Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/3138362e3139342e3132382e302f32312d3234203d3e203533313431.roa
File:                     3138362e3139342e3132382e302f32312d3234203d3e203533313431.roa (raw, json)
Hash identifier:          OMlRhQtwUw6sJqDiwTrPSwPXTVOutcNG3kqrWgTlzFQ=
Subject key identifier:   10:5B:73:20:09:5A:64:A7:81:C8:C0:41:B7:C2:41:0D:71:B4:E4:B8
Certificate issuer:       /CN=7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2
Certificate serial:       7FCB846140F284CE0D69D22D0DFE3FAF23BCAAC6
Authority key identifier: 7A:BE:3E:FE:65:54:79:E0:79:ED:DC:B6:B0:CA:B5:29:7A:4F:38:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/3138362e3139342e3132382e302f32312d3234203d3e203533313431.roa
Signing time:             Wed 03 Jun 2026 14:32:42 +0000
ROA not before:           Wed 03 Jun 2026 14:27:42 +0000
ROA not after:            Wed 02 Jun 2027 14:32:42 +0000
asID:                     53141
IP address blocks:        186.194.128.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.crl
                          rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 06:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:cb:84:61:40:f2:84:ce:0d:69:d2:2d:0d:fe:3f:af:23:bc:aa:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2
        Validity
            Not Before: Jun  3 14:27:42 2026 GMT
            Not After : Jun  2 14:32:42 2027 GMT
        Subject: CN=105B7320095A64A781C8C041B7C2410D71B4E4B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e7:d8:2f:45:1b:16:2d:7e:45:08:69:ba:13:
                    5b:e7:04:62:08:e6:57:f1:ee:4d:95:a0:57:f0:c2:
                    95:dd:fd:fb:a7:26:58:bb:8b:60:37:4f:22:09:78:
                    04:67:9e:6d:4f:b9:d2:a0:7f:fb:18:57:0c:f3:66:
                    2f:1d:77:16:17:12:2f:17:44:ce:62:cc:53:54:d5:
                    fa:98:96:b6:9f:1c:ae:b6:cc:26:b5:af:ba:2e:ae:
                    11:c7:55:85:9e:56:c6:cf:b6:77:be:39:83:96:ca:
                    d5:d7:01:81:7a:06:71:de:bc:e9:19:33:d8:e7:04:
                    e3:99:3a:a9:e2:cf:9c:44:08:7b:81:a3:89:c1:6a:
                    1f:69:1f:6c:b9:22:0c:de:58:bf:f4:75:4e:2a:5e:
                    8c:41:97:a0:d0:db:1e:31:f8:f1:4e:4a:6b:3e:68:
                    8c:2c:bc:a3:c4:0e:b5:b7:b2:e7:3e:17:cf:69:5e:
                    37:7f:96:e4:54:7e:fd:ca:30:e2:3b:06:b6:30:fa:
                    c4:02:39:99:6f:89:b6:d5:21:c1:78:0b:22:47:61:
                    f0:ae:ca:df:40:30:9a:13:5b:53:03:12:35:8a:7b:
                    9d:6a:e5:96:ae:50:58:96:eb:3c:d4:b7:72:c9:16:
                    86:5b:5d:03:ae:7d:79:7e:30:39:56:ca:60:80:b1:
                    ed:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:5B:73:20:09:5A:64:A7:81:C8:C0:41:B7:C2:41:0D:71:B4:E4:B8
            X509v3 Authority Key Identifier:
                keyid:7A:BE:3E:FE:65:54:79:E0:79:ED:DC:B6:B0:CA:B5:29:7A:4F:38:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/3138362e3139342e3132382e302f32312d3234203d3e203533313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         64:44:a4:c0:07:d6:5b:77:98:d4:cd:e0:4a:b7:3d:b3:0c:7b:
         e8:20:42:3e:1a:02:f6:03:31:17:e6:45:d0:4d:96:b6:02:82:
         7c:0a:6c:a1:41:69:27:e9:2f:43:5f:87:f3:ce:f6:da:4a:07:
         ba:96:d3:92:6e:a1:8a:cc:32:20:5f:8b:50:51:64:96:77:d8:
         4d:d2:df:89:32:ef:4a:8b:67:1f:59:3a:b2:86:cb:5b:65:26:
         cc:db:74:95:f6:53:cf:31:b6:a6:ed:34:68:3c:fc:30:e1:fe:
         22:d1:53:29:16:92:92:ba:63:d3:2a:a5:45:2f:65:ac:e0:38:
         44:ff:ef:5d:ac:98:0b:7e:24:f4:a2:92:24:c1:a9:88:7f:b7:
         46:cc:f1:e3:74:04:13:38:16:f5:fa:41:d7:00:9a:dd:1a:59:
         90:96:98:1a:c4:e7:b9:e3:60:0c:a4:90:f6:84:4b:8b:e5:e7:
         b7:b4:d8:79:a9:85:df:37:96:7b:fa:3d:4b:69:18:72:30:b3:
         f4:2c:01:5e:b1:39:33:15:f1:83:c9:83:b6:fc:11:8d:62:b9:
         a2:8e:f9:77:7b:46:7a:8c:fe:2c:02:8e:4a:36:bb:23:eb:f8:
         94:28:f5:c1:9c:88:45:3a:a0:f5:d7:65:e3:af:e7:e3:99:fb:
         ab:a4:71:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:49:59 2026 by rpki-client