Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139342e302f32332d3233203d3e20323632363837.roa
File:                     3138372e38372e3139342e302f32332d3233203d3e20323632363837.roa (raw, json)
Hash identifier:          VWa7m3+zv5CwoNuM0rmZqQnkJAgaevOYtO69ihrdHq0=
Subject key identifier:   9A:42:58:25:DE:CC:3B:E2:34:75:DA:28:FC:9D:6C:78:BF:F8:1E:FB
Certificate issuer:       /CN=2ED25129C7D76B8FD6CFF23CC3CF86A794994329
Certificate serial:       723002E5FD5BE70B02C6758D1C53DF8DBFBD5808
Authority key identifier: 2E:D2:51:29:C7:D7:6B:8F:D6:CF:F2:3C:C3:CF:86:A7:94:99:43:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139342e302f32332d3233203d3e20323632363837.roa
Signing time:             Tue 09 Jun 2026 12:30:46 +0000
ROA not before:           Tue 09 Jun 2026 12:25:46 +0000
ROA not after:            Tue 08 Jun 2027 12:30:46 +0000
asID:                     262687
IP address blocks:        187.87.194.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 13:49:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:30:02:e5:fd:5b:e7:0b:02:c6:75:8d:1c:53:df:8d:bf:bd:58:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ED25129C7D76B8FD6CFF23CC3CF86A794994329
        Validity
            Not Before: Jun  9 12:25:46 2026 GMT
            Not After : Jun  8 12:30:46 2027 GMT
        Subject: CN=9A425825DECC3BE23475DA28FC9D6C78BFF81EFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:26:ce:03:00:ea:ac:dd:06:b7:33:43:61:85:
                    fd:4b:f8:32:5d:f6:e1:ac:66:6c:bc:c8:6e:4b:2b:
                    48:42:ff:33:d9:10:89:82:f7:05:d4:db:75:51:5e:
                    51:01:81:26:20:da:79:f7:22:e8:0c:8a:3e:60:36:
                    7c:83:3c:a2:dd:26:5e:e2:9e:d5:61:fb:a2:81:78:
                    67:fa:76:23:63:eb:28:ca:89:8d:85:d5:74:45:17:
                    92:15:1d:75:02:66:5d:bb:1d:98:aa:ea:07:f0:30:
                    09:cf:50:ea:9b:fd:3a:65:48:41:00:23:02:ea:e4:
                    0f:d0:c8:31:81:b0:33:09:18:70:9d:8d:7a:70:43:
                    8c:7b:3c:e6:bc:03:c5:34:1d:c1:ff:1c:5d:ba:b3:
                    2c:9f:f6:b3:8e:8e:24:35:5c:27:ae:c9:e8:af:14:
                    40:01:20:dd:16:c9:f5:98:b6:af:7d:3a:da:c9:af:
                    36:a9:21:dd:8d:2a:ab:18:b6:1c:4d:45:2c:a7:1b:
                    f4:73:44:59:69:db:c0:07:a1:e6:58:74:2d:f0:2b:
                    a3:ef:57:1e:ae:2f:b7:8e:2c:30:7a:83:b9:43:1d:
                    5d:86:a4:ef:2a:70:98:63:ca:27:df:ad:26:5c:82:
                    ef:89:b6:1e:f2:8b:fe:40:15:c4:e8:20:bf:d6:5a:
                    34:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:42:58:25:DE:CC:3B:E2:34:75:DA:28:FC:9D:6C:78:BF:F8:1E:FB
            X509v3 Authority Key Identifier:
                keyid:2E:D2:51:29:C7:D7:6B:8F:D6:CF:F2:3C:C3:CF:86:A7:94:99:43:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139342e302f32332d3233203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:18:2e:e0:b2:1e:2a:50:62:46:9d:06:d0:b2:ba:32:7d:b7:
         fc:a2:1b:e0:fe:41:a4:13:c4:88:5b:51:4d:e8:2d:f2:16:5d:
         38:91:78:6e:43:0a:d6:de:0e:c2:8d:5f:8a:6d:3c:7b:11:6a:
         2f:67:37:f3:b1:e9:ea:4f:e6:ba:c2:9a:bd:44:16:d4:97:b1:
         ad:2a:a7:aa:51:70:14:61:e3:ce:bc:47:1a:f3:7e:83:84:23:
         18:57:74:dc:04:41:ef:c2:74:0b:b7:c3:3f:dd:b9:9a:9e:26:
         d4:75:fa:d8:10:06:64:67:bf:c9:12:88:00:d6:91:20:67:a3:
         c0:20:f9:5d:1f:ae:ae:d1:e6:f7:af:1b:44:5d:89:b7:c3:e4:
         db:1a:72:09:95:a8:f6:de:b0:c2:b1:cd:ca:b3:cf:3f:9e:f8:
         10:8b:e9:a1:5e:42:fd:69:31:a4:47:1e:9b:1b:c3:e9:2b:7b:
         92:d5:3d:1d:a5:a2:49:ee:90:c8:e6:a5:2a:01:ad:b8:f7:1c:
         4b:76:9a:1b:16:6a:47:dc:b9:3a:bd:2b:27:94:fd:69:70:51:
         4b:9a:34:3e:73:70:64:99:94:95:3a:71:78:d7:05:d2:47:2c:
         68:71:e1:aa:12:4e:8e:c6:d0:ac:a5:d1:9d:12:66:25:a6:d2:
         cf:44:2e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:06:50 2026 by rpki-client