Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/3138362e3230382e3235352e302f32342d3234203d3e20323633303938.roa
File:                     3138362e3230382e3235352e302f32342d3234203d3e20323633303938.roa (raw, json)
Hash identifier:          9zmTgg28oPV8e2owDoinRr++5r99CCfxyHZTHTtCmZo=
Subject key identifier:   56:52:74:FD:39:F5:91:F0:1B:70:71:FB:BA:21:F7:8D:30:21:DC:77
Certificate issuer:       /CN=74F9C88A4F4F16E11392F600961CE950348548CB
Certificate serial:       5157CED3BB95AE7110420FB751F350FA86CBFCB7
Authority key identifier: 74:F9:C8:8A:4F:4F:16:E1:13:92:F6:00:96:1C:E9:50:34:85:48:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74F9C88A4F4F16E11392F600961CE950348548CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/3138362e3230382e3235352e302f32342d3234203d3e20323633303938.roa
Signing time:             Wed 03 Jun 2026 16:11:27 +0000
ROA not before:           Wed 03 Jun 2026 16:06:27 +0000
ROA not after:            Wed 02 Jun 2027 16:11:27 +0000
asID:                     263098
IP address blocks:        186.208.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/74F9C88A4F4F16E11392F600961CE950348548CB.crl
                          rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/74F9C88A4F4F16E11392F600961CE950348548CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74F9C88A4F4F16E11392F600961CE950348548CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 02:20:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:57:ce:d3:bb:95:ae:71:10:42:0f:b7:51:f3:50:fa:86:cb:fc:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74F9C88A4F4F16E11392F600961CE950348548CB
        Validity
            Not Before: Jun  3 16:06:27 2026 GMT
            Not After : Jun  2 16:11:27 2027 GMT
        Subject: CN=565274FD39F591F01B7071FBBA21F78D3021DC77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ac:e2:d6:e2:46:6e:74:13:c1:cb:a8:0d:5c:
                    83:59:ab:8e:67:39:a6:2a:1f:f7:ba:22:fd:68:67:
                    1d:5f:76:4a:01:ca:56:6f:d9:39:b3:71:f5:0f:c7:
                    8c:60:1b:e1:c1:63:0a:29:82:3c:58:6e:c0:98:e8:
                    bf:7a:9f:e3:30:12:fb:12:5e:49:ed:d8:81:68:3d:
                    87:d3:f2:e0:10:a8:9e:f8:4a:a4:fd:2d:c7:25:30:
                    76:7e:50:3b:a1:d9:62:03:49:02:08:44:c0:b0:e4:
                    96:20:bc:19:b5:d7:5f:f6:0f:18:a7:a7:f0:11:8a:
                    ed:92:cc:5e:df:82:73:6d:d3:47:d4:a8:3d:4a:49:
                    77:cf:58:f4:c6:1b:ca:ac:07:8a:71:bb:47:0a:12:
                    cc:9b:0f:93:47:83:38:78:70:77:5e:26:cb:4b:b6:
                    fd:86:26:0e:ef:fd:fc:2b:9a:18:12:a8:38:c9:f1:
                    49:d0:7a:59:30:43:d8:72:1a:26:c2:48:15:fe:e8:
                    90:bb:7d:80:96:27:8e:19:8a:14:a7:30:54:7e:22:
                    98:67:58:54:d1:c1:1f:09:30:3f:f5:0e:d2:04:d9:
                    aa:16:63:72:51:c5:d8:5d:73:7f:7a:31:53:5e:fa:
                    64:f4:76:fd:bc:af:3a:a9:d4:69:c7:39:ff:57:18:
                    2f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:52:74:FD:39:F5:91:F0:1B:70:71:FB:BA:21:F7:8D:30:21:DC:77
            X509v3 Authority Key Identifier:
                keyid:74:F9:C8:8A:4F:4F:16:E1:13:92:F6:00:96:1C:E9:50:34:85:48:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/74F9C88A4F4F16E11392F600961CE950348548CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74F9C88A4F4F16E11392F600961CE950348548CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/3138362e3230382e3235352e302f32342d3234203d3e20323633303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:42:6b:26:7b:c6:a8:fb:29:7c:0f:2e:ef:fe:bf:ef:8b:9a:
         14:45:2e:58:76:21:a8:9f:8a:d4:8d:f2:f1:5d:46:68:53:98:
         30:98:7a:03:e0:f4:90:d6:30:c1:e3:20:b1:63:10:31:f9:16:
         aa:38:90:d2:d1:f1:cb:93:73:04:5a:d4:1c:15:a9:35:cc:b8:
         59:75:32:1d:ac:22:c8:2a:cf:ae:41:07:06:9f:58:d4:35:78:
         66:8c:3f:6f:65:7a:e5:e5:36:b3:00:47:2e:c3:db:9e:f1:e6:
         f9:1b:03:0f:fc:eb:8f:5d:4c:a0:88:a6:f3:45:f5:1d:ac:7c:
         bb:d1:ba:2c:8c:65:89:63:ca:5b:66:63:4b:4b:b7:27:ec:2f:
         fa:33:63:77:5e:58:99:1f:37:94:62:66:9b:6c:04:40:bd:27:
         90:50:51:45:5a:c3:d7:53:c2:b5:79:d0:0a:bb:f3:c5:63:45:
         27:fe:fd:29:62:e6:ad:4b:c4:47:e5:97:76:bb:61:3f:cc:bc:
         b0:70:91:8a:6d:1a:6b:88:eb:b7:a4:0e:bc:36:ab:5c:96:d6:
         d3:e8:79:3a:b7:db:07:b8:ba:84:1e:dd:1b:e9:6e:62:5b:ff:
         e7:ab:35:5e:30:ca:fa:7d:f1:69:8b:f4:44:bf:e0:ab:ee:d5:
         35:ab:90:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:51:57 2026 by rpki-client