Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3133382e3138362e3131362e302f32322d3234203d3e203238313436.roa
File:                     3133382e3138362e3131362e302f32322d3234203d3e203238313436.roa (raw, json)
Hash identifier:          Jr4qdq+8eaordl+V39YOawLtrjOjXbDGgkT7MBWBIzE=
Subject key identifier:   67:9D:58:83:A6:33:4F:94:99:69:50:5A:C3:D2:15:04:28:5E:93:55
Certificate issuer:       /CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
Certificate serial:       7A93087251EB39EF9543B240D1CE1437255814C9
Authority key identifier: 7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3133382e3138362e3131362e302f32322d3234203d3e203238313436.roa
Signing time:             Mon 13 Apr 2026 13:48:35 +0000
ROA not before:           Mon 13 Apr 2026 13:43:35 +0000
ROA not after:            Mon 12 Apr 2027 13:48:35 +0000
asID:                     28146
IP address blocks:        138.186.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 05:41:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:93:08:72:51:eb:39:ef:95:43:b2:40:d1:ce:14:37:25:58:14:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
        Validity
            Not Before: Apr 13 13:43:35 2026 GMT
            Not After : Apr 12 13:48:35 2027 GMT
        Subject: CN=679D5883A6334F949969505AC3D21504285E9355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:15:1b:eb:69:3f:0c:ca:c6:e2:cb:46:ec:2b:
                    bc:ee:9c:1f:20:07:9b:29:12:37:f8:9c:cf:07:f1:
                    f0:8d:4a:d6:84:28:15:ab:cf:ca:2c:b3:9a:f9:f9:
                    04:c2:5e:5d:97:1b:8f:ec:db:be:cb:cc:2e:5c:1a:
                    e5:cd:ec:4d:ba:c1:db:69:15:01:da:88:1e:4d:48:
                    ba:10:1b:11:db:b7:ff:83:86:96:89:ec:a5:eb:21:
                    c2:7b:e0:1b:01:97:00:46:ac:d7:80:41:f6:8b:13:
                    03:df:17:ac:31:e4:7c:1b:aa:dc:70:93:b9:99:0b:
                    07:28:e1:eb:a3:81:e4:ad:3e:1f:1d:5a:1d:fe:0d:
                    4f:a3:c0:e1:6a:0c:0b:28:4e:46:c9:a7:24:35:cd:
                    e3:aa:2b:ef:0c:0c:4e:ae:4a:09:9e:b6:6f:e8:2d:
                    41:4a:81:ac:40:d6:02:14:32:0d:2f:24:7f:66:f1:
                    4c:fb:13:47:31:ff:93:c2:85:13:85:00:db:0a:8b:
                    a6:d1:d8:b4:da:eb:07:40:97:30:65:c7:56:34:74:
                    ae:00:9d:b2:f6:20:d6:22:b5:e5:76:16:0b:c1:d0:
                    8e:0f:b5:ab:fb:b8:79:0f:ee:3f:37:a6:83:cb:b3:
                    1a:34:bf:39:3a:49:e8:44:a9:21:b9:e0:97:7c:23:
                    91:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:9D:58:83:A6:33:4F:94:99:69:50:5A:C3:D2:15:04:28:5E:93:55
            X509v3 Authority Key Identifier:
                keyid:7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3133382e3138362e3131362e302f32322d3234203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:f4:bf:04:59:02:da:ff:fd:98:92:bb:9a:47:2c:e1:6b:61:
         99:c3:e4:a3:58:9c:8e:e8:15:0a:3a:94:23:d6:73:77:64:0e:
         a2:a3:95:28:63:7f:ca:68:62:e7:95:7b:37:65:3e:d3:cc:a0:
         6d:a2:c2:ad:c4:7f:97:e8:a3:a9:08:fd:9e:63:88:f1:f4:1a:
         1a:42:c5:e5:40:27:6c:d2:5a:33:a2:4e:b2:b3:60:59:2c:88:
         cf:cd:5f:30:22:4e:bf:4d:13:c1:3b:e9:e3:ac:b3:c8:9c:8d:
         41:86:0a:1c:1d:04:1a:bd:36:10:6c:a8:73:36:88:9e:9c:62:
         57:fe:29:1f:c6:67:2e:0e:2a:42:d2:d9:35:ef:cb:71:f2:ae:
         f6:ab:ae:a5:a9:5c:aa:25:ea:31:0f:a4:a2:ff:04:c8:f7:ea:
         2e:51:64:ae:34:42:0e:04:fe:ab:45:36:59:7a:bc:c3:33:5f:
         1f:19:bb:1d:33:55:71:a1:dd:a8:3e:81:43:ef:fa:d6:8d:46:
         60:bd:4e:cc:56:0d:a9:ec:63:2d:a8:93:78:b5:4c:b1:03:d2:
         d0:4d:28:ef:03:f1:1f:f3:c6:aa:fe:23:32:c5:fd:91:b7:72:
         4d:b3:dd:5f:ea:7c:7a:6a:ef:27:8c:04:b1:98:e3:28:00:58:
         63:f3:c7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:36:11 2026 by rpki-client