Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/3138372e38372e32382e302f32322d3234203d3e203631363130.roa
File:                     3138372e38372e32382e302f32322d3234203d3e203631363130.roa (raw, json)
Hash identifier:          ZK94GCJeDueUtLX2HGlkBARJezl5um7V/VRRTMCjtxs=
Subject key identifier:   C7:6E:47:BD:B6:BA:0A:22:9B:04:32:22:A3:05:AD:BB:B2:B4:A9:0C
Certificate issuer:       /CN=4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD
Certificate serial:       78F2869325275A5A717572A38ED10EC47A4B49E3
Authority key identifier: 4B:3F:BC:1F:37:21:B6:D1:1E:11:B1:D8:79:FC:6A:C8:99:4D:7D:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/3138372e38372e32382e302f32322d3234203d3e203631363130.roa
Signing time:             Sun 24 May 2026 22:06:32 +0000
ROA not before:           Sun 24 May 2026 22:01:32 +0000
ROA not after:            Sun 23 May 2027 22:06:32 +0000
asID:                     61610
IP address blocks:        187.87.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.crl
                          rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f2:86:93:25:27:5a:5a:71:75:72:a3:8e:d1:0e:c4:7a:4b:49:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD
        Validity
            Not Before: May 24 22:01:32 2026 GMT
            Not After : May 23 22:06:32 2027 GMT
        Subject: CN=C76E47BDB6BA0A229B043222A305ADBBB2B4A90C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7c:35:52:5d:48:29:07:2b:93:d5:5a:81:8e:
                    f9:f7:73:70:65:c7:dc:2a:47:5b:5e:f3:f3:a2:1a:
                    f2:03:75:df:94:4d:ae:0a:ae:09:ec:98:9a:f5:9e:
                    8e:b8:96:db:9c:46:1b:f6:12:0f:6f:eb:05:8d:58:
                    61:41:93:75:e9:ee:2a:28:d2:ff:54:c3:2e:1a:aa:
                    74:8b:4a:32:68:f0:d7:c6:b3:b7:36:6e:49:91:e9:
                    f4:13:01:04:97:7f:8a:2b:50:30:7e:c2:4d:f7:97:
                    20:e8:4c:07:c3:92:fe:3c:4c:fc:90:5b:b6:48:1d:
                    ab:3d:8b:a9:c1:fa:dd:31:76:00:c3:e0:d3:d8:2a:
                    0f:de:bf:66:5d:84:66:8b:3f:d4:6c:13:e1:20:81:
                    31:94:ad:c3:7b:7b:84:a9:d0:3f:32:08:e5:83:1a:
                    c9:1a:e0:5d:4f:59:17:73:4a:19:36:0c:f9:0d:62:
                    7d:f4:8d:1d:d3:03:25:1b:64:0b:f6:38:e2:80:6d:
                    16:d4:d2:c2:b5:35:e9:78:8d:df:96:ef:dc:1c:5b:
                    23:d5:f9:4c:e3:07:aa:bc:58:d4:01:fd:36:a9:9c:
                    22:a7:f6:84:c8:38:3e:4c:22:4c:16:52:19:de:2f:
                    a2:1c:b4:ea:5e:0c:33:d1:ef:f5:06:da:4b:4f:f1:
                    fe:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:6E:47:BD:B6:BA:0A:22:9B:04:32:22:A3:05:AD:BB:B2:B4:A9:0C
            X509v3 Authority Key Identifier:
                keyid:4B:3F:BC:1F:37:21:B6:D1:1E:11:B1:D8:79:FC:6A:C8:99:4D:7D:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/3138372e38372e32382e302f32322d3234203d3e203631363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:5f:9b:b8:e4:b6:78:46:b4:c9:65:dc:9d:37:08:b9:74:e0:
         b8:10:d8:34:96:41:14:5e:e0:85:52:72:65:f0:f0:07:d4:78:
         68:fb:5f:92:ec:19:70:e1:4f:d7:12:d0:2c:e6:23:1e:ae:d7:
         60:0d:5b:d5:fe:71:af:f2:4a:87:43:19:ec:fe:7d:ef:1a:29:
         b2:1c:2b:c4:f3:0a:fe:8f:44:6c:7e:4d:48:82:47:44:0b:bd:
         ed:9a:20:fb:cf:17:86:9f:0e:61:45:de:b2:2d:25:bc:91:71:
         01:c6:9e:83:f1:b5:da:0b:37:a1:05:7f:08:7f:0d:60:dc:2b:
         a3:20:83:2e:b5:1c:ec:11:a5:14:cf:c3:76:5b:ed:e6:77:c5:
         f7:0b:af:9a:a1:96:5e:a1:77:ad:88:f0:1e:a2:cc:f0:e1:f7:
         a4:ad:10:68:14:28:73:5f:59:58:67:1f:a1:71:82:22:5f:c8:
         66:7f:04:93:62:21:59:e1:df:49:25:68:03:ff:2a:d9:a8:a2:
         65:d4:5c:d4:9c:71:73:d6:49:6a:36:a9:41:4e:7e:3b:fe:5c:
         af:ab:24:83:6e:44:14:71:f5:4d:8a:ff:f3:90:5c:bb:67:1c:
         26:f3:f7:e7:d4:3e:6b:9f:4b:62:b6:82:20:67:31:80:1a:c3:
         75:cc:17:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:04:49 2026 by rpki-client