Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3230312e302f32342d3234203d3e20323632363837.roa
File:                     3138372e38372e3230312e302f32342d3234203d3e20323632363837.roa (raw, json)
Hash identifier:          0K0JdWnWnps5IWBSINcfaqhNy6MGr8ShEXD2PlOVZxM=
Subject key identifier:   88:38:22:33:D9:65:DD:75:88:28:69:A3:DB:FA:E2:BD:C5:BD:9F:A7
Certificate issuer:       /CN=2ED25129C7D76B8FD6CFF23CC3CF86A794994329
Certificate serial:       5BD76A79E5FC85CB828AD4DCC652CE20A51879FE
Authority key identifier: 2E:D2:51:29:C7:D7:6B:8F:D6:CF:F2:3C:C3:CF:86:A7:94:99:43:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3230312e302f32342d3234203d3e20323632363837.roa
Signing time:             Tue 09 Jun 2026 12:30:45 +0000
ROA not before:           Tue 09 Jun 2026 12:25:45 +0000
ROA not after:            Tue 08 Jun 2027 12:30:45 +0000
asID:                     262687
IP address blocks:        187.87.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 13:49:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:d7:6a:79:e5:fc:85:cb:82:8a:d4:dc:c6:52:ce:20:a5:18:79:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ED25129C7D76B8FD6CFF23CC3CF86A794994329
        Validity
            Not Before: Jun  9 12:25:45 2026 GMT
            Not After : Jun  8 12:30:45 2027 GMT
        Subject: CN=88382233D965DD75882869A3DBFAE2BDC5BD9FA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ef:11:57:24:d5:72:7c:af:ef:c1:88:bf:09:
                    d3:87:cc:e2:f3:89:29:ac:6f:31:2d:52:7c:df:39:
                    4c:76:bb:1d:9f:fd:b1:61:d2:b1:28:6d:45:da:2d:
                    15:e9:27:11:d9:e2:21:ba:75:45:90:95:a7:32:de:
                    32:f4:21:d1:a0:49:97:6b:9c:07:61:d9:f7:b6:23:
                    ea:0d:1b:42:cc:a4:e3:e8:c9:01:64:7a:0f:90:82:
                    74:27:8e:99:3d:aa:49:3a:a7:35:de:fe:23:d2:31:
                    56:dd:2b:3d:5e:66:59:25:f5:8c:d8:cf:1a:0c:1b:
                    b7:2c:75:83:82:2a:45:86:72:df:81:c2:84:59:15:
                    26:2e:d2:72:ae:0e:40:cd:23:ab:77:a7:a5:9c:a7:
                    78:6e:ce:76:32:f1:5e:2e:d4:d0:08:df:f8:15:f9:
                    8c:5c:43:66:5a:5a:51:3a:12:bf:3a:e4:f7:f9:a1:
                    f3:4d:a6:0f:87:62:b6:3c:e5:36:51:93:05:5a:f2:
                    9e:66:d8:af:ba:1c:77:66:22:60:fb:c3:6d:6c:7f:
                    90:a4:8b:8b:54:c8:3f:e1:0a:44:52:62:b6:d2:0c:
                    1a:1c:4f:b5:17:54:06:56:64:d1:56:bb:95:f9:63:
                    0f:a7:ab:61:4a:76:e0:e7:16:cd:66:8a:99:35:d4:
                    cd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:38:22:33:D9:65:DD:75:88:28:69:A3:DB:FA:E2:BD:C5:BD:9F:A7
            X509v3 Authority Key Identifier:
                keyid:2E:D2:51:29:C7:D7:6B:8F:D6:CF:F2:3C:C3:CF:86:A7:94:99:43:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3230312e302f32342d3234203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:cc:47:fe:79:e2:c7:03:e2:c2:3e:b4:aa:17:3a:29:ee:93:
         fd:4d:82:e0:2d:99:40:3e:45:6d:ba:8c:25:7d:d4:fc:59:45:
         d8:42:2e:99:f4:43:4d:f1:36:29:ef:81:d0:45:f8:da:62:39:
         35:e5:b7:87:73:a0:44:3e:b8:91:ff:40:54:d6:a1:0b:8f:2a:
         12:f8:e9:b8:79:a5:1b:3f:98:5d:ba:bd:f7:cd:3a:11:fb:a8:
         55:91:c9:41:69:43:98:aa:30:ef:f8:11:76:5c:c4:a4:51:3e:
         34:2a:41:4b:1c:0a:e7:cb:76:dd:db:f2:36:83:8e:27:0b:17:
         7f:38:0a:1c:b6:0c:79:c5:31:11:cd:fa:ec:76:da:6c:e1:8f:
         da:0b:a8:6f:a8:fd:c7:fb:1f:05:e6:29:88:10:fd:6f:4e:a6:
         d5:b7:ab:ec:1d:c6:65:64:c1:f5:bd:fc:41:25:ff:6f:7c:b9:
         3b:60:68:a1:20:bc:88:81:25:8f:57:97:9c:dd:21:b0:e7:f1:
         15:73:08:24:a3:66:54:0f:e2:50:26:dd:c9:18:29:c0:21:8b:
         91:82:cb:b1:2e:f3:9f:9d:19:62:42:d3:9b:15:27:67:84:ac:
         bc:f3:40:91:15:40:76:f1:9a:da:11:b9:22:aa:e5:46:c0:ef:
         3c:ae:d2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:06:45 2026 by rpki-client