Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/3138362e3233372e3234302e302f32312d3234203d3e203631353833.roa
File:                     3138362e3233372e3234302e302f32312d3234203d3e203631353833.roa (raw, json)
Hash identifier:          235d297lfLDiQINBsV1+Zb60k3/j1y4ol2jo7/PZbEw=
Subject key identifier:   00:8E:20:F1:9B:63:E7:05:C8:5F:D1:53:58:3C:CD:87:78:C3:31:A6
Certificate issuer:       /CN=344B5B409F263685E6336A621A4D2BB33F3578CE
Certificate serial:       5E43E7E52976F1F4C9312571D993BEC4C80B3ED8
Authority key identifier: 34:4B:5B:40:9F:26:36:85:E6:33:6A:62:1A:4D:2B:B3:3F:35:78:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/344B5B409F263685E6336A621A4D2BB33F3578CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/3138362e3233372e3234302e302f32312d3234203d3e203631353833.roa
Signing time:             Mon 08 Jun 2026 13:15:34 +0000
ROA not before:           Mon 08 Jun 2026 13:10:34 +0000
ROA not after:            Mon 07 Jun 2027 13:15:34 +0000
asID:                     61583
IP address blocks:        186.237.240.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/344B5B409F263685E6336A621A4D2BB33F3578CE.crl
                          rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/344B5B409F263685E6336A621A4D2BB33F3578CE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/344B5B409F263685E6336A621A4D2BB33F3578CE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 19:17:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:43:e7:e5:29:76:f1:f4:c9:31:25:71:d9:93:be:c4:c8:0b:3e:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=344B5B409F263685E6336A621A4D2BB33F3578CE
        Validity
            Not Before: Jun  8 13:10:34 2026 GMT
            Not After : Jun  7 13:15:34 2027 GMT
        Subject: CN=008E20F19B63E705C85FD153583CCD8778C331A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9f:db:a5:97:78:c1:e6:f4:a9:e5:ea:88:ab:
                    94:12:81:a2:64:e3:2e:0d:57:6a:df:11:f7:ad:5f:
                    1e:d4:a5:db:1e:55:83:47:bb:63:82:ff:3c:d9:8e:
                    20:dd:27:61:b7:32:02:6e:e7:65:7a:2c:d2:a4:4e:
                    6a:19:2a:3a:00:60:1a:cd:c1:61:ea:26:4f:20:c5:
                    48:5c:03:84:b3:b7:06:4e:99:3c:c5:a7:10:6b:54:
                    a0:81:ff:11:47:38:11:1c:8e:22:ba:e8:75:c7:31:
                    d1:eb:67:fd:c9:4c:85:0c:a0:bd:54:d8:6f:2d:3c:
                    fd:ce:c7:fd:a7:2b:0d:2d:f5:b8:1e:73:2e:e1:b1:
                    3b:dc:90:af:c3:aa:0c:d5:1d:99:22:d5:0b:b1:3a:
                    19:44:7c:9c:4f:a7:a2:a1:e0:87:10:a0:ea:08:30:
                    5c:7c:46:ce:25:6c:d3:02:f4:0d:25:24:cd:9b:ab:
                    d4:88:52:31:fa:23:39:11:38:ff:e4:2c:ed:ed:d6:
                    e5:65:ee:41:28:ef:c7:47:1e:71:5f:d4:14:fe:64:
                    ca:95:5b:1b:3e:c2:34:0a:c2:86:76:11:d7:df:f9:
                    84:55:bb:ed:13:24:c6:ba:72:68:a5:0b:2d:d8:10:
                    34:74:90:8d:f8:b1:88:c9:3f:f7:87:f1:56:35:5c:
                    32:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:8E:20:F1:9B:63:E7:05:C8:5F:D1:53:58:3C:CD:87:78:C3:31:A6
            X509v3 Authority Key Identifier:
                keyid:34:4B:5B:40:9F:26:36:85:E6:33:6A:62:1A:4D:2B:B3:3F:35:78:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/344B5B409F263685E6336A621A4D2BB33F3578CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/344B5B409F263685E6336A621A4D2BB33F3578CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/3138362e3233372e3234302e302f32312d3234203d3e203631353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.237.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         69:30:c5:19:8f:66:96:40:33:a6:6c:82:86:c5:d8:52:1a:cd:
         1a:84:f9:d8:1d:a4:ad:19:ff:02:b0:c6:16:6e:23:60:59:03:
         ec:18:95:8e:32:d5:6b:3b:6e:f8:29:c7:c9:14:51:7d:7f:c9:
         61:91:2e:46:ad:85:5c:65:10:dc:62:a3:70:d7:b1:09:79:e6:
         ea:6e:b6:16:23:eb:2e:97:4b:df:ba:19:e6:83:a6:64:23:81:
         02:0f:b3:4e:3a:86:08:29:40:51:f9:8a:9e:01:0e:71:8c:e8:
         31:95:fb:0a:d5:3c:2e:1f:36:57:61:99:8b:14:9a:60:e7:80:
         17:e4:f8:43:26:c9:c5:c6:31:60:fe:f6:68:a8:a6:e5:f7:75:
         f1:32:a9:fa:97:99:05:54:77:db:9a:52:81:b0:ca:81:18:dc:
         2d:cf:27:47:34:fb:80:3d:d6:19:16:cd:03:f9:36:68:31:b5:
         81:96:15:73:85:e9:b6:52:99:73:a4:6b:21:da:9a:4e:3f:3d:
         9b:f1:d9:39:1b:e2:ff:ee:a4:c4:d1:2d:36:ec:8f:6b:d4:0b:
         c2:de:5c:4f:37:64:f4:67:e8:b7:4b:64:13:d6:bb:b9:fc:c9:
         04:a5:09:60:09:91:ba:b2:78:e1:96:e6:54:39:b8:38:60:7b:
         da:ad:57:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:05:39 2026 by rpki-client