Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3138362e3231362e3134342e302f32312d3234203d3e2037303438.roa
File:                     3138362e3231362e3134342e302f32312d3234203d3e2037303438.roa (raw, json)
Hash identifier:          f6hz5KGPEbObSSd+UVmLl9rgsygfzWEfxPs/zBRT3kE=
Subject key identifier:   85:3A:58:EA:BB:D9:8C:DE:7C:A0:57:03:D2:4E:44:B3:C5:20:B1:74
Certificate issuer:       /CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
Certificate serial:       377D8DCEFE6CD85EC352E2A1469E4DA2573532BA
Authority key identifier: 7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3138362e3231362e3134342e302f32312d3234203d3e2037303438.roa
Signing time:             Mon 13 Apr 2026 13:48:36 +0000
ROA not before:           Mon 13 Apr 2026 13:43:36 +0000
ROA not after:            Mon 12 Apr 2027 13:48:36 +0000
asID:                     7048
IP address blocks:        186.216.144.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 05:41:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:7d:8d:ce:fe:6c:d8:5e:c3:52:e2:a1:46:9e:4d:a2:57:35:32:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
        Validity
            Not Before: Apr 13 13:43:36 2026 GMT
            Not After : Apr 12 13:48:36 2027 GMT
        Subject: CN=853A58EABBD98CDE7CA05703D24E44B3C520B174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:0d:f1:e6:22:59:a9:4b:16:75:be:5c:dd:31:
                    fc:43:ad:f3:60:99:f3:05:74:fb:b7:60:35:ef:d3:
                    d8:02:e2:91:82:d4:97:a3:17:00:21:e1:c3:30:52:
                    87:be:42:9a:17:ce:24:80:17:c1:02:6b:96:e5:db:
                    f0:30:71:bc:3d:cd:dc:a6:4c:68:b8:3c:06:a9:4f:
                    2c:4f:6f:df:1f:07:a9:20:74:32:e3:b7:89:46:f9:
                    fa:01:bf:4d:95:60:cd:61:99:1a:72:d4:6b:f0:8d:
                    53:74:e8:d9:01:f3:40:ba:1e:8b:66:b5:ba:24:54:
                    5e:5b:d0:22:98:7a:67:73:3d:5f:a5:65:48:bf:c2:
                    ad:55:52:ed:d3:d1:64:9a:ed:b3:f7:5e:bc:df:55:
                    90:fd:b1:4c:d7:e3:80:6f:2e:c8:8c:8f:17:8a:ee:
                    ab:8d:4c:c0:f2:5a:7b:75:ab:93:2c:43:3a:bb:48:
                    82:02:44:b6:e7:2d:60:c8:81:f5:c8:22:63:23:0c:
                    e1:b5:85:26:d4:ee:da:09:56:08:c0:ec:09:da:d1:
                    87:ea:8a:4e:56:3d:0f:c7:d0:67:20:bf:63:a4:3f:
                    23:ba:71:03:3a:21:7f:3a:1b:85:5b:21:c7:33:53:
                    5d:6f:c3:33:07:a0:50:c7:0d:a0:d1:75:6a:d8:ae:
                    63:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:3A:58:EA:BB:D9:8C:DE:7C:A0:57:03:D2:4E:44:B3:C5:20:B1:74
            X509v3 Authority Key Identifier:
                keyid:7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3138362e3231362e3134342e302f32312d3234203d3e2037303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0f:a9:9e:d2:56:ba:e5:12:1a:6e:a2:19:d7:30:e7:45:48:21:
         d9:7c:30:95:73:f1:e0:28:5c:0c:fd:3b:f5:fd:cd:13:e2:cb:
         06:2c:d7:49:bc:f0:4f:0f:b7:a0:b2:48:54:a4:0f:ae:5b:f6:
         3a:38:be:cf:3f:f8:dd:69:d8:73:46:c6:e0:d8:a9:0e:57:7e:
         92:61:73:83:2b:14:42:ad:b7:76:4d:66:a7:90:fc:69:51:b5:
         f3:45:b1:9c:f6:b8:d2:4e:d4:d1:48:23:1f:db:0b:d3:2f:1e:
         d2:68:a0:7f:6f:61:8c:ae:ab:86:09:2a:b4:31:63:63:25:cb:
         ce:4d:c1:28:2a:58:3a:0e:56:c2:ee:ea:e6:dd:12:cf:09:92:
         c0:f6:58:de:35:5e:e7:20:1d:86:61:8b:c4:02:a7:0d:73:eb:
         49:f4:9a:60:bf:65:c8:b5:e0:32:51:be:cd:af:de:fb:ad:51:
         24:04:e6:fe:79:fc:e4:a0:f9:c8:6c:90:3f:3e:04:03:6b:a2:
         48:43:08:61:9d:49:a1:54:e8:4b:f3:74:f4:36:d4:c6:ee:3b:
         7d:81:68:1b:de:04:37:0b:eb:cf:09:f0:24:92:72:1c:a2:f3:
         c4:ed:8b:63:b1:6f:00:b1:93:ac:bc:d4:9e:6a:86:20:27:cd:
         31:71:7f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:36:22 2026 by rpki-client