Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/E3Er2DJCtiTQJn3J31zgSxqUXEp8VDMqpvnUHGMzidhg/0/3138372e33312e38392e302f32342d3234203d3e20323638313838.roa
File:                     3138372e33312e38392e302f32342d3234203d3e20323638313838.roa (raw, json)
Hash identifier:          IbCIHxr/ikjACF6ajA9ZA6owGGuDtaPtgouzJIQ/EY4=
Subject key identifier:   68:FC:91:01:55:45:56:3E:BD:A4:13:5E:79:8A:56:1F:0B:8A:EF:F3
Certificate issuer:       /CN=6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2
Certificate serial:       5E53ED0292889EBAF45DE9546DC54B116B2602F6
Authority key identifier: 6A:D7:3C:62:7C:D5:5D:F9:A3:DA:F8:8D:8A:D2:45:16:9D:BD:F0:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3Er2DJCtiTQJn3J31zgSxqUXEp8VDMqpvnUHGMzidhg/0/3138372e33312e38392e302f32342d3234203d3e20323638313838.roa
Signing time:             Wed 28 Oct 2026 18:15:12 +0000
ROA not before:           Wed 28 Oct 2026 18:10:12 +0000
ROA not after:            Wed 27 Oct 2027 18:15:12 +0000
asID:                     268188
IP address blocks:        187.31.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E3Er2DJCtiTQJn3J31zgSxqUXEp8VDMqpvnUHGMzidhg/0/6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2.crl
                          rsync://rpki-repo.registro.br/repo/E3Er2DJCtiTQJn3J31zgSxqUXEp8VDMqpvnUHGMzidhg/0/6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 14:38:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:53:ed:02:92:88:9e:ba:f4:5d:e9:54:6d:c5:4b:11:6b:26:02:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2
        Validity
            Not Before: Oct 28 18:10:12 2026 GMT
            Not After : Oct 27 18:15:12 2027 GMT
        Subject: CN=68FC91015545563EBDA4135E798A561F0B8AEFF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8c:37:72:af:14:30:81:a1:2b:98:43:57:c9:
                    a2:78:93:55:21:4a:b3:3c:c8:f8:79:ac:20:9a:f2:
                    3c:04:f5:fa:52:85:6d:50:55:de:db:35:5b:c2:ae:
                    6d:cd:ad:f0:39:b9:46:af:f4:7e:03:10:6c:bb:11:
                    07:28:2a:30:a8:ed:20:ff:36:b5:3d:ae:14:b2:b0:
                    fb:54:6d:8f:77:9c:29:5d:a2:c0:6e:ba:79:93:bc:
                    b6:0e:91:80:ea:f3:cb:83:ac:65:a6:ae:ea:14:a9:
                    df:f9:3f:62:74:fc:28:76:f0:3e:18:7d:bf:6c:09:
                    16:3b:13:93:90:1f:e9:52:3e:43:f0:86:52:aa:be:
                    30:a8:e3:bd:a0:3d:19:54:e7:fc:00:36:4f:d8:17:
                    3d:81:7f:03:e9:c9:90:8c:43:81:cd:2c:d6:e4:f7:
                    2d:ee:8e:83:f7:94:f7:c9:2c:53:27:f7:df:1c:40:
                    19:7d:2e:14:d0:c5:bd:1f:96:c8:ce:e3:b3:19:ae:
                    39:2c:e0:99:f5:5a:a3:9e:39:f4:32:8e:27:f1:95:
                    60:22:3e:40:5e:18:64:89:8e:47:2c:d0:59:8d:12:
                    bc:59:61:04:31:f8:8c:38:71:57:ad:aa:ab:ae:a2:
                    2c:7a:e7:a5:3e:51:c6:6c:d8:fb:4b:f1:e5:92:20:
                    e9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:FC:91:01:55:45:56:3E:BD:A4:13:5E:79:8A:56:1F:0B:8A:EF:F3
            X509v3 Authority Key Identifier:
                keyid:6A:D7:3C:62:7C:D5:5D:F9:A3:DA:F8:8D:8A:D2:45:16:9D:BD:F0:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3Er2DJCtiTQJn3J31zgSxqUXEp8VDMqpvnUHGMzidhg/0/6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3Er2DJCtiTQJn3J31zgSxqUXEp8VDMqpvnUHGMzidhg/0/3138372e33312e38392e302f32342d3234203d3e20323638313838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.31.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:38:48:af:0a:d5:f3:51:ce:fe:eb:69:bc:3c:f3:e5:50:4e:
         11:d3:c8:ca:0e:da:3b:19:ab:6a:b5:eb:2f:a5:26:9d:4a:2f:
         d0:40:45:3a:3d:38:7d:36:3b:af:32:e6:82:7d:a2:86:80:a9:
         8b:36:3f:e8:f8:3d:0f:67:95:46:c5:84:9c:63:d2:d4:6e:32:
         98:dd:b7:d8:3a:45:e8:ea:df:c0:50:c3:ce:9e:33:fc:ad:d1:
         12:01:e9:32:ad:ee:76:6b:fb:2f:a3:97:9f:a7:b1:09:be:4d:
         92:ed:86:a5:f2:8d:aa:9c:7b:be:e0:69:37:51:11:e6:69:b9:
         14:e4:3b:2f:77:f4:99:71:d1:cb:ec:29:b3:3f:9c:78:92:45:
         3a:5a:d9:28:73:80:b5:50:5b:ff:a7:5b:37:26:2d:02:45:f5:
         11:4a:e7:0e:f1:1d:52:1f:79:cb:95:6e:12:b5:aa:b3:e3:0b:
         e5:ef:6a:48:d2:55:57:37:64:50:aa:4a:d3:fe:3b:30:c5:91:
         1e:92:46:1e:82:9b:d7:d0:ce:8a:85:a6:48:9c:14:e2:6a:da:
         5d:0e:30:fe:39:97:02:72:11:23:de:e7:de:04:28:83:75:bf:
         d2:8f:69:d7:51:54:27:b2:89:c6:b4:ab:3e:ef:98:c1:93:a5:
         53:2d:95:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 01:13:04 2026 by rpki-client