Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2FW3E7bmqL9tnMuzoo2aAfvR9rFHXXLwpW3iqckhW3aZ/0/3138372e33312e3233392e302f32342d3234203d3e20323639303631.roa
File:                     3138372e33312e3233392e302f32342d3234203d3e20323639303631.roa (raw, json)
Hash identifier:          lgN4rSg/kqNGQAudesIGR1h1GMb67r2/kan74M12SBY=
Subject key identifier:   44:DF:FB:6C:0B:5C:64:0B:1E:89:72:86:54:F7:99:0E:F4:EA:AA:9E
Certificate issuer:       /CN=568D52BF567597DA0E7683B85754EDCC4419B51A
Certificate serial:       5766DB7CFB39DD36424729FAFE05442B530121EF
Authority key identifier: 56:8D:52:BF:56:75:97:DA:0E:76:83:B8:57:54:ED:CC:44:19:B5:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568D52BF567597DA0E7683B85754EDCC4419B51A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FW3E7bmqL9tnMuzoo2aAfvR9rFHXXLwpW3iqckhW3aZ/0/3138372e33312e3233392e302f32342d3234203d3e20323639303631.roa
Signing time:             Mon 05 Oct 2026 02:19:09 +0000
ROA not before:           Mon 05 Oct 2026 02:14:09 +0000
ROA not after:            Mon 04 Oct 2027 02:19:09 +0000
asID:                     269061
IP address blocks:        187.31.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2FW3E7bmqL9tnMuzoo2aAfvR9rFHXXLwpW3iqckhW3aZ/0/568D52BF567597DA0E7683B85754EDCC4419B51A.crl
                          rsync://rpki-repo.registro.br/repo/2FW3E7bmqL9tnMuzoo2aAfvR9rFHXXLwpW3iqckhW3aZ/0/568D52BF567597DA0E7683B85754EDCC4419B51A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568D52BF567597DA0E7683B85754EDCC4419B51A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 14:15:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:66:db:7c:fb:39:dd:36:42:47:29:fa:fe:05:44:2b:53:01:21:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=568D52BF567597DA0E7683B85754EDCC4419B51A
        Validity
            Not Before: Oct  5 02:14:09 2026 GMT
            Not After : Oct  4 02:19:09 2027 GMT
        Subject: CN=44DFFB6C0B5C640B1E89728654F7990EF4EAAA9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:98:5a:fe:7e:62:a4:fe:8b:de:49:00:d3:63:
                    0f:ab:c6:b0:13:9a:d2:72:61:dd:09:cf:57:b4:53:
                    04:22:7d:fa:a4:3d:bd:d7:12:61:d6:2b:42:69:59:
                    b9:ca:78:1f:af:20:35:7e:da:94:61:96:e1:bd:c4:
                    f1:2b:49:79:2e:c0:32:93:14:e6:72:62:1a:ea:ce:
                    71:ff:2e:95:ae:a9:76:ac:49:e0:56:22:50:5f:06:
                    64:2e:5a:20:58:00:26:8c:5a:b5:3b:a8:df:5f:d3:
                    86:41:ea:91:40:4c:73:85:ea:d7:ee:b6:53:53:2e:
                    f2:9b:cd:85:24:1d:fb:76:e6:79:ce:5c:1f:ef:06:
                    c0:83:90:af:ce:01:3c:71:a1:a7:27:30:3d:73:c9:
                    18:d1:74:54:13:fd:cb:80:26:af:cd:f1:5a:1c:37:
                    b2:1f:a0:a9:95:b1:d6:72:a1:fc:39:9f:2c:1c:14:
                    51:43:0f:da:91:17:8e:96:ac:f3:36:72:6a:fa:74:
                    d7:c5:b5:f8:1a:3a:62:2b:2f:bb:79:0b:d5:56:89:
                    7c:44:5f:ac:cf:a2:53:89:35:12:aa:8a:eb:f8:51:
                    79:c5:6e:e3:1a:18:fe:cb:01:d3:8d:17:86:c4:42:
                    bc:44:6a:69:01:6d:82:f1:52:c1:9a:ab:47:95:86:
                    3b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:DF:FB:6C:0B:5C:64:0B:1E:89:72:86:54:F7:99:0E:F4:EA:AA:9E
            X509v3 Authority Key Identifier:
                keyid:56:8D:52:BF:56:75:97:DA:0E:76:83:B8:57:54:ED:CC:44:19:B5:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FW3E7bmqL9tnMuzoo2aAfvR9rFHXXLwpW3iqckhW3aZ/0/568D52BF567597DA0E7683B85754EDCC4419B51A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568D52BF567597DA0E7683B85754EDCC4419B51A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FW3E7bmqL9tnMuzoo2aAfvR9rFHXXLwpW3iqckhW3aZ/0/3138372e33312e3233392e302f32342d3234203d3e20323639303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.31.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:95:27:05:32:ab:26:32:26:33:e9:8b:c1:a8:92:52:7f:54:
         2e:c0:64:92:cd:f9:b6:09:e0:7b:3d:ab:59:90:bd:7e:c0:b0:
         79:9d:9d:4c:5a:db:a1:85:8f:d7:be:4e:d3:04:dc:99:10:d8:
         b8:4e:e6:aa:31:82:a9:34:37:f9:61:c5:5c:f3:cf:9d:37:27:
         f7:c1:9e:64:47:d0:a3:d4:78:bd:f6:4c:df:f8:08:cd:27:21:
         2c:4a:ee:7c:b0:fb:bc:02:07:43:03:fe:b6:c5:df:cd:37:ab:
         3c:cc:b1:9b:ba:3f:4e:3d:65:6b:27:68:4c:97:45:1b:e1:ba:
         34:10:ce:cb:57:33:94:67:de:d2:61:b2:d7:25:7e:7c:e0:08:
         a9:b0:9a:41:f1:6e:06:df:54:71:54:94:8c:df:5c:03:46:b9:
         08:85:7f:21:b0:62:9a:bb:56:8e:09:d5:a7:c8:c6:a6:36:36:
         68:be:c1:82:97:c0:56:45:86:7f:f0:17:f4:ad:79:d2:1a:e3:
         c2:75:d3:ff:c5:15:3f:0c:55:ce:2f:20:66:12:f4:f6:16:b0:
         14:3b:3b:18:81:d5:86:25:fd:d8:40:23:78:b8:85:05:7c:d0:
         c7:d2:73:e0:c4:cd:59:dc:93:bf:91:a2:ba:73:0d:c5:87:ac:
         0d:c8:d4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:42:43 2026 by rpki-client