Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2FW3E7bmqL9tnMuzoo2aAfvR9rFHXXLwpW3iqckhW3aZ/0/3138372e33312e3234382e302f32312d3231203d3e20323639303631.roa
File:                     3138372e33312e3234382e302f32312d3231203d3e20323639303631.roa (raw, json)
Hash identifier:          MQUBNbd2t9N7y6QEetOBAx8ofH2tS0S4yjbgU0VtcCo=
Subject key identifier:   09:35:85:3B:40:58:8B:92:E3:C6:2B:C6:EC:5A:34:77:80:73:E4:53
Certificate issuer:       /CN=568D52BF567597DA0E7683B85754EDCC4419B51A
Certificate serial:       74FE96BA9EC0E6474A30722C0EAB8AAC6DC1E41A
Authority key identifier: 56:8D:52:BF:56:75:97:DA:0E:76:83:B8:57:54:ED:CC:44:19:B5:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568D52BF567597DA0E7683B85754EDCC4419B51A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FW3E7bmqL9tnMuzoo2aAfvR9rFHXXLwpW3iqckhW3aZ/0/3138372e33312e3234382e302f32312d3231203d3e20323639303631.roa
Signing time:             Mon 05 Oct 2026 02:19:09 +0000
ROA not before:           Mon 05 Oct 2026 02:14:09 +0000
ROA not after:            Mon 04 Oct 2027 02:19:09 +0000
asID:                     269061
IP address blocks:        187.31.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2FW3E7bmqL9tnMuzoo2aAfvR9rFHXXLwpW3iqckhW3aZ/0/568D52BF567597DA0E7683B85754EDCC4419B51A.crl
                          rsync://rpki-repo.registro.br/repo/2FW3E7bmqL9tnMuzoo2aAfvR9rFHXXLwpW3iqckhW3aZ/0/568D52BF567597DA0E7683B85754EDCC4419B51A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568D52BF567597DA0E7683B85754EDCC4419B51A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 22:03:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:fe:96:ba:9e:c0:e6:47:4a:30:72:2c:0e:ab:8a:ac:6d:c1:e4:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=568D52BF567597DA0E7683B85754EDCC4419B51A
        Validity
            Not Before: Oct  5 02:14:09 2026 GMT
            Not After : Oct  4 02:19:09 2027 GMT
        Subject: CN=0935853B40588B92E3C62BC6EC5A34778073E453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:87:6c:a8:f2:8c:a9:0b:32:d1:1c:e7:65:fc:
                    4d:6c:80:2e:40:e5:84:a8:b4:cb:45:b9:33:1c:15:
                    26:a3:34:cc:70:b4:61:a2:d5:54:53:0e:2a:71:c0:
                    c1:ae:51:a0:97:5f:8c:11:87:c4:79:5c:9c:5c:9c:
                    85:33:80:d7:45:c7:42:a6:ea:ac:f2:74:1e:2f:86:
                    63:da:65:69:95:b0:8e:dd:fa:fb:e8:27:fa:69:b7:
                    4c:72:14:34:d1:48:1f:78:72:0f:7f:13:1d:62:54:
                    a5:8a:14:4a:e0:63:0b:31:35:96:82:b0:9b:e6:ee:
                    73:96:72:ee:45:8a:1f:32:ce:c3:d1:75:d6:ad:d6:
                    c3:0f:25:b0:b6:0b:71:c4:19:a1:e6:3c:e5:9c:55:
                    5f:39:31:fe:74:1a:a1:e5:15:4a:7c:fb:9c:d1:32:
                    6c:8f:56:ee:4d:04:47:e8:07:e1:e5:ca:19:7c:96:
                    c7:31:98:a1:d3:ac:6a:42:5c:8c:35:81:ea:41:02:
                    03:c3:9f:50:4e:a0:ab:88:83:8a:f8:08:f7:3c:ed:
                    bd:ea:c0:90:a3:2d:65:d3:d6:35:a9:d4:40:7b:a4:
                    b6:82:6f:8e:cc:1d:b4:2d:43:77:57:11:ad:40:10:
                    be:05:b6:eb:9b:d9:83:9d:53:a1:81:64:17:25:80:
                    1d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:35:85:3B:40:58:8B:92:E3:C6:2B:C6:EC:5A:34:77:80:73:E4:53
            X509v3 Authority Key Identifier:
                keyid:56:8D:52:BF:56:75:97:DA:0E:76:83:B8:57:54:ED:CC:44:19:B5:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FW3E7bmqL9tnMuzoo2aAfvR9rFHXXLwpW3iqckhW3aZ/0/568D52BF567597DA0E7683B85754EDCC4419B51A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568D52BF567597DA0E7683B85754EDCC4419B51A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FW3E7bmqL9tnMuzoo2aAfvR9rFHXXLwpW3iqckhW3aZ/0/3138372e33312e3234382e302f32312d3231203d3e20323639303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.31.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         60:16:ea:88:70:4c:6f:55:b9:10:e2:82:e2:2f:f0:ef:42:1b:
         a9:0f:be:25:ec:9f:4e:07:02:59:ba:66:bc:ff:50:ff:0d:7e:
         35:ab:b5:88:70:54:5d:18:5e:4a:09:3e:86:b2:57:1c:21:97:
         fa:ab:f3:12:98:66:7d:26:9a:a3:02:6e:a6:89:09:f5:09:7d:
         a4:d6:48:5f:20:25:0f:4e:18:d8:6a:78:24:4f:45:bc:81:fc:
         92:7e:7b:54:11:dc:01:87:c1:8b:29:14:98:39:e5:b1:4d:ec:
         49:8c:d3:fe:db:7d:3f:54:8e:58:fc:85:fb:30:89:23:f2:08:
         6e:0c:ef:84:b9:26:99:32:e1:a8:db:27:9b:8a:84:70:52:88:
         c8:31:00:09:61:df:b5:2c:f6:a4:eb:42:a2:09:5f:0d:62:50:
         73:79:bc:67:f4:63:93:5f:94:59:97:67:22:7c:3f:eb:98:fa:
         d2:8e:8f:68:72:fc:75:67:81:90:47:fa:68:9e:1f:d1:90:8c:
         05:90:55:52:c6:16:f9:41:5c:6c:47:c9:64:a7:61:e8:32:1a:
         25:ad:87:9f:95:3f:12:4c:42:bb:e8:c2:55:f9:37:fd:ce:86:
         68:e4:bc:74:e4:0a:00:6c:1a:f2:17:e5:d9:40:29:6a:05:b4:
         9e:d6:20:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 15:09:57 2026 by rpki-client