Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/3138362e3139382e3134342e302f32342d3234203d3e20323733343433.roa
File:                     3138362e3139382e3134342e302f32342d3234203d3e20323733343433.roa (raw, json)
Hash identifier:          YzbvcHXW648bOwCPWJJgdQ9ryRpjxTrTOA+xlWVFs+M=
Subject key identifier:   7C:B3:80:0F:71:72:D3:22:B0:DF:24:69:17:95:08:A3:48:F9:0B:D9
Certificate issuer:       /CN=601AB4C2CB27698A7EF0684324D416B8646A9B75
Certificate serial:       1508F8555C8E86475F86A595F09CB2634546618D
Authority key identifier: 60:1A:B4:C2:CB:27:69:8A:7E:F0:68:43:24:D4:16:B8:64:6A:9B:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/3138362e3139382e3134342e302f32342d3234203d3e20323733343433.roa
Signing time:             Mon 26 Oct 2026 12:45:02 +0000
ROA not before:           Mon 26 Oct 2026 12:40:02 +0000
ROA not after:            Mon 25 Oct 2027 12:45:02 +0000
asID:                     273443
IP address blocks:        186.198.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.crl
                          rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 02:29:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:08:f8:55:5c:8e:86:47:5f:86:a5:95:f0:9c:b2:63:45:46:61:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601AB4C2CB27698A7EF0684324D416B8646A9B75
        Validity
            Not Before: Oct 26 12:40:02 2026 GMT
            Not After : Oct 25 12:45:02 2027 GMT
        Subject: CN=7CB3800F7172D322B0DF2469179508A348F90BD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d2:79:26:09:f6:4a:ce:a3:84:aa:03:0d:83:
                    e4:df:21:b2:94:24:47:8a:33:b5:33:e2:75:32:85:
                    39:3c:e5:57:50:33:56:f7:35:19:6a:0a:9e:c1:a2:
                    99:4d:c3:24:be:e2:0d:dc:8f:be:1b:49:55:57:e1:
                    0c:0b:72:6a:98:cc:46:28:1d:c0:c8:88:be:f8:06:
                    af:a5:9f:e3:45:6a:c8:f5:5f:9c:31:cd:8f:ff:af:
                    c8:93:8f:46:82:60:ac:c9:18:6f:f3:94:12:d8:9b:
                    bb:25:fb:2e:0d:e7:f4:2d:4c:84:30:91:af:02:33:
                    c7:68:8d:a1:85:51:42:25:d0:06:41:dd:b2:c5:ab:
                    24:7f:5c:a9:11:cb:87:48:7e:dc:30:a0:95:9a:c1:
                    22:5c:f6:c6:f9:81:8a:f7:b8:79:22:cc:83:08:b4:
                    55:3d:5b:11:35:b9:f1:90:6f:27:a8:80:f3:6d:08:
                    18:4c:f3:e4:9d:62:f3:98:ce:71:ec:ff:58:4f:6b:
                    42:ed:20:3f:fe:fb:7c:a2:09:87:2a:57:2a:06:8f:
                    df:98:9d:db:a8:81:2a:91:51:7c:e4:b4:81:3f:9b:
                    f8:da:2c:30:70:82:00:07:27:33:80:d0:18:ca:64:
                    18:02:14:6d:f8:8d:c7:6c:39:2d:bb:a5:5a:34:2c:
                    b1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B3:80:0F:71:72:D3:22:B0:DF:24:69:17:95:08:A3:48:F9:0B:D9
            X509v3 Authority Key Identifier:
                keyid:60:1A:B4:C2:CB:27:69:8A:7E:F0:68:43:24:D4:16:B8:64:6A:9B:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/3138362e3139382e3134342e302f32342d3234203d3e20323733343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.198.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:97:56:23:d1:a8:fe:04:f1:15:5f:1a:a6:e5:8f:bb:9e:79:
         4f:aa:63:b9:75:06:55:df:7c:d8:92:c9:de:8b:93:10:68:c9:
         10:d6:60:5a:49:85:bc:b8:64:06:d4:84:e9:6e:b7:0c:e7:d0:
         09:c7:94:5d:c7:86:22:93:46:3c:e5:af:b9:ab:8d:c5:3c:fd:
         2c:c4:ea:e2:b2:9b:05:24:19:4e:f9:a9:fc:d0:bd:50:17:2e:
         24:ca:95:fe:34:37:9d:17:01:a7:d3:7f:8c:01:13:c4:76:07:
         47:17:b7:e9:9d:49:54:d3:b1:73:92:41:8e:ef:cf:55:e3:de:
         cc:1a:89:3b:b0:c6:55:41:2a:0b:67:cf:62:3f:9d:ad:a4:5d:
         bf:6f:38:4c:3c:1f:8f:46:af:03:be:69:c9:90:40:a7:25:ff:
         99:0e:fb:52:aa:c3:b9:75:9a:d3:8c:70:3c:3f:43:96:85:93:
         9d:48:c8:aa:11:5b:e4:52:16:21:07:65:7d:ba:4f:78:f5:34:
         84:bb:89:ed:3f:ff:ab:87:2a:b9:4f:dd:bb:d3:db:31:54:93:
         50:22:26:21:da:4e:07:4e:b9:ee:60:05:3c:47:e4:14:de:4e:
         77:03:e0:46:ac:49:79:47:12:42:b0:bb:7a:2e:bf:04:97:93:
         ad:a0:b0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 02:10:04 2026 by rpki-client