18:96:AC:E7:A3:89:C0:00:77:17:5C:2B:D1:39:0E:83:D2:55
Certificate issuer:       /CN=75C4EB1C867E4EE2947D5E310FB7F25B8E79A37B
Certificate serial:       0E6161B814242DD5F56DD675D1E1C6F42E6C9A7A
Authority key identifier: 75:C4:EB:1C:86:7E:4E:E2:94:7D:5E:31:0F:B7:F2:5B:8E:79:A3:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75C4EB1C867E4EE2947D5E310FB7F25B8E79A37B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KobXW123o5SU4mwUndRT8NjLSKH9xjNqEzcbgnYGUA/0/3138362e3235312e3132372e302f32342d3234203d3e20323634343737.roa
Signing time:             Fri 18 Sep 2026 21:21:39 +0000
ROA not before:           Fri 18 Sep 2026 21:16:39 +0000
ROA not after:            Fri 17 Sep 2027 21:21:39 +0000
asID:                     264477
IP address blocks:        186.251.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7KobXW123o5SU4mwUndRT8NjLSKH9xjNqEzcbgnYGUA/0/75C4EB1C867E4EE2947D5E310FB7F25B8E79A37B.crl
                          rsync://rpki-repo.registro.br/repo/7KobXW123o5SU4mwUndRT8NjLSKH9xjNqEzcbgnYGUA/0/75C4EB1C867E4EE2947D5E310FB7F25B8E79A37B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75C4EB1C867E4EE2947D5E310FB7F25B8E79A37B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 23:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:61:61:b8:14:24:2d:d5:f5:6d:d6:75:d1:e1:c6:f4:2e:6c:9a:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75C4EB1C867E4EE2947D5E310FB7F25B8E79A37B
        Validity
            Not Before: Sep 18 21:16:39 2026 GMT
            Not After : Sep 17 21:21:39 2027 GMT
        Subject: CN=E7441896ACE7A389C00077175C2BD1390E83D255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c3:2b:ee:d9:3d:02:fa:f6:a8:f9:c4:a1:ad:
                    d1:5a:ae:1d:f7:4d:03:7c:ab:e1:e1:50:fd:9c:c8:
                    50:ff:bc:bf:30:7b:39:74:81:86:ef:71:e2:19:0e:
                    3e:e9:fc:da:95:44:44:73:4a:92:ad:5f:93:5e:b2:
                    ef:f2:5c:57:77:83:ff:55:20:2d:b9:d0:cd:f0:84:
                    23:78:2a:a4:29:c1:3d:a1:7e:af:89:fa:8a:83:c7:
                    bf:1e:4b:16:0c:f9:9c:a9:47:3c:24:1e:73:c2:28:
                    54:ce:d7:17:42:f6:98:90:cb:66:d3:28:29:b8:4e:
                    3d:b7:aa:ce:64:5c:b7:36:2d:21:50:4d:cc:1d:78:
                    ac:9f:8e:d5:fd:df:4d:71:ba:a3:44:80:21:27:f0:
                    95:f1:be:26:a8:37:bd:76:34:4e:fd:e0:1d:b4:a5:
                    a0:8b:cb:87:1c:3f:6e:c0:07:4a:66:cf:a0:a1:3b:
                    92:77:88:a7:12:e9:53:9d:4b:a2:00:58:78:5d:6c:
                    29:fb:60:9e:76:d9:9f:e0:2c:c7:ba:db:ea:85:8b:
                    a7:ad:d8:3d:ad:35:0b:06:5c:8b:85:47:20:87:0f:
                    44:86:f5:e0:a4:ee:e0:80:75:ce:30:7b:39:d4:38:
                    61:e2:db:3d:89:0d:ef:82:fc:2b:c2:d3:b9:08:c0:
                    a9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:44:18:96:AC:E7:A3:89:C0:00:77:17:5C:2B:D1:39:0E:83:D2:55
            X509v3 Authority Key Identifier:
                keyid:75:C4:EB:1C:86:7E:4E:E2:94:7D:5E:31:0F:B7:F2:5B:8E:79:A3:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KobXW123o5SU4mwUndRT8NjLSKH9xjNqEzcbgnYGUA/0/75C4EB1C867E4EE2947D5E310FB7F25B8E79A37B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75C4EB1C867E4EE2947D5E310FB7F25B8E79A37B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KobXW123o5SU4mwUndRT8NjLSKH9xjNqEzcbgnYGUA/0/3138362e3235312e3132372e302f32342d3234203d3e20323634343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:bf:a4:14:e8:e1:c9:32:0e:87:c6:29:22:a6:5e:f2:4b:40:
         7f:bc:7b:88:21:2d:16:43:fd:a8:9b:be:e8:75:69:95:84:df:
         7f:cf:e1:63:00:3e:ad:cf:88:a9:bf:62:2a:12:4f:49:6f:13:
         41:1e:f9:39:90:44:b1:0f:47:10:f6:0b:f9:4f:62:a4:57:19:
         6b:8f:72:af:fd:29:c4:eb:55:70:5a:f2:4e:c9:67:5e:a5:98:
         8e:67:87:c8:24:94:bd:72:1f:db:1d:c1:9e:e8:ad:7b:34:27:
         6e:0a:f9:66:87:92:15:ef:ab:32:98:13:ab:5d:c6:ab:c0:c8:
         12:e8:05:68:0c:6f:99:0d:ab:98:ab:3e:37:a7:a8:f0:7b:f9:
         3a:3d:4b:1c:1f:56:f3:79:c0:16:0c:d8:c9:dc:46:a9:79:7f:
         81:97:8d:f6:cb:1c:9f:6b:e6:e6:43:c7:ab:e5:db:58:bc:f7:
         7c:49:73:e3:32:d5:79:a1:2a:23:e8:19:71:a4:43:37:16:94:
         e2:2f:de:0d:04:1f:3c:d4:59:26:da:6d:c5:6b:3a:22:04:93:
         03:55:73:1d:c4:e0:e2:e2:fa:0b:1d:0c:b8:ee:05:ae:df:6e:
         ac:af:77:f4:3d:b7:b5:67:41:c5:da:75:a9:1c:74:d8:35:79:
         24:f6:c3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 09:07:52 2026 by rpki-client