Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3138362e3233352e33322e302f32302d3234203d3e20323730383134.roa
File:                     3138362e3233352e33322e302f32302d3234203d3e20323730383134.roa (raw, json)
Hash identifier:          clQD17eAxlxBP5fpb7Jff1b5gPXKVi0uXXjygiwCd3M=
Subject key identifier:   B3:8B:AD:F8:ED:3C:F6:AC:EB:E1:57:66:A9:E2:9D:22:08:7B:82:8F
Certificate issuer:       /CN=1FF4D84F5EA18738B398382BB8664840225008F9
Certificate serial:       4517503F0ADC3C23EEE82CEA69272EE8BA30583B
Authority key identifier: 1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3138362e3233352e33322e302f32302d3234203d3e20323730383134.roa
Signing time:             Mon 28 Sep 2026 17:49:58 +0000
ROA not before:           Mon 28 Sep 2026 17:44:58 +0000
ROA not after:            Mon 27 Sep 2027 17:49:58 +0000
asID:                     270814
IP address blocks:        186.235.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl
                          rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 09:54:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:17:50:3f:0a:dc:3c:23:ee:e8:2c:ea:69:27:2e:e8:ba:30:58:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FF4D84F5EA18738B398382BB8664840225008F9
        Validity
            Not Before: Sep 28 17:44:58 2026 GMT
            Not After : Sep 27 17:49:58 2027 GMT
        Subject: CN=B38BADF8ED3CF6ACEBE15766A9E29D22087B828F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b2:ac:3d:d8:a2:32:27:2e:fc:da:b4:9e:3f:
                    93:8f:6e:07:b3:ac:37:91:a4:c7:6a:8f:76:cd:6e:
                    77:a1:61:ff:23:cb:88:0d:7b:52:d9:d8:b1:aa:c4:
                    6c:7c:f9:93:4a:76:52:4c:6e:06:c2:89:eb:fd:d0:
                    3d:a7:29:e9:6f:1f:eb:64:7a:81:e1:7f:39:17:5e:
                    06:f0:3c:21:4e:e5:a7:93:8c:d4:0d:44:af:73:39:
                    ce:49:71:81:bc:ea:66:bf:3e:9b:a0:9e:d1:db:75:
                    bb:53:34:29:23:c4:db:91:d5:13:36:31:58:ea:d7:
                    2f:db:48:2f:6d:4d:9d:eb:95:fb:62:29:6e:bd:fc:
                    58:ba:2b:e7:87:9c:cd:50:03:18:36:4c:01:80:47:
                    e7:dc:64:02:66:65:d1:de:bd:2e:0f:60:ea:7c:6a:
                    30:10:a9:a6:0f:9a:01:43:f7:e4:5a:5e:01:d5:92:
                    f7:a4:f3:42:90:fa:0b:e7:5f:db:f7:b8:23:30:52:
                    5e:9e:a9:f0:ac:7f:93:c2:d8:fe:f5:b8:62:b2:21:
                    aa:31:a6:b0:e3:c5:34:4d:79:9e:d7:fc:03:46:3e:
                    20:fa:e3:65:cb:ff:d2:08:8c:2f:01:85:ff:e8:fa:
                    29:73:5b:4b:2e:9b:43:18:1a:3a:29:71:45:12:b0:
                    18:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:8B:AD:F8:ED:3C:F6:AC:EB:E1:57:66:A9:E2:9D:22:08:7B:82:8F
            X509v3 Authority Key Identifier:
                keyid:1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3138362e3233352e33322e302f32302d3234203d3e20323730383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         35:39:3c:72:f4:87:09:52:d0:47:9b:1b:6e:e6:5d:ef:d5:bd:
         98:59:7b:c4:99:74:b7:ee:38:52:f0:d4:2b:72:86:13:d3:4d:
         62:cf:30:fe:33:a1:a4:51:16:95:c0:70:c4:e4:1b:fe:44:f2:
         59:4a:ed:cd:38:7f:ba:e2:96:54:10:28:42:c5:33:a0:b8:89:
         aa:25:08:a0:24:45:3a:8b:14:53:dc:d2:11:15:2d:80:64:ce:
         58:c6:0b:32:9d:fa:b8:76:91:93:58:0c:79:29:ae:e6:69:2e:
         99:9a:c9:c2:0d:06:ab:8d:30:53:6c:99:c1:a4:24:a8:94:66:
         0e:d9:bd:6d:7f:da:73:d9:7f:20:b5:4f:5c:36:eb:bc:6c:56:
         3e:0e:30:97:36:98:a5:26:69:73:24:e6:72:87:af:97:c0:cc:
         c6:cb:65:99:06:16:bc:5e:0f:e9:3c:ff:36:d3:05:92:1a:d3:
         ad:db:62:d0:8e:d6:15:27:fc:63:ab:67:2b:7d:0b:d3:68:ef:
         70:ae:44:b3:9a:d5:f4:10:4e:16:5c:39:48:b6:a8:9f:62:5d:
         f1:77:14:c4:38:bc:71:8b:0a:a8:09:db:4c:b5:29:4f:85:f4:
         0e:1b:4b:8a:c9:fa:4e:96:64:46:23:a3:68:0b:83:81:1c:17:
         97:f1:82:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:46:02 2026 by rpki-client