Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2ChZzS1J6uFocYyX4yHvZjQtkPqG9Lm4726pnm5W6nCZ/0/3132382e3230312e3233322e302f32322d3232203d3e20323635393334.roa
File:                     3132382e3230312e3233322e302f32322d3232203d3e20323635393334.roa (raw, json)
Hash identifier:          /mMImdh7IURhrkHOz7LJNvRnntK22fmO7Isr5zNwXEQ=
Subject key identifier:   6D:65:9D:6F:47:B7:2B:37:AD:79:46:63:99:F9:D8:81:5B:BE:55:1E
Certificate issuer:       /CN=B1929389122679A4F6DEAA77BECF7D1E5B126F06
Certificate serial:       200BA083352D141CBF62F52B4A7314CCF550A56E
Authority key identifier: B1:92:93:89:12:26:79:A4:F6:DE:AA:77:BE:CF:7D:1E:5B:12:6F:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1929389122679A4F6DEAA77BECF7D1E5B126F06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ChZzS1J6uFocYyX4yHvZjQtkPqG9Lm4726pnm5W6nCZ/0/3132382e3230312e3233322e302f32322d3232203d3e20323635393334.roa
Signing time:             Wed 16 Sep 2026 20:13:43 +0000
ROA not before:           Wed 16 Sep 2026 20:08:43 +0000
ROA not after:            Wed 15 Sep 2027 20:13:43 +0000
asID:                     265934
IP address blocks:        128.201.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2ChZzS1J6uFocYyX4yHvZjQtkPqG9Lm4726pnm5W6nCZ/0/B1929389122679A4F6DEAA77BECF7D1E5B126F06.crl
                          rsync://rpki-repo.registro.br/repo/2ChZzS1J6uFocYyX4yHvZjQtkPqG9Lm4726pnm5W6nCZ/0/B1929389122679A4F6DEAA77BECF7D1E5B126F06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1929389122679A4F6DEAA77BECF7D1E5B126F06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 19:30:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:0b:a0:83:35:2d:14:1c:bf:62:f5:2b:4a:73:14:cc:f5:50:a5:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1929389122679A4F6DEAA77BECF7D1E5B126F06
        Validity
            Not Before: Sep 16 20:08:43 2026 GMT
            Not After : Sep 15 20:13:43 2027 GMT
        Subject: CN=6D659D6F47B72B37AD79466399F9D8815BBE551E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4f:0f:43:56:ed:93:52:7c:a5:9f:63:2b:10:
                    d2:69:a3:14:3e:04:12:f3:f6:89:50:68:c5:63:fb:
                    f3:0b:69:31:f3:0c:b2:eb:e7:ce:3c:2f:af:72:c0:
                    9e:bb:a6:31:46:3e:a2:76:3e:f2:bc:6c:5e:1f:90:
                    2e:24:f4:06:61:be:63:95:5e:51:2b:15:23:c7:98:
                    a5:f1:5c:3a:8f:02:6f:f1:3c:42:f0:87:eb:36:72:
                    85:f8:51:d0:76:b0:65:e6:1c:4f:59:c8:2c:23:3a:
                    5d:74:56:23:12:7d:95:bd:2f:e5:05:2e:e2:e5:ff:
                    c1:c2:df:85:73:31:4e:9d:a8:24:b2:63:44:d9:16:
                    93:77:6b:2f:be:01:45:bd:3a:8c:ad:52:d5:88:fd:
                    aa:a3:c5:80:dd:d8:ae:c3:3c:a0:aa:8a:53:56:9e:
                    6d:69:a9:44:84:3a:14:12:ae:ba:e1:f9:98:42:a1:
                    e4:3b:c7:b3:62:a2:dc:ed:c2:4e:a1:62:2a:9d:d8:
                    f2:67:69:87:0d:b4:05:da:ed:35:af:49:33:91:ec:
                    fa:f8:0f:51:b5:38:46:df:36:8d:c0:66:5d:95:43:
                    8b:a9:5b:69:07:5a:be:09:65:95:89:a6:e1:78:fd:
                    5b:ce:84:47:f0:a3:c1:91:03:f8:d5:3b:b8:79:69:
                    b8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:65:9D:6F:47:B7:2B:37:AD:79:46:63:99:F9:D8:81:5B:BE:55:1E
            X509v3 Authority Key Identifier:
                keyid:B1:92:93:89:12:26:79:A4:F6:DE:AA:77:BE:CF:7D:1E:5B:12:6F:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ChZzS1J6uFocYyX4yHvZjQtkPqG9Lm4726pnm5W6nCZ/0/B1929389122679A4F6DEAA77BECF7D1E5B126F06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1929389122679A4F6DEAA77BECF7D1E5B126F06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ChZzS1J6uFocYyX4yHvZjQtkPqG9Lm4726pnm5W6nCZ/0/3132382e3230312e3233322e302f32322d3232203d3e20323635393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:0f:27:59:34:91:c6:7a:bc:85:dc:06:02:9b:42:c8:4e:89:
         3e:09:e5:80:43:08:37:3d:93:23:92:83:8e:ce:d1:46:09:fd:
         c8:5e:88:de:55:cb:54:67:8b:44:0a:83:e6:e9:a8:92:bf:1f:
         f2:f4:e0:3d:bc:29:09:63:7d:60:28:55:7b:9d:11:92:0d:9f:
         b7:b5:30:f0:e9:d8:5f:fa:9d:09:d7:9e:9b:b7:2a:c3:32:ed:
         c5:c1:df:30:f9:c5:ed:63:ae:35:3e:12:77:d2:82:c1:f6:6d:
         99:34:8d:f6:f6:d3:06:ba:ca:57:29:0d:f7:92:bf:e5:81:37:
         8b:ce:ad:c6:86:54:25:b8:cc:81:35:f3:8c:72:e3:b4:81:c2:
         89:a0:5e:57:74:f5:dc:78:77:c6:65:22:13:e5:51:96:f4:39:
         ff:e6:1d:40:21:1a:09:c4:d1:aa:ba:05:00:cd:34:ce:00:10:
         aa:d3:e9:e6:2d:46:3d:07:dd:d3:3c:a8:33:a8:1d:f3:ee:a8:
         87:94:64:97:19:42:a6:f6:29:cf:4b:b4:68:cc:f1:b4:b3:4a:
         8d:ad:0c:57:6c:7b:96:1a:ea:c3:e7:fd:94:1e:4e:76:22:71:
         a5:67:ef:f6:5e:d1:a4:4a:ca:b7:c4:f8:99:72:d0:a3:2a:0b:
         ce:cd:fc:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 21:25:43 2026 by rpki-client