Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139322e302f32342d3234203d3e20323632363837.roa
File:                     3138372e38372e3139322e302f32342d3234203d3e20323632363837.roa (raw, json)
Hash identifier:          ka2PEeBvQiesVXqWjdT+oOX+z961lfOWDJhhgEOoaUk=
Subject key identifier:   AE:F5:58:B5:C4:31:AC:A0:9B:E6:74:09:EB:05:C4:E2:B6:F6:3D:5C
Certificate issuer:       /CN=2ED25129C7D76B8FD6CFF23CC3CF86A794994329
Certificate serial:       12CC175294E50FDDED538CA9F29C8D9ABB72EE74
Authority key identifier: 2E:D2:51:29:C7:D7:6B:8F:D6:CF:F2:3C:C3:CF:86:A7:94:99:43:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139322e302f32342d3234203d3e20323632363837.roa
Signing time:             Tue 09 Jun 2026 12:30:47 +0000
ROA not before:           Tue 09 Jun 2026 12:25:47 +0000
ROA not after:            Tue 08 Jun 2027 12:30:47 +0000
asID:                     262687
IP address blocks:        187.87.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 13:49:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:cc:17:52:94:e5:0f:dd:ed:53:8c:a9:f2:9c:8d:9a:bb:72:ee:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ED25129C7D76B8FD6CFF23CC3CF86A794994329
        Validity
            Not Before: Jun  9 12:25:47 2026 GMT
            Not After : Jun  8 12:30:47 2027 GMT
        Subject: CN=AEF558B5C431ACA09BE67409EB05C4E2B6F63D5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:64:4f:ff:d6:c6:43:ee:81:3f:af:c4:62:7e:
                    35:53:6b:4d:3b:d4:ca:ae:cb:88:64:cb:23:1d:2f:
                    3a:9c:e8:cc:cb:ed:f8:17:26:3d:48:a8:d7:cb:52:
                    8f:06:9e:f1:d8:6d:2e:e4:08:db:c9:ef:79:1a:2c:
                    1f:5d:ff:03:32:66:d3:ca:8b:31:b0:c6:ff:9a:20:
                    ff:17:03:d0:8c:8c:d2:3a:52:a7:dd:9b:0d:04:14:
                    6e:42:7b:26:dd:ae:08:a3:f1:b6:07:ad:d9:29:43:
                    8e:78:f8:8b:3b:99:1d:d3:0e:40:20:1d:d0:f7:df:
                    15:2e:41:90:f1:d5:db:68:cf:ca:35:57:64:16:f2:
                    79:12:58:a9:6d:4d:10:d7:cf:9c:5d:af:bf:c5:5c:
                    f9:7c:21:f9:00:2e:b4:aa:ca:1e:f6:06:f0:98:b8:
                    7b:4f:c0:a0:1b:e4:51:54:3c:fb:cb:9e:54:b4:8f:
                    7a:78:72:5f:b0:0e:9f:a8:de:9b:99:c2:71:5e:10:
                    1e:63:b0:08:dd:23:80:6e:ff:fd:9f:e4:8f:e0:4a:
                    6a:63:16:d9:6a:05:09:8c:70:94:e1:33:66:91:6a:
                    e1:14:17:05:07:4a:07:9a:5d:a8:8f:a9:5a:59:54:
                    cd:7a:1c:70:d7:51:36:84:d5:78:af:73:a5:2b:a7:
                    03:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F5:58:B5:C4:31:AC:A0:9B:E6:74:09:EB:05:C4:E2:B6:F6:3D:5C
            X509v3 Authority Key Identifier:
                keyid:2E:D2:51:29:C7:D7:6B:8F:D6:CF:F2:3C:C3:CF:86:A7:94:99:43:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139322e302f32342d3234203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:79:4e:f1:3c:d6:46:46:b9:f5:ae:cc:57:97:7a:8e:b4:e4:
         bc:82:3f:c0:47:ab:78:49:1c:ce:e0:da:f4:6c:bc:ac:86:81:
         b1:81:0c:e9:79:aa:93:dd:ba:4c:f0:00:87:f3:e0:2a:eb:bf:
         ea:e6:24:22:7d:97:7e:f0:f3:68:c6:79:3d:61:16:71:6d:19:
         fe:64:48:84:a2:5e:ec:95:cc:3b:9c:cc:b3:f0:a4:d3:be:5a:
         22:00:7d:80:8d:c9:fe:99:4e:dc:c6:a6:27:ce:74:21:7a:79:
         a5:53:ca:b4:7c:a8:84:0c:a8:b9:f3:f0:88:c1:26:ad:a9:94:
         f9:80:b4:93:d9:5a:d3:ff:a5:e5:f0:19:79:52:63:ae:d1:d6:
         c9:9f:d4:a2:42:f4:b5:ec:6c:19:e3:d0:91:64:69:b5:eb:3b:
         80:08:72:a5:84:08:e3:51:ba:64:c7:05:36:19:31:d5:0f:d3:
         fa:79:9d:66:6a:b1:6d:82:bc:68:c0:78:a5:9b:f0:20:01:53:
         59:4d:8d:ee:cc:df:8c:63:fe:15:67:f2:ba:b6:4c:b0:c1:29:
         1a:a4:fe:22:d1:41:f2:c1:49:ca:9e:a6:35:8f:18:63:71:b7:
         56:81:8d:3c:d4:a4:07:62:d0:ab:7b:63:86:35:0e:b7:5a:51:
         d6:08:b5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:06:46 2026 by rpki-client