Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/4/3138372e302e3133312e302f32342d3234203d3e203238323338.roa
File:                     3138372e302e3133312e302f32342d3234203d3e203238323338.roa (raw, json)
Hash identifier:          pJqQnulCBm3jmfu0W8jfLvYF84gExDPs7mr8ANZBpNk=
Subject key identifier:   6D:B6:47:59:39:08:60:D1:82:86:79:41:DD:CA:A2:7F:D9:64:6B:2E
Certificate issuer:       /CN=1F89CA79234EBEE1EDFBB720CAEAD02161B8C443
Certificate serial:       14E390F41F2E0D7FDD0800224D9F32BD23627D03
Authority key identifier: 1F:89:CA:79:23:4E:BE:E1:ED:FB:B7:20:CA:EA:D0:21:61:B8:C4:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F89CA79234EBEE1EDFBB720CAEAD02161B8C443.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/4/3138372e302e3133312e302f32342d3234203d3e203238323338.roa
Signing time:             Mon 25 May 2026 14:18:11 +0000
ROA not before:           Mon 25 May 2026 14:13:11 +0000
ROA not after:            Mon 24 May 2027 14:18:11 +0000
asID:                     28238
IP address blocks:        187.0.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/4/1F89CA79234EBEE1EDFBB720CAEAD02161B8C443.crl
                          rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/4/1F89CA79234EBEE1EDFBB720CAEAD02161B8C443.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F89CA79234EBEE1EDFBB720CAEAD02161B8C443.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 02:52:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:e3:90:f4:1f:2e:0d:7f:dd:08:00:22:4d:9f:32:bd:23:62:7d:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F89CA79234EBEE1EDFBB720CAEAD02161B8C443
        Validity
            Not Before: May 25 14:13:11 2026 GMT
            Not After : May 24 14:18:11 2027 GMT
        Subject: CN=6DB64759390860D182867941DDCAA27FD9646B2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:58:71:a6:bc:bc:9c:2a:98:ae:e4:47:95:5c:
                    f6:ca:00:3d:c0:f3:99:48:ec:57:28:c2:6c:e2:27:
                    6e:0b:cb:0e:1e:c9:83:07:ff:d1:7b:5e:ef:88:f2:
                    69:82:d7:b4:c5:c7:52:1d:ee:51:29:8e:76:f7:17:
                    a0:57:ca:90:f7:d3:2d:97:66:b0:51:a7:aa:d5:03:
                    2f:5e:19:19:63:a6:59:2c:b2:2d:0c:89:13:c5:40:
                    42:3e:bc:42:80:4d:5f:15:76:af:2f:b3:40:51:cc:
                    c8:d8:18:e8:4d:3a:f2:43:48:79:0f:11:06:be:ca:
                    cb:71:c9:8b:fd:64:50:6d:f8:6f:91:06:78:fd:b3:
                    f8:b4:97:29:2f:0f:f5:79:c6:b0:8c:c4:2c:34:e3:
                    4d:b9:ef:b9:0c:b0:28:ed:8f:5a:41:6a:69:dc:59:
                    d1:8a:c5:7a:4e:1a:41:8b:b9:7e:77:d7:87:3c:78:
                    3f:f6:43:db:ee:08:8a:04:ae:38:6d:e7:bb:0d:7f:
                    04:60:f3:e5:ad:a6:ca:f3:8d:c2:2e:01:ca:7a:30:
                    2e:55:da:65:c9:62:bb:99:4a:cb:58:d9:71:35:38:
                    a1:1b:03:b4:4d:90:d8:d2:c4:e6:e9:ea:4c:1a:2d:
                    9d:e1:90:fa:f5:88:18:39:1c:91:9e:24:ba:9f:8e:
                    81:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:B6:47:59:39:08:60:D1:82:86:79:41:DD:CA:A2:7F:D9:64:6B:2E
            X509v3 Authority Key Identifier:
                keyid:1F:89:CA:79:23:4E:BE:E1:ED:FB:B7:20:CA:EA:D0:21:61:B8:C4:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/4/1F89CA79234EBEE1EDFBB720CAEAD02161B8C443.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F89CA79234EBEE1EDFBB720CAEAD02161B8C443.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/4/3138372e302e3133312e302f32342d3234203d3e203238323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:48:a6:a8:04:6a:33:87:9e:7c:29:50:e2:4d:73:85:86:d9:
         b6:dc:c3:51:1e:9d:00:65:c1:f8:15:a2:22:33:60:a3:4b:7b:
         25:c2:48:8a:e6:f9:cb:05:f5:19:a8:a8:6a:12:f0:fc:3b:21:
         f1:91:36:2a:ef:c4:b9:12:4c:5b:57:6d:15:9a:53:2d:e7:d2:
         77:b8:5b:91:4b:f7:ac:b1:6c:2b:e1:46:bb:4a:f3:4c:41:68:
         c9:6f:1d:4d:da:78:6c:65:6c:08:c0:01:b2:c0:41:73:47:bc:
         b4:26:71:d7:86:ca:e6:ef:92:64:8d:fc:c8:bf:39:7e:8a:53:
         d2:f7:ae:70:7c:31:e9:87:03:f3:c3:cc:24:9f:c3:6c:e3:02:
         ce:74:39:b9:6d:0f:ed:b4:c3:30:9e:d0:ff:af:01:3a:10:74:
         f4:df:ae:dc:e8:b8:44:78:be:85:59:1f:89:7e:f2:e3:00:20:
         ce:d7:f5:d1:d4:71:93:3f:43:f0:4a:4e:c8:94:a0:9a:0f:f6:
         8a:2f:5a:b8:b9:7e:17:de:6f:7e:24:09:33:f0:21:f4:e4:1d:
         97:b3:8c:1b:14:ba:6b:56:ff:db:3a:7b:68:c5:e6:db:f4:61:
         a4:dd:60:89:86:23:80:24:78:90:78:83:06:e3:9c:a0:93:5c:
         a1:30:bb:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:33:33 2026 by rpki-client