Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3235312e3234382e302f32312d3231203d3e20323637353133.roa
File:                     3138362e3235312e3234382e302f32312d3231203d3e20323637353133.roa (raw, json)
Hash identifier:          WTOLNhWFSiorCd6UUSWwf/85fAIVj1zFBXoJOC+CuJU=
Subject key identifier:   C7:24:A2:F7:59:9D:4D:A5:9F:9A:C2:F7:65:D9:46:8B:88:28:81:2C
Certificate issuer:       /CN=319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C
Certificate serial:       10B4991F31C57B321973E4183F882470339ECAEF
Authority key identifier: 31:9D:AF:6D:91:7A:6B:C7:6D:7A:CC:FE:49:E2:8A:ED:8F:63:AB:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3235312e3234382e302f32312d3231203d3e20323637353133.roa
Signing time:             Tue 27 Oct 2026 15:46:33 +0000
ROA not before:           Tue 27 Oct 2026 15:41:33 +0000
ROA not after:            Tue 26 Oct 2027 15:46:33 +0000
asID:                     267513
IP address blocks:        186.251.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.crl
                          rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 22:14:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:b4:99:1f:31:c5:7b:32:19:73:e4:18:3f:88:24:70:33:9e:ca:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C
        Validity
            Not Before: Oct 27 15:41:33 2026 GMT
            Not After : Oct 26 15:46:33 2027 GMT
        Subject: CN=C724A2F7599D4DA59F9AC2F765D9468B8828812C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:82:64:7d:c8:d1:0b:6a:2c:0c:05:43:c3:78:
                    97:f6:53:af:d6:09:16:02:32:a2:32:1e:e7:cb:5b:
                    b6:0f:5c:67:30:ad:29:64:ec:0d:7f:da:98:ad:38:
                    f9:37:42:41:7f:42:c6:41:84:bf:1d:e3:21:6e:d8:
                    bb:bf:81:65:39:f2:bb:75:02:20:4d:d7:97:4a:49:
                    4e:89:f1:0f:86:7c:6c:62:72:ed:5a:43:5d:95:cb:
                    c4:53:18:f6:01:2b:9f:43:a1:de:46:70:30:1b:f3:
                    9a:70:7d:31:5e:68:4b:3b:60:9c:b8:96:a2:4f:76:
                    d7:cb:f0:d4:27:4f:ce:d3:25:08:18:40:2f:b8:06:
                    ff:1d:1e:5c:40:89:0c:c2:25:70:fa:ce:9f:13:f5:
                    19:af:35:6d:b4:58:75:5a:4c:cd:2b:92:2c:55:3f:
                    dc:1d:39:1d:d9:8e:e0:93:6d:aa:57:42:dd:dd:03:
                    15:62:70:de:96:bb:b5:8f:b0:c0:3f:3a:1d:83:fc:
                    fe:19:cc:db:05:4a:b7:eb:ad:c9:38:f1:23:75:78:
                    2b:2e:f3:44:80:1f:3f:af:29:b4:bc:be:b9:5b:6b:
                    65:a2:14:4a:70:2c:44:f6:cc:3e:e9:82:92:5d:d0:
                    45:23:56:23:93:90:e0:e3:4d:f7:e7:75:9e:16:9b:
                    8f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:24:A2:F7:59:9D:4D:A5:9F:9A:C2:F7:65:D9:46:8B:88:28:81:2C
            X509v3 Authority Key Identifier:
                keyid:31:9D:AF:6D:91:7A:6B:C7:6D:7A:CC:FE:49:E2:8A:ED:8F:63:AB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3235312e3234382e302f32312d3231203d3e20323637353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         47:20:cc:c4:f2:89:08:b6:41:fc:9e:0f:1d:11:67:24:3d:f9:
         8f:fa:a6:de:d3:55:a4:32:2f:e9:66:5f:c8:63:8b:4c:a1:37:
         81:25:c8:d5:6b:7c:32:87:42:15:fe:89:f3:6e:47:ed:8e:8a:
         d3:ce:c0:f3:68:9d:ce:aa:71:80:64:81:57:ac:9d:d0:94:ba:
         61:cb:03:92:dd:e5:0c:61:54:a8:92:b7:06:b6:18:bc:ac:bb:
         7d:04:47:10:7c:9a:23:cf:7e:d8:12:52:f6:d7:66:8d:38:0b:
         88:bb:cc:b3:72:fb:63:f3:3c:2f:e1:19:f4:bf:88:fd:2a:90:
         08:de:65:50:69:60:a6:fd:74:ff:98:df:1c:e8:e5:9e:7f:dd:
         c9:14:df:21:e0:56:3d:84:88:33:91:1b:64:de:47:e5:84:7d:
         ea:3b:4b:76:c8:50:ef:c0:1c:5f:43:6e:9a:b7:98:f5:5d:17:
         58:c3:36:74:99:72:86:5c:9a:e9:99:02:ca:3d:af:0a:1c:3b:
         7a:7f:c8:3f:d3:8c:d8:32:67:53:da:84:56:1c:c4:23:58:7e:
         28:40:45:c5:42:26:3f:64:e4:a6:60:89:e8:1b:50:b7:c4:8b:
         36:08:96:d3:c1:2f:de:cd:36:2d:0a:26:b8:7f:17:8d:dc:30:
         7c:42:14:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 11:03:39 2026 by rpki-client