Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/E3Er2DJCtiTQJn3J31zgSxqUXEp8VDMqpvnUHGMzidhg/0/3138372e33312e39392e302f32342d3234203d3e20323638313838.roa
File:                     3138372e33312e39392e302f32342d3234203d3e20323638313838.roa (raw, json)
Hash identifier:          gUvuwQ1eaClXQTLCqaAbJk5TVFgh02hsfMvX8lbIO7A=
Subject key identifier:   2D:02:46:1D:21:22:D2:FB:7C:ED:DF:76:AF:7E:35:5C:3D:3F:19:7F
Certificate issuer:       /CN=6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2
Certificate serial:       5B90EBB6C191FA3AC1D94DC4DAC12CDCC729EBB9
Authority key identifier: 6A:D7:3C:62:7C:D5:5D:F9:A3:DA:F8:8D:8A:D2:45:16:9D:BD:F0:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3Er2DJCtiTQJn3J31zgSxqUXEp8VDMqpvnUHGMzidhg/0/3138372e33312e39392e302f32342d3234203d3e20323638313838.roa
Signing time:             Wed 28 Oct 2026 18:15:07 +0000
ROA not before:           Wed 28 Oct 2026 18:10:07 +0000
ROA not after:            Wed 27 Oct 2027 18:15:07 +0000
asID:                     268188
IP address blocks:        187.31.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E3Er2DJCtiTQJn3J31zgSxqUXEp8VDMqpvnUHGMzidhg/0/6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2.crl
                          rsync://rpki-repo.registro.br/repo/E3Er2DJCtiTQJn3J31zgSxqUXEp8VDMqpvnUHGMzidhg/0/6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 14:38:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:90:eb:b6:c1:91:fa:3a:c1:d9:4d:c4:da:c1:2c:dc:c7:29:eb:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2
        Validity
            Not Before: Oct 28 18:10:07 2026 GMT
            Not After : Oct 27 18:15:07 2027 GMT
        Subject: CN=2D02461D2122D2FB7CEDDF76AF7E355C3D3F197F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5f:a1:94:1c:de:c6:b4:c7:71:15:98:ee:a0:
                    99:b3:1b:55:bc:9e:0a:32:78:2e:7c:9b:53:fa:5e:
                    db:17:29:2e:1b:65:08:83:2a:3b:fc:8e:32:2b:7b:
                    9c:11:40:a6:7f:73:5c:80:e5:fb:f4:e0:93:26:b9:
                    4f:90:18:52:88:a9:67:13:c4:dc:09:6a:55:e1:2e:
                    7e:c1:47:5b:89:15:d3:c6:62:e2:48:63:6c:4c:5e:
                    bb:b5:9e:1e:67:7d:b7:a8:51:e9:8b:eb:cf:8c:a9:
                    db:a3:2e:16:44:6c:31:e5:d4:3b:1e:35:bc:01:25:
                    ac:b6:5c:5f:71:5a:92:43:eb:95:3e:2f:e6:44:3a:
                    5f:8c:d1:c3:53:46:ed:ea:e1:18:ce:13:86:3d:b4:
                    1c:5b:0f:27:85:bd:48:cc:a9:04:88:38:81:13:bc:
                    5c:f8:58:08:99:53:3c:ea:07:b0:11:de:3d:7b:e0:
                    f9:5a:3b:1a:51:41:ee:d6:aa:70:fb:b6:e7:4a:4b:
                    53:5b:30:dc:85:b0:38:8c:65:9f:db:83:b5:87:3d:
                    71:1b:19:68:17:32:2f:14:50:58:07:ce:cb:38:ed:
                    e8:bb:52:78:9a:27:87:a3:b5:52:ac:41:12:90:55:
                    30:9b:bf:a8:cd:00:49:cc:80:52:16:3a:b5:af:82:
                    dd:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:02:46:1D:21:22:D2:FB:7C:ED:DF:76:AF:7E:35:5C:3D:3F:19:7F
            X509v3 Authority Key Identifier:
                keyid:6A:D7:3C:62:7C:D5:5D:F9:A3:DA:F8:8D:8A:D2:45:16:9D:BD:F0:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3Er2DJCtiTQJn3J31zgSxqUXEp8VDMqpvnUHGMzidhg/0/6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3Er2DJCtiTQJn3J31zgSxqUXEp8VDMqpvnUHGMzidhg/0/3138372e33312e39392e302f32342d3234203d3e20323638313838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.31.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:90:fc:b8:8e:b3:71:70:65:8f:e3:54:9f:4b:dc:b9:85:05:
         41:1f:14:3b:04:a5:df:b8:40:f4:cf:e3:65:0d:86:ce:33:53:
         ee:42:a7:ee:00:c7:bd:e1:d6:1b:ff:9a:7d:01:5a:36:0c:3a:
         87:a3:3f:b9:7e:fb:3a:99:08:21:2f:b1:32:14:4e:a6:23:38:
         02:f6:7f:9b:7b:3b:e2:89:fe:6a:09:c7:46:72:33:58:51:4c:
         49:67:00:06:87:d5:e6:8d:cd:2e:1a:db:60:ab:5f:80:b0:99:
         47:bb:f8:88:f6:63:d9:a5:29:1e:c7:32:2c:b1:5c:bd:86:42:
         56:ea:a1:e2:5c:81:76:57:6e:62:f7:a1:40:81:c5:dc:d5:e4:
         ee:09:0d:6c:85:30:43:23:93:7b:6a:60:f2:f4:94:8d:cf:fe:
         12:97:42:22:07:1a:51:b2:ce:ee:8d:01:e9:87:eb:d7:d4:0d:
         4a:78:1c:6f:81:a6:8d:fd:c6:af:f6:6e:20:29:09:81:0b:30:
         67:5d:b0:8c:44:0a:60:d7:4e:3e:03:e1:7f:83:a3:1c:4a:43:
         92:ff:da:91:c6:97:a5:3e:a1:82:1f:e4:3d:0b:75:cf:dd:1c:
         c3:4f:44:db:0e:43:e8:00:6a:05:5d:2a:87:a0:71:b9:16:b3:
         7a:5d:2a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 01:12:58 2026 by rpki-client