Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/4/3138362e3231362e3233342e302f32332d3233203d3e20323634303936.roa
File:                     3138362e3231362e3233342e302f32332d3233203d3e20323634303936.roa (raw, json)
Hash identifier:          4ekbt3uaLzezEpFTiWzK26T9hh6N+CXoHHlYFKxs0P0=
Subject key identifier:   B5:56:37:FA:C3:53:49:8D:E6:9F:C9:07:40:7F:7F:D2:59:24:3D:50
Certificate issuer:       /CN=1F89CA79234EBEE1EDFBB720CAEAD02161B8C443
Certificate serial:       037DB2F678F545C60664DE2F7FC58753DB6FFBE9
Authority key identifier: 1F:89:CA:79:23:4E:BE:E1:ED:FB:B7:20:CA:EA:D0:21:61:B8:C4:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F89CA79234EBEE1EDFBB720CAEAD02161B8C443.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/4/3138362e3231362e3233342e302f32332d3233203d3e20323634303936.roa
Signing time:             Mon 25 May 2026 15:04:38 +0000
ROA not before:           Mon 25 May 2026 14:59:38 +0000
ROA not after:            Mon 24 May 2027 15:04:38 +0000
asID:                     264096
IP address blocks:        186.216.234.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/4/1F89CA79234EBEE1EDFBB720CAEAD02161B8C443.crl
                          rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/4/1F89CA79234EBEE1EDFBB720CAEAD02161B8C443.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F89CA79234EBEE1EDFBB720CAEAD02161B8C443.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 02:52:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:7d:b2:f6:78:f5:45:c6:06:64:de:2f:7f:c5:87:53:db:6f:fb:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F89CA79234EBEE1EDFBB720CAEAD02161B8C443
        Validity
            Not Before: May 25 14:59:38 2026 GMT
            Not After : May 24 15:04:38 2027 GMT
        Subject: CN=B55637FAC353498DE69FC907407F7FD259243D50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:24:f5:6d:39:f4:93:b0:26:30:b7:8f:e3:d6:
                    3a:e8:3b:ae:6f:c7:db:8a:f7:ca:1b:71:fd:b1:77:
                    f4:49:4b:76:e6:7f:5a:23:c4:94:01:52:ce:33:c6:
                    f4:51:f7:85:89:cd:29:1e:4e:f6:53:01:aa:b3:66:
                    98:31:1c:a8:a4:6b:12:25:34:bf:22:49:9f:b4:aa:
                    c0:a4:3b:e8:8f:90:a3:45:63:ff:70:dc:64:da:b5:
                    ec:0e:72:7f:1d:b7:b4:03:07:46:75:5d:38:7a:ba:
                    34:46:0e:03:5b:dc:9c:9a:c2:2e:67:d0:ca:d2:ff:
                    f5:27:f1:c0:5b:83:4c:d2:c4:4c:21:b1:b3:59:67:
                    af:bb:74:44:1d:ee:cb:95:e0:94:23:47:58:76:3b:
                    b9:76:ea:c8:40:9d:ec:c8:c7:7e:b3:be:74:51:4f:
                    ad:7e:97:01:28:bd:51:f7:0e:4f:ee:e5:57:36:13:
                    8c:99:28:e8:89:bb:1b:8e:60:82:8b:bd:b1:b3:9f:
                    dd:e0:1a:58:a4:62:fc:68:e4:94:9f:79:73:73:d7:
                    73:8f:d3:e1:37:a7:c3:16:0a:02:2e:e5:7f:9a:f9:
                    82:26:4d:d4:c9:dc:09:15:a9:4b:f6:de:fe:43:a9:
                    46:c4:eb:48:fb:e5:6b:a6:0d:b8:a1:91:6a:0f:d3:
                    d4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:56:37:FA:C3:53:49:8D:E6:9F:C9:07:40:7F:7F:D2:59:24:3D:50
            X509v3 Authority Key Identifier:
                keyid:1F:89:CA:79:23:4E:BE:E1:ED:FB:B7:20:CA:EA:D0:21:61:B8:C4:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/4/1F89CA79234EBEE1EDFBB720CAEAD02161B8C443.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F89CA79234EBEE1EDFBB720CAEAD02161B8C443.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/4/3138362e3231362e3233342e302f32332d3233203d3e20323634303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:0f:59:58:e9:25:83:41:4c:20:ec:5b:52:93:67:1f:04:db:
         a7:c6:ac:58:90:83:03:50:ba:0e:03:2d:e6:b9:e3:f6:d5:6a:
         8e:a6:6a:e3:1a:a4:18:a3:c7:50:85:69:09:69:98:9b:f2:70:
         f3:02:b8:55:98:0b:17:0e:4e:19:ea:3b:bf:68:67:74:ec:d6:
         41:d8:a6:54:6d:2f:f3:27:0e:40:cf:d6:a0:5b:22:d4:0c:be:
         2d:12:e0:60:89:6f:26:c3:f3:fc:70:b0:e3:d5:98:4d:74:a5:
         71:8e:92:a1:9b:9f:ec:e2:c7:d1:08:26:83:02:d9:80:7e:8d:
         20:6f:d1:50:c7:5f:9d:41:e8:eb:7d:c6:a5:9c:6e:27:6c:38:
         d0:c2:e1:3b:e5:bb:29:7a:bf:ea:52:21:92:80:45:18:52:7f:
         a6:f9:67:b6:48:ae:0e:39:65:f6:af:81:30:c3:03:e3:e7:93:
         21:86:bf:51:8c:1c:06:63:9f:50:f7:1e:ce:59:a6:d9:0a:b6:
         b9:cc:90:57:c8:30:4b:a0:4b:fd:5f:01:0f:d5:d2:68:f7:b7:
         de:08:07:2f:c8:c7:d9:02:16:76:3d:d9:92:52:7a:e1:1d:1c:
         ad:23:1f:6f:a3:d0:cd:aa:2a:4f:a0:2a:e0:27:48:7a:6c:65:
         0b:f6:92:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:19:56 2026 by rpki-client