Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/1/3136382e39302e3232342e302f32322d3234203d3e20323633323736.roa
File:                     3136382e39302e3232342e302f32322d3234203d3e20323633323736.roa (raw, json)
Hash identifier:          40P8ZR+CxBn6i5uKt2xsdEKqEg+/ZUi5YqIBWjew6g8=
Subject key identifier:   D6:94:A8:8F:BF:B1:F6:40:33:ED:94:11:91:BE:11:B8:7F:80:A6:14
Certificate issuer:       /CN=8B402B544C026F193D073E5EB48316BF70232F73
Certificate serial:       4ED06E3D053401ABA783DA0046CD48CDC29FBF89
Authority key identifier: 8B:40:2B:54:4C:02:6F:19:3D:07:3E:5E:B4:83:16:BF:70:23:2F:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B402B544C026F193D073E5EB48316BF70232F73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/1/3136382e39302e3232342e302f32322d3234203d3e20323633323736.roa
Signing time:             Wed 07 Oct 2026 19:03:00 +0000
ROA not before:           Wed 07 Oct 2026 18:58:00 +0000
ROA not after:            Wed 06 Oct 2027 19:03:00 +0000
asID:                     263276
IP address blocks:        168.90.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/1/8B402B544C026F193D073E5EB48316BF70232F73.crl
                          rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/1/8B402B544C026F193D073E5EB48316BF70232F73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B402B544C026F193D073E5EB48316BF70232F73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 08:44:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:d0:6e:3d:05:34:01:ab:a7:83:da:00:46:cd:48:cd:c2:9f:bf:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B402B544C026F193D073E5EB48316BF70232F73
        Validity
            Not Before: Oct  7 18:58:00 2026 GMT
            Not After : Oct  6 19:03:00 2027 GMT
        Subject: CN=D694A88FBFB1F64033ED941191BE11B87F80A614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b4:34:29:c9:11:bb:94:ea:19:a6:df:f1:d6:
                    90:d6:15:eb:94:55:e1:7e:f9:71:bf:20:2e:e0:79:
                    8f:f6:3f:0f:a7:c9:c7:62:e1:0a:a1:94:b5:50:e3:
                    5d:a0:a6:45:17:5e:58:32:d6:e3:81:55:bd:ce:91:
                    5d:f4:1b:36:d8:18:93:6b:91:f0:de:98:ce:79:57:
                    19:69:43:1c:d7:cf:ab:c9:88:04:fb:91:64:92:bf:
                    bc:d8:04:fa:30:14:f0:b4:bc:65:4f:47:df:d2:08:
                    e0:42:09:2c:10:b2:52:36:75:b8:ed:2d:f7:96:66:
                    1e:0d:02:64:42:d5:15:ec:9e:9d:01:d2:56:6a:69:
                    2b:a7:98:a4:28:72:e3:da:b5:b9:46:34:52:97:0a:
                    7e:60:26:dd:71:63:0c:f7:00:69:ad:3b:83:c9:f4:
                    e1:8f:5d:12:fa:62:58:89:6b:e6:91:51:25:a4:c3:
                    4e:33:c7:69:c2:9f:cf:82:4a:c1:75:45:2e:72:d8:
                    43:5b:ee:78:64:ea:90:42:6e:5b:76:6a:53:46:27:
                    2d:1a:a1:57:2c:8f:72:db:32:ab:7a:00:53:03:b5:
                    11:fb:61:12:35:9a:e5:d0:51:2f:e2:ba:c8:93:08:
                    6d:87:2e:aa:14:c4:c6:eb:2a:91:f1:7c:a5:58:35:
                    00:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:94:A8:8F:BF:B1:F6:40:33:ED:94:11:91:BE:11:B8:7F:80:A6:14
            X509v3 Authority Key Identifier:
                keyid:8B:40:2B:54:4C:02:6F:19:3D:07:3E:5E:B4:83:16:BF:70:23:2F:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/1/8B402B544C026F193D073E5EB48316BF70232F73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B402B544C026F193D073E5EB48316BF70232F73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/1/3136382e39302e3232342e302f32322d3234203d3e20323633323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:f9:35:4b:c5:8a:f3:60:0e:10:6f:42:af:37:f7:66:c7:5b:
         37:d5:90:f7:8d:21:c3:2a:2d:97:7c:92:47:48:44:69:7a:bd:
         9e:2d:f6:23:18:95:3c:85:ee:23:86:0b:55:0b:93:94:55:6c:
         92:82:c1:69:06:99:2d:60:e2:b7:f9:38:ef:b8:1d:b2:45:f7:
         40:4e:57:fe:43:17:4a:23:da:a5:28:4b:47:7b:80:19:e7:f7:
         5a:ee:ca:22:42:93:ae:c2:38:76:5f:ca:5f:28:1f:0e:89:3c:
         2a:fa:ba:8f:cd:8e:9d:75:15:14:f3:fc:24:6d:08:0a:a6:a3:
         5a:1c:91:f1:bc:1d:28:6b:1d:a2:ca:58:3a:62:3b:8e:a7:b0:
         38:bd:64:9c:eb:52:f4:29:48:99:8f:20:67:23:4b:46:64:88:
         5b:a0:f7:da:02:1a:e0:ec:b4:88:ef:61:f1:3f:2d:3c:4e:f1:
         0d:d7:a5:5f:a8:7e:3a:0a:62:89:c2:ed:5a:54:1f:05:18:9c:
         1b:43:75:37:fd:bd:e4:92:f0:1d:d3:bf:b2:4e:8b:ee:50:e9:
         73:3f:b0:b4:7a:55:6b:f9:54:ac:59:ec:38:2b:cd:9e:62:8b:
         97:38:ab:9f:67:73:cb:06:e3:49:f6:37:bb:9e:6c:b0:b3:f3:
         77:c4:91:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----