Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3230352e302f32342d3234203d3e20323632363837.roa
File:                     3138372e38372e3230352e302f32342d3234203d3e20323632363837.roa (raw, json)
Hash identifier:          auqB9TpzS8Srqa1NSynXYm6iw+20+T6nCnfRiq3FFG4=
Subject key identifier:   0D:81:66:03:18:ED:4E:A4:59:B7:7F:A9:9B:0C:FE:3B:41:11:71:17
Certificate issuer:       /CN=2ED25129C7D76B8FD6CFF23CC3CF86A794994329
Certificate serial:       2137F355544AF0C92454664D490A2C315F005855
Authority key identifier: 2E:D2:51:29:C7:D7:6B:8F:D6:CF:F2:3C:C3:CF:86:A7:94:99:43:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3230352e302f32342d3234203d3e20323632363837.roa
Signing time:             Tue 09 Jun 2026 12:30:48 +0000
ROA not before:           Tue 09 Jun 2026 12:25:48 +0000
ROA not after:            Tue 08 Jun 2027 12:30:48 +0000
asID:                     262687
IP address blocks:        187.87.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 13:49:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:37:f3:55:54:4a:f0:c9:24:54:66:4d:49:0a:2c:31:5f:00:58:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ED25129C7D76B8FD6CFF23CC3CF86A794994329
        Validity
            Not Before: Jun  9 12:25:48 2026 GMT
            Not After : Jun  8 12:30:48 2027 GMT
        Subject: CN=0D81660318ED4EA459B77FA99B0CFE3B41117117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5e:df:15:f9:78:20:28:02:be:f4:70:e1:ad:
                    39:92:c0:6b:06:f1:5f:f0:93:2d:e3:d0:31:29:58:
                    82:eb:21:f0:0c:99:c8:44:d3:77:07:a9:c0:41:39:
                    76:64:fb:43:50:a5:75:4b:09:b7:04:15:f4:82:ef:
                    5b:01:1e:e5:3a:31:01:f8:95:83:81:b7:a4:de:d1:
                    fd:f2:c9:67:d3:e1:b3:26:75:e1:bb:6e:9c:19:1d:
                    7c:75:1f:54:23:1f:73:a1:77:73:0e:ae:ce:68:09:
                    c7:93:b0:f3:cf:e3:37:94:a0:a9:f4:3e:6f:54:65:
                    ca:03:ae:a6:3d:22:34:b9:3a:be:b3:67:03:2f:63:
                    12:d6:d6:dc:62:ea:3f:3f:85:c3:79:a4:f1:10:ef:
                    37:f5:d1:37:6e:9f:98:c0:45:e3:7d:0a:69:a3:dc:
                    f5:b6:6b:0f:a9:48:a9:d1:4c:4f:2a:61:81:e3:e9:
                    e8:5e:f2:1b:ac:e7:0d:d1:d4:09:d2:b1:56:5d:75:
                    a6:8b:0b:85:dc:0c:26:a5:44:b4:db:0d:1b:58:d4:
                    00:84:74:3b:1b:de:4a:7c:93:9e:ed:6f:5c:71:64:
                    08:1b:e1:f7:d5:14:c4:dd:fe:3c:c4:90:b3:68:a7:
                    c6:ab:71:3c:f3:e6:81:43:62:7c:5f:e0:80:a0:9b:
                    64:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:81:66:03:18:ED:4E:A4:59:B7:7F:A9:9B:0C:FE:3B:41:11:71:17
            X509v3 Authority Key Identifier:
                keyid:2E:D2:51:29:C7:D7:6B:8F:D6:CF:F2:3C:C3:CF:86:A7:94:99:43:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3230352e302f32342d3234203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:07:52:24:af:c4:a9:2e:62:e9:85:2d:d7:26:14:1b:09:a3:
         b7:b2:e1:88:e2:7c:d3:78:e7:87:a4:8c:9e:49:42:b8:06:5b:
         e6:f7:eb:d6:3a:4f:79:9d:3c:e9:6b:03:e3:1c:75:7d:74:80:
         5c:c5:d8:36:8f:c9:8c:1e:4f:f6:79:7a:76:44:75:4c:14:45:
         69:ab:55:88:87:8a:75:5e:0b:14:f4:93:32:8f:71:cc:23:33:
         be:5d:67:0f:01:f9:f1:73:21:13:5f:bd:77:f7:d6:f4:3c:c0:
         03:51:bd:52:c1:af:fe:2c:d5:83:21:9d:a3:62:ff:6f:ea:1c:
         54:56:9d:70:3b:0d:0a:68:2d:a2:b2:52:2f:00:e5:51:ad:7d:
         65:0d:3a:2f:17:6d:8a:e5:f8:b3:e9:47:a2:13:68:eb:6f:3a:
         b8:61:a4:3d:a4:4a:2c:78:44:5f:c6:14:11:29:a7:53:f6:69:
         39:fc:90:e2:cb:99:24:6a:e0:1f:56:07:6e:03:5c:e4:85:92:
         30:4f:48:45:85:ab:e1:3f:72:3f:d3:4b:0a:91:c7:cc:09:f4:
         9b:c6:f1:f5:c2:ca:81:3b:88:c4:2e:e0:aa:01:09:05:32:58:
         30:9a:ba:8a:9f:2f:2c:e0:66:49:70:fa:13:e4:1b:aa:4f:6a:
         6f:c7:64:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:06:49 2026 by rpki-client