Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3138362e3233322e38302e302f32322d3234203d3e203533313037.roa
File:                     3138362e3233322e38302e302f32322d3234203d3e203533313037.roa (raw, json)
Hash identifier:          OeZTQT1Sg7918O/eJu8WkZzVZ8fwoKXGcmGQu0/k23Y=
Subject key identifier:   0F:63:E2:56:75:9E:77:2C:F7:86:CE:CA:6A:5D:38:51:7A:45:75:00
Certificate issuer:       /CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
Certificate serial:       07D205786805C6BA397E5A1EA103D1D42F6043B3
Authority key identifier: 1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3138362e3233322e38302e302f32322d3234203d3e203533313037.roa
Signing time:             Wed 03 Jun 2026 14:54:27 +0000
ROA not before:           Wed 03 Jun 2026 14:49:27 +0000
ROA not after:            Wed 02 Jun 2027 14:54:27 +0000
asID:                     53107
IP address blocks:        186.232.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl
                          rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 14:18:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:d2:05:78:68:05:c6:ba:39:7e:5a:1e:a1:03:d1:d4:2f:60:43:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
        Validity
            Not Before: Jun  3 14:49:27 2026 GMT
            Not After : Jun  2 14:54:27 2027 GMT
        Subject: CN=0F63E256759E772CF786CECA6A5D38517A457500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:da:e9:3f:cf:e3:63:6a:74:66:c1:6e:65:f0:
                    c9:b3:70:bf:7d:6b:e9:36:ae:6d:b1:b2:f9:1f:2e:
                    f7:2e:5f:4c:d6:16:47:29:76:fd:ce:cb:66:fc:b2:
                    0e:51:95:3e:58:ae:ee:5c:87:b7:bd:ad:55:6e:8b:
                    ff:3a:d6:15:2b:f2:ee:32:bb:7d:d6:76:97:95:64:
                    0c:f3:89:3e:ef:0d:77:bd:c8:de:90:b7:cf:b4:89:
                    7a:70:ac:aa:52:a2:c2:12:15:7d:12:e0:e6:81:e0:
                    8d:2a:e0:da:4d:f9:3b:ff:f4:0d:00:3c:7e:a8:5d:
                    a7:d7:b6:87:57:c7:71:7c:28:8a:53:ad:0f:9e:bd:
                    b3:82:45:6f:75:41:cd:ad:93:62:a1:64:ca:95:75:
                    64:32:0d:ab:b4:5e:a3:26:6c:ea:ba:37:7d:a8:c2:
                    da:6e:71:f2:a0:18:44:7a:67:92:85:b4:18:a4:37:
                    d5:d8:e1:01:86:f3:51:cd:e2:11:d2:86:3f:e6:5f:
                    d0:11:f2:14:ad:d3:e4:e4:5e:74:4e:c8:23:d7:28:
                    1d:55:72:bd:4b:03:86:50:29:59:77:01:e3:8e:c9:
                    78:96:65:d1:75:8d:02:99:26:2f:e4:ed:58:fc:cd:
                    45:37:33:4f:f9:62:e9:e2:63:31:23:d2:05:4b:7d:
                    b8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:63:E2:56:75:9E:77:2C:F7:86:CE:CA:6A:5D:38:51:7A:45:75:00
            X509v3 Authority Key Identifier:
                keyid:1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3138362e3233322e38302e302f32322d3234203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:9d:bc:20:44:eb:4c:9a:5e:78:99:5b:1f:32:6a:2a:84:ab:
         c3:49:ce:3a:a1:e7:f9:3c:65:11:8a:23:7a:41:cc:fe:1d:c9:
         b2:e2:00:1b:17:5a:41:dc:5c:bd:a9:a1:86:fd:49:f9:df:49:
         c7:c7:72:01:2b:30:b3:c0:ff:40:f7:d9:67:7b:44:82:ac:ce:
         ea:94:7a:ca:86:07:83:eb:6f:52:98:9b:69:47:6b:60:45:18:
         17:0a:97:b9:0f:63:d1:d0:ad:49:a5:2c:70:63:1d:b2:e5:d5:
         73:4c:78:5c:31:2e:62:ca:cd:6c:6d:64:73:65:21:a8:50:ad:
         cb:26:ff:40:5c:06:13:0a:08:b8:18:32:eb:aa:e5:0a:b8:30:
         3b:fc:5d:21:8a:bf:0f:b2:e6:01:ce:9b:6f:19:59:de:92:69:
         ad:32:46:9b:0a:c1:c1:de:8f:ba:89:ae:b2:39:ad:65:8e:42:
         8c:b4:fc:c0:26:ff:ff:28:41:72:d3:28:26:31:84:41:18:e9:
         ed:ec:c2:65:bd:1a:3f:2e:a8:80:2e:78:3e:84:20:bb:0e:1a:
         59:bc:f1:1f:38:86:a1:e1:86:1b:da:b2:8d:23:c4:63:57:a4:
         90:18:49:f6:8c:17:03:e2:6e:4d:e6:31:b8:13:3f:f4:ce:00:
         d7:a4:e3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:21:59 2026 by rpki-client