Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3138372e38372e3230382e302f32302d3234203d3e20323632363838.roa
File:                     3138372e38372e3230382e302f32302d3234203d3e20323632363838.roa (raw, json)
Hash identifier:          Pkcd0g6tj7h9f5qXopGTBegaWnnzQD95lE2Li6SUoVA=
Subject key identifier:   C5:5C:CD:80:0E:7C:10:A4:ED:04:8A:D7:0F:E3:DE:85:D7:AC:B2:1A
Certificate issuer:       /CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
Certificate serial:       6DECB8D1C5FDAFA6E5B99258D11130BE12373579
Authority key identifier: 7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3138372e38372e3230382e302f32302d3234203d3e20323632363838.roa
Signing time:             Mon 13 Apr 2026 13:48:37 +0000
ROA not before:           Mon 13 Apr 2026 13:43:37 +0000
ROA not after:            Mon 12 Apr 2027 13:48:37 +0000
asID:                     262688
IP address blocks:        187.87.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 23:44:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ec:b8:d1:c5:fd:af:a6:e5:b9:92:58:d1:11:30:be:12:37:35:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
        Validity
            Not Before: Apr 13 13:43:37 2026 GMT
            Not After : Apr 12 13:48:37 2027 GMT
        Subject: CN=C55CCD800E7C10A4ED048AD70FE3DE85D7ACB21A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8b:b9:b5:9c:e1:7b:ea:a8:73:a8:01:b1:d7:
                    08:0a:13:68:b3:35:e0:cf:32:84:58:b9:82:05:bc:
                    64:57:52:64:2c:26:3c:dd:d4:16:b6:04:02:c8:8a:
                    76:69:f5:0a:43:4a:db:b9:e4:3c:6e:62:00:93:59:
                    64:7d:4d:db:09:f2:f4:27:a6:38:de:e5:5d:2d:0d:
                    13:17:80:9c:c7:a8:70:97:3a:4e:d8:b6:06:07:9c:
                    81:77:85:0e:b2:b3:1f:c3:1d:f4:fb:42:1c:c6:d3:
                    84:b3:25:26:91:b7:23:54:73:a1:bc:55:b8:cf:86:
                    53:c3:3f:e8:14:f4:2f:84:70:5f:38:56:27:a2:d6:
                    c2:91:af:86:fb:37:44:a6:82:88:e5:ec:1c:33:c7:
                    be:27:17:12:20:fe:07:9d:b5:cc:3f:86:1f:c3:de:
                    12:8f:ce:1e:37:5f:91:1e:fc:f3:37:2c:fb:cd:b7:
                    38:c1:6f:b3:07:42:7b:19:fe:7e:d0:da:19:2c:43:
                    6a:60:1f:f8:0c:e1:1f:72:b5:5c:a3:f8:3d:97:08:
                    79:7d:9f:9e:8a:e8:57:00:5b:1f:0f:27:ee:c7:3d:
                    f5:2f:2f:84:8a:ac:67:e6:3e:39:35:0e:3d:c3:11:
                    d5:c3:ed:74:0e:32:6e:cd:3d:a0:45:d4:54:5d:d4:
                    7d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:5C:CD:80:0E:7C:10:A4:ED:04:8A:D7:0F:E3:DE:85:D7:AC:B2:1A
            X509v3 Authority Key Identifier:
                keyid:7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3138372e38372e3230382e302f32302d3234203d3e20323632363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0c:8d:f3:0f:6e:04:32:10:0e:c5:f5:89:6a:f3:a5:50:da:bd:
         bc:d0:2d:2a:81:22:df:4d:ce:58:d3:bf:5e:9a:24:cf:f4:39:
         49:fd:4c:ef:6b:17:29:59:03:02:9f:b0:b9:80:76:08:23:97:
         5f:0c:5f:f6:30:4f:50:39:a5:58:b2:ee:11:c0:cb:67:39:16:
         31:87:0b:0b:29:26:33:0f:ff:98:57:57:db:a6:c3:4a:43:e6:
         d0:2a:a5:36:8a:54:a1:3e:23:a3:19:02:92:25:8c:1e:4b:a2:
         db:0b:57:bf:75:8b:3a:ae:d0:8e:55:70:be:7c:07:8c:ac:0b:
         5c:9f:fc:59:35:b4:5b:da:a2:16:2d:89:4e:fb:06:cc:4d:64:
         c3:3e:aa:5d:1d:33:80:ac:23:1b:d8:e5:5d:6e:74:22:c8:7c:
         43:7d:92:bb:ae:8e:85:ec:0a:6b:80:df:94:00:fd:ef:84:cd:
         02:3e:8f:bb:87:ce:06:61:87:8e:87:07:62:6d:2d:fd:de:29:
         37:32:67:44:1b:95:57:ea:2b:01:2c:fb:c3:0b:25:84:22:07:
         15:5b:ac:f8:b7:cf:f4:1b:88:3c:71:78:83:3e:06:22:87:9a:
         05:3f:d6:b4:a3:ad:e5:73:a5:32:12:fc:eb:0a:3f:cb:1c:5b:
         99:31:1a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:09:24 2026 by rpki-client