Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/3138372e38362e32332e302f32342d3234203d3e20323634303737.roa
File:                     3138372e38362e32332e302f32342d3234203d3e20323634303737.roa (raw, json)
Hash identifier:          Kxmzuj50AUTpUzVRwMs7p4pzjFmct2RKET2B0Z0B6KQ=
Subject key identifier:   83:F0:28:64:03:65:23:7C:98:48:1F:0D:58:0B:A3:74:21:B7:0A:6A
Certificate issuer:       /CN=93E23A378F12FA39042D211D75C0B0B5264A48A0
Certificate serial:       5ECC29E6E62E78E01D100624BBF95AA2E1017714
Authority key identifier: 93:E2:3A:37:8F:12:FA:39:04:2D:21:1D:75:C0:B0:B5:26:4A:48:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93E23A378F12FA39042D211D75C0B0B5264A48A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/3138372e38362e32332e302f32342d3234203d3e20323634303737.roa
Signing time:             Fri 27 Feb 2026 12:53:23 +0000
ROA not before:           Fri 27 Feb 2026 12:48:23 +0000
ROA not after:            Fri 26 Feb 2027 12:53:23 +0000
asID:                     264077
IP address blocks:        187.86.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/93E23A378F12FA39042D211D75C0B0B5264A48A0.crl
                          rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/93E23A378F12FA39042D211D75C0B0B5264A48A0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93E23A378F12FA39042D211D75C0B0B5264A48A0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 18:28:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:cc:29:e6:e6:2e:78:e0:1d:10:06:24:bb:f9:5a:a2:e1:01:77:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93E23A378F12FA39042D211D75C0B0B5264A48A0
        Validity
            Not Before: Feb 27 12:48:23 2026 GMT
            Not After : Feb 26 12:53:23 2027 GMT
        Subject: CN=83F028640365237C98481F0D580BA37421B70A6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:24:90:31:cd:ff:18:e6:34:5f:41:10:c1:58:
                    78:44:55:b0:6a:68:40:81:3d:34:62:57:98:1b:2c:
                    87:15:ff:dd:6f:65:49:94:32:2c:f4:db:0c:c1:90:
                    0f:9b:6e:99:20:bf:41:90:43:e2:9b:1a:e7:3c:0f:
                    75:72:6f:13:75:3f:49:61:75:ba:63:4a:65:b9:a4:
                    fd:9f:a2:77:81:fd:54:87:1f:a3:87:5b:2b:61:5c:
                    42:7a:52:a5:e0:5d:98:93:22:5d:00:50:d1:3f:8c:
                    10:e8:1d:32:01:8a:30:99:ed:a4:d5:26:b0:fa:97:
                    40:98:08:7f:2e:c4:11:f0:78:c6:14:f9:ca:e3:c1:
                    10:c1:1a:87:50:d7:55:8e:70:78:93:53:71:34:4d:
                    9b:81:35:f7:a3:8f:cc:21:99:92:4b:6d:4c:3b:fc:
                    c3:87:68:d4:ff:08:be:99:41:ae:65:24:5b:be:43:
                    80:3f:ad:07:63:54:de:61:1d:3d:dc:a9:e8:d5:99:
                    9f:99:25:80:a8:7a:68:6c:e1:73:bf:38:7e:dd:66:
                    1a:dd:ec:0c:1a:0b:d0:b9:dd:e6:c4:34:23:42:eb:
                    c4:b7:12:51:9c:ce:c3:db:99:11:19:27:f0:2a:07:
                    b9:3b:60:55:16:b4:6f:0d:0b:1f:61:09:e3:68:a0:
                    05:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F0:28:64:03:65:23:7C:98:48:1F:0D:58:0B:A3:74:21:B7:0A:6A
            X509v3 Authority Key Identifier:
                keyid:93:E2:3A:37:8F:12:FA:39:04:2D:21:1D:75:C0:B0:B5:26:4A:48:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/93E23A378F12FA39042D211D75C0B0B5264A48A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93E23A378F12FA39042D211D75C0B0B5264A48A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/3138372e38362e32332e302f32342d3234203d3e20323634303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:de:39:0a:2f:4b:bd:b5:6b:1f:95:70:45:b7:9b:66:1a:e1:
         a6:94:00:61:9c:e9:11:2a:5a:c4:56:c3:d8:9d:5f:e3:a3:81:
         b7:60:ac:6e:73:c9:f3:2a:b4:08:89:38:60:5b:08:9a:63:37:
         a0:ce:e0:5f:9f:c9:1c:e1:f4:49:8c:c6:95:62:7e:0d:58:23:
         0b:84:90:c1:ce:c3:a1:95:18:4f:b5:3b:48:96:8b:fc:f9:5a:
         f6:fc:b8:e6:c4:0d:b1:0c:5b:25:75:1d:bf:b7:41:74:c0:23:
         4f:14:a9:eb:0c:76:4f:8e:74:6d:49:8c:db:53:c0:f7:ac:9a:
         1f:de:8c:03:a2:d0:66:7e:22:e3:da:bc:77:28:90:53:d9:7a:
         14:0b:b5:0c:97:ba:97:3c:12:f0:39:74:32:9f:09:0c:a3:a1:
         c2:a6:bb:63:85:25:08:d5:fb:e9:6c:ac:ec:83:7d:80:1b:56:
         04:1b:ac:a5:35:a1:17:4f:bc:2e:51:bc:5d:02:21:3c:1d:b1:
         51:d9:88:53:20:34:20:fa:0c:66:01:3e:8e:53:65:f6:e8:01:
         eb:25:60:38:d1:80:dd:39:73:30:a7:c6:6a:c2:b4:a7:4a:88:
         1d:ae:b6:c9:9f:4b:3c:4e:7d:fb:e8:a1:f3:18:2c:77:ec:19:
         60:29:bb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:46:18 2026 by rpki-client