Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3230362e302f32332d3233203d3e20323632363837.roa
File:                     3138372e38372e3230362e302f32332d3233203d3e20323632363837.roa (raw, json)
Hash identifier:          Hxv+oEO70cT/9ynzqTTXjtqZekT1rVwv75YDBY4b260=
Subject key identifier:   FE:FD:1B:D5:EE:C8:83:4C:3B:75:87:3A:48:38:4A:B2:54:45:D3:61
Certificate issuer:       /CN=2ED25129C7D76B8FD6CFF23CC3CF86A794994329
Certificate serial:       5FB53F4C061FD4F6C5F0CBBE508077DD1B34E899
Authority key identifier: 2E:D2:51:29:C7:D7:6B:8F:D6:CF:F2:3C:C3:CF:86:A7:94:99:43:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3230362e302f32332d3233203d3e20323632363837.roa
Signing time:             Tue 09 Jun 2026 12:30:47 +0000
ROA not before:           Tue 09 Jun 2026 12:25:47 +0000
ROA not after:            Tue 08 Jun 2027 12:30:47 +0000
asID:                     262687
IP address blocks:        187.87.206.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 13:49:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:b5:3f:4c:06:1f:d4:f6:c5:f0:cb:be:50:80:77:dd:1b:34:e8:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ED25129C7D76B8FD6CFF23CC3CF86A794994329
        Validity
            Not Before: Jun  9 12:25:47 2026 GMT
            Not After : Jun  8 12:30:47 2027 GMT
        Subject: CN=FEFD1BD5EEC8834C3B75873A48384AB25445D361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:18:81:36:3b:0a:85:17:89:d2:18:40:7e:18:
                    b0:c7:df:ee:3f:b0:fa:e3:4c:89:f6:40:da:c1:55:
                    f8:9f:df:68:1c:74:13:16:ef:a2:db:51:d4:61:7f:
                    ef:35:be:a0:f1:c2:e7:60:4f:3d:a5:b3:0f:76:84:
                    87:77:09:16:be:07:14:51:cf:04:9a:01:4a:78:51:
                    21:37:ee:01:26:e2:84:b1:2d:52:8d:06:a0:68:4f:
                    08:86:c0:0d:47:34:a5:10:60:35:38:55:f9:00:de:
                    0c:01:49:5c:ac:d1:10:48:1f:cb:dd:b8:68:83:de:
                    57:66:aa:e6:35:29:33:02:45:b0:63:ab:53:60:12:
                    c5:8a:fa:4a:eb:d2:87:2b:cf:7d:4c:a7:27:cd:5a:
                    ea:ef:88:9f:2a:9e:a7:65:00:26:4f:b7:56:e5:cd:
                    a9:87:c6:03:f6:60:5b:df:bc:e1:4b:45:fd:93:0a:
                    13:21:d8:2e:b8:2e:cf:44:9c:06:95:e3:64:e5:21:
                    0c:45:fb:25:e2:d9:b7:c3:a9:ff:e8:84:7f:fb:e5:
                    20:ba:08:b1:f7:c4:be:f8:f1:9c:b6:61:b8:2c:53:
                    7f:80:e0:5a:8c:b1:3d:f7:8f:bc:68:4d:90:28:1a:
                    a3:c0:66:6c:e8:a0:80:9d:ca:0d:9f:12:d1:22:6d:
                    01:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FD:1B:D5:EE:C8:83:4C:3B:75:87:3A:48:38:4A:B2:54:45:D3:61
            X509v3 Authority Key Identifier:
                keyid:2E:D2:51:29:C7:D7:6B:8F:D6:CF:F2:3C:C3:CF:86:A7:94:99:43:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3230362e302f32332d3233203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:39:49:04:8a:51:92:80:43:e1:c5:dd:22:1a:db:2b:c9:0a:
         7a:7f:11:71:d4:2a:28:20:53:34:87:58:9d:0f:2c:56:0e:5c:
         58:9a:6d:ee:bb:e4:9f:af:3d:06:8d:c3:77:b4:81:4e:ed:a6:
         af:5c:c1:ea:19:32:f9:70:6a:30:11:05:c8:53:5e:92:85:13:
         fe:14:e8:7b:d0:10:70:e4:eb:25:ad:a6:c2:c7:89:b2:d1:62:
         46:3c:40:6a:8b:ef:ff:b6:99:f9:b2:bf:61:4b:15:7f:5b:32:
         9a:8b:61:f7:20:4d:55:25:e3:cf:c4:01:9a:88:ec:54:2f:2a:
         62:ff:d1:e7:b6:49:be:75:b4:87:53:8b:ca:cc:7b:a3:71:47:
         42:85:1c:a4:4a:42:67:60:96:be:90:80:7f:78:a1:dd:66:2c:
         a6:67:04:9a:f2:95:4b:ee:8b:49:01:e3:8d:c3:47:f5:57:1b:
         fe:c0:bd:73:c1:5c:ae:0f:80:92:98:b7:52:7a:5c:25:3a:fa:
         85:91:49:7b:b8:8d:b7:df:1f:2a:a5:24:d5:6f:3a:3e:8b:bc:
         9a:2c:c8:cc:01:b7:cc:92:b4:2d:29:2d:54:44:4b:7d:6a:d7:
         8b:7d:8b:92:39:b2:13:19:e0:b5:02:5b:23:f7:7b:3d:b4:96:
         52:12:16:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:06:52 2026 by rpki-client