Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/3138362e3232372e3135342e302f32332d3233203d3e20323632393732.roa
File:                     3138362e3232372e3135342e302f32332d3233203d3e20323632393732.roa (raw, json)
Hash identifier:          vlwDbfsPEnUw0mi0za7QZwmgccU3pDu6ooFUiCm76Qw=
Subject key identifier:   00:94:0D:48:C6:41:F0:AD:8B:A6:3A:8F:D6:66:54:E6:54:3C:0E:73
Certificate issuer:       /CN=568185320BBBE54F9E4B2EB06A5DB334B1DA6889
Certificate serial:       0E6F4E771C79F1586B9EC4C9B9A17FF9A02580AB
Authority key identifier: 56:81:85:32:0B:BB:E5:4F:9E:4B:2E:B0:6A:5D:B3:34:B1:DA:68:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/3138362e3232372e3135342e302f32332d3233203d3e20323632393732.roa
Signing time:             Mon 08 Jun 2026 11:52:59 +0000
ROA not before:           Mon 08 Jun 2026 11:47:59 +0000
ROA not after:            Mon 07 Jun 2027 11:52:59 +0000
asID:                     262972
IP address blocks:        186.227.154.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.crl
                          rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:56:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:6f:4e:77:1c:79:f1:58:6b:9e:c4:c9:b9:a1:7f:f9:a0:25:80:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=568185320BBBE54F9E4B2EB06A5DB334B1DA6889
        Validity
            Not Before: Jun  8 11:47:59 2026 GMT
            Not After : Jun  7 11:52:59 2027 GMT
        Subject: CN=00940D48C641F0AD8BA63A8FD66654E6543C0E73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c8:a3:8d:60:01:c9:7f:87:f9:d1:d3:b5:6b:
                    5e:1c:fd:67:ee:82:04:63:9a:f5:f2:4a:ac:36:50:
                    1d:70:75:67:95:6b:65:68:6a:ba:b2:8b:cf:9c:fd:
                    9c:6b:be:82:ca:e0:93:f4:1a:2a:32:db:0f:76:f2:
                    95:8e:7f:96:ac:86:e8:b8:9e:86:fd:62:34:2f:b2:
                    1a:0a:95:90:df:bf:4c:39:b7:f5:50:b5:eb:05:54:
                    7f:f8:09:05:56:84:9b:0e:9b:54:e0:85:8d:be:63:
                    5b:75:3e:25:1e:4c:51:7f:ef:65:1d:57:66:ec:99:
                    ba:ea:c1:f3:39:aa:e1:9f:58:65:ea:74:09:7e:77:
                    cc:a4:98:d0:dd:79:a4:36:c0:33:46:a3:96:e8:3d:
                    0f:a9:5d:9e:b7:d8:8a:76:e4:3a:67:6c:1c:9a:bf:
                    cb:a9:52:ea:51:66:2d:a7:b6:bd:ad:98:ab:02:8f:
                    98:25:3a:9f:9a:54:44:38:04:40:2a:a6:c4:5c:7c:
                    6f:92:3e:ae:46:48:0d:c4:a9:a9:f0:84:9e:47:62:
                    92:f1:8d:b8:d3:2f:1e:e3:51:20:35:6f:79:9a:34:
                    d7:90:66:e0:08:69:11:c9:1a:ee:83:cf:6b:cd:ab:
                    ad:3c:28:b1:3a:a7:11:2c:c3:d9:47:ef:51:a9:2b:
                    02:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:94:0D:48:C6:41:F0:AD:8B:A6:3A:8F:D6:66:54:E6:54:3C:0E:73
            X509v3 Authority Key Identifier:
                keyid:56:81:85:32:0B:BB:E5:4F:9E:4B:2E:B0:6A:5D:B3:34:B1:DA:68:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/3138362e3232372e3135342e302f32332d3233203d3e20323632393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:83:40:45:92:a2:1e:c8:6d:27:4c:0d:1c:c7:5b:44:fe:7b:
         24:cc:0a:0b:4d:1c:2d:d4:6b:94:3a:e9:ea:03:ff:37:a5:11:
         48:bb:bb:e2:1b:9e:8a:bd:b6:0d:62:56:95:44:a4:2b:88:5c:
         64:f8:56:8d:c4:f5:d4:7e:13:88:9f:f3:cd:4c:0a:3e:22:49:
         14:ed:41:94:7f:8b:45:07:dd:cd:39:aa:cf:c6:4a:df:a9:88:
         49:0a:a4:18:3d:5e:13:9f:0a:8f:35:6f:f1:74:7f:b2:67:1c:
         31:9d:e7:0f:91:64:f9:a0:37:74:9e:7a:0b:9b:88:de:14:1c:
         90:16:8b:02:cb:0e:2e:c0:63:f0:37:c8:a4:18:14:f3:7e:1d:
         b4:6a:6c:22:df:42:e9:1d:f8:24:7e:1c:70:13:57:61:dd:62:
         98:9d:9e:c9:75:89:73:6b:99:66:f4:23:ea:24:59:89:aa:e8:
         11:e6:46:6b:48:8e:86:af:db:6b:c7:3e:01:21:41:99:b0:d6:
         a9:57:92:49:4f:8b:d9:44:dd:b1:13:53:c7:96:1a:5c:b6:46:
         ef:00:fc:8f:18:80:b8:a7:93:fd:36:10:77:9c:3a:7c:2a:8a:
         50:22:44:4d:7f:a7:6d:56:47:c9:cd:b9:ac:18:fa:9b:a8:74:
         af:65:0d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:49:32 2026 by rpki-client