Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/4/3138372e302e3133342e302f32342d3234203d3e203238323338.roa
File:                     3138372e302e3133342e302f32342d3234203d3e203238323338.roa (raw, json)
Hash identifier:          2bU1g6o4P0eBQo/OTVwpFUV5tRG5Lngl5rdTOAlRjnw=
Subject key identifier:   B2:E3:02:EA:10:51:7F:F8:E7:C5:D1:A9:C5:A6:12:CD:01:32:13:40
Certificate issuer:       /CN=1F89CA79234EBEE1EDFBB720CAEAD02161B8C443
Certificate serial:       0E353707377874BA379CA2463A970CA080664315
Authority key identifier: 1F:89:CA:79:23:4E:BE:E1:ED:FB:B7:20:CA:EA:D0:21:61:B8:C4:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F89CA79234EBEE1EDFBB720CAEAD02161B8C443.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/4/3138372e302e3133342e302f32342d3234203d3e203238323338.roa
Signing time:             Mon 25 May 2026 14:18:10 +0000
ROA not before:           Mon 25 May 2026 14:13:10 +0000
ROA not after:            Mon 24 May 2027 14:18:10 +0000
asID:                     28238
IP address blocks:        187.0.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/4/1F89CA79234EBEE1EDFBB720CAEAD02161B8C443.crl
                          rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/4/1F89CA79234EBEE1EDFBB720CAEAD02161B8C443.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F89CA79234EBEE1EDFBB720CAEAD02161B8C443.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 02:52:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:35:37:07:37:78:74:ba:37:9c:a2:46:3a:97:0c:a0:80:66:43:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F89CA79234EBEE1EDFBB720CAEAD02161B8C443
        Validity
            Not Before: May 25 14:13:10 2026 GMT
            Not After : May 24 14:18:10 2027 GMT
        Subject: CN=B2E302EA10517FF8E7C5D1A9C5A612CD01321340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b7:7c:d9:1e:15:e8:39:b4:45:d4:ed:30:99:
                    0c:fe:3e:2c:b3:3f:b1:1a:aa:e1:15:56:9f:f1:8a:
                    b2:e0:e8:fd:7b:f5:eb:7f:ae:4e:17:61:dc:75:fd:
                    2a:c8:18:36:99:eb:b6:86:09:17:8b:20:30:08:7b:
                    53:8f:7c:c8:5b:b7:f1:9d:cb:bf:3b:11:0b:37:0b:
                    db:2a:10:22:42:59:da:09:15:68:41:21:8b:73:69:
                    3d:44:a8:a8:10:67:59:f1:ad:7a:20:f9:5c:de:34:
                    84:4c:08:29:4d:93:57:89:9f:eb:0d:ba:30:bd:ad:
                    37:37:83:bf:88:79:7e:7f:03:54:f0:2c:1f:6d:6a:
                    8f:32:d1:79:c7:fc:16:12:7e:a1:54:1e:64:69:f7:
                    6e:eb:82:61:be:d1:b7:65:17:ba:41:d6:a6:1b:f6:
                    de:74:54:aa:7b:07:38:18:f8:05:61:a4:91:f7:53:
                    37:30:2d:10:89:b0:fa:9f:4f:62:f8:de:2d:0c:21:
                    17:36:48:c8:15:ce:57:55:9a:6a:f6:ee:50:9c:d7:
                    69:2f:14:e7:c0:5f:40:c0:e6:0a:2d:ee:73:d4:e6:
                    72:59:89:58:6e:84:3b:98:24:97:67:ff:e5:44:b9:
                    52:a2:df:08:4c:f3:46:e7:5d:6b:9f:5c:bd:1f:93:
                    a5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E3:02:EA:10:51:7F:F8:E7:C5:D1:A9:C5:A6:12:CD:01:32:13:40
            X509v3 Authority Key Identifier:
                keyid:1F:89:CA:79:23:4E:BE:E1:ED:FB:B7:20:CA:EA:D0:21:61:B8:C4:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/4/1F89CA79234EBEE1EDFBB720CAEAD02161B8C443.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F89CA79234EBEE1EDFBB720CAEAD02161B8C443.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/4/3138372e302e3133342e302f32342d3234203d3e203238323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:6f:9d:26:8e:45:7e:cb:5c:b3:95:cc:16:72:f0:80:5c:72:
         31:f7:33:5a:c1:d0:96:46:ea:82:c8:97:88:4e:2e:7f:11:e2:
         ac:da:2e:65:4d:cd:86:52:74:17:9d:b6:6b:a3:a9:4d:12:ea:
         2f:e5:29:ad:d8:c5:e1:54:a7:29:79:3c:1a:d8:d5:af:0a:74:
         32:af:dc:1e:1a:c9:8c:c0:6c:ee:e2:d1:a3:b3:1b:ed:32:fd:
         5c:3c:f0:c8:48:8e:a9:dc:fb:75:e3:84:52:77:6c:b0:58:5c:
         3e:b5:8b:6f:4c:bc:1b:53:1f:db:45:30:cb:82:23:34:31:98:
         07:50:eb:64:07:8f:1b:13:99:05:4a:11:91:6c:92:0a:61:65:
         10:fa:52:2b:b3:23:56:0c:b7:d5:fa:eb:5b:f8:1c:9b:46:63:
         4d:92:4f:35:4b:eb:ad:27:9d:eb:bf:63:af:db:94:66:2f:0f:
         51:4d:9a:56:68:50:90:4f:03:a0:01:2f:a8:fe:c8:cf:1e:75:
         31:de:49:d7:95:aa:c3:c3:d8:e3:aa:b0:96:c1:32:47:d1:8d:
         35:10:ee:6a:8d:51:36:46:51:97:ff:bf:b4:87:e6:81:d7:bc:
         b1:b9:05:2d:80:87:00:08:d2:6c:f9:e5:3a:55:0a:f9:3f:99:
         4f:03:89:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:19:57 2026 by rpki-client