Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4iao2nsAW4fgGYrNc7LxEZDM7br71oQW5bfVoBkLm9Lg/0/3136382e3233322e3132302e302f32322d3234203d3e20323731363731.roa
File:                     3136382e3233322e3132302e302f32322d3234203d3e20323731363731.roa (raw, json)
Hash identifier:          0pGwJ/rh2gFMxW8XoMSWDiZCynX5sLgRmiL+yorGSw0=
Subject key identifier:   AB:FB:F2:27:97:3E:83:E7:7F:A3:BA:33:D9:4D:74:7B:29:83:13:FD
Certificate issuer:       /CN=9473382722118249A58E8AC63C1F00AEE6F38EC5
Certificate serial:       5C592BDC08D52D6FEC98A8BBA2DE08E09EB7B99B
Authority key identifier: 94:73:38:27:22:11:82:49:A5:8E:8A:C6:3C:1F:00:AE:E6:F3:8E:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9473382722118249A58E8AC63C1F00AEE6F38EC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4iao2nsAW4fgGYrNc7LxEZDM7br71oQW5bfVoBkLm9Lg/0/3136382e3233322e3132302e302f32322d3234203d3e20323731363731.roa
Signing time:             Wed 21 Oct 2026 12:55:52 +0000
ROA not before:           Wed 21 Oct 2026 12:50:52 +0000
ROA not after:            Wed 20 Oct 2027 12:55:52 +0000
asID:                     271671
IP address blocks:        168.232.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4iao2nsAW4fgGYrNc7LxEZDM7br71oQW5bfVoBkLm9Lg/0/9473382722118249A58E8AC63C1F00AEE6F38EC5.crl
                          rsync://rpki-repo.registro.br/repo/4iao2nsAW4fgGYrNc7LxEZDM7br71oQW5bfVoBkLm9Lg/0/9473382722118249A58E8AC63C1F00AEE6F38EC5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9473382722118249A58E8AC63C1F00AEE6F38EC5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 11:26:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:59:2b:dc:08:d5:2d:6f:ec:98:a8:bb:a2:de:08:e0:9e:b7:b9:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9473382722118249A58E8AC63C1F00AEE6F38EC5
        Validity
            Not Before: Oct 21 12:50:52 2026 GMT
            Not After : Oct 20 12:55:52 2027 GMT
        Subject: CN=ABFBF227973E83E77FA3BA33D94D747B298313FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b0:cf:dd:66:e6:9f:aa:ac:39:ea:96:88:52:
                    b6:9c:b6:1c:e3:d3:73:75:34:b1:77:17:2e:db:f5:
                    f3:55:4a:83:2b:c7:6d:0c:5a:83:7b:15:c1:d6:db:
                    ba:75:4d:57:87:16:60:49:d0:3e:d6:4a:af:51:08:
                    84:64:58:d5:b6:f7:16:12:eb:1c:65:f9:a7:22:ff:
                    d4:a9:3d:44:5a:85:1e:3a:8a:42:02:b6:24:1a:8c:
                    49:05:fe:de:db:97:cc:d1:f1:af:5d:3c:51:db:c0:
                    c3:2e:a3:b2:15:f5:f6:f1:09:7d:db:b4:3c:59:6c:
                    fc:d7:64:64:aa:cc:10:23:ac:e9:b7:5f:35:f7:e7:
                    a6:36:85:67:88:73:74:16:dd:67:f3:ab:04:70:23:
                    37:87:03:ef:2a:f2:46:8b:3a:43:52:bb:7c:81:50:
                    1a:d5:66:03:59:d8:a4:25:b7:13:bd:43:ad:ad:4a:
                    fa:cc:66:71:56:1b:75:e4:16:c1:4f:a0:7f:b2:8e:
                    7c:41:5c:42:48:9b:56:b5:b6:51:f8:09:19:5d:a2:
                    c4:54:89:2f:b9:23:79:8d:1f:97:f2:16:ff:b9:36:
                    3e:68:84:dd:9c:f1:8a:61:5c:92:99:f2:31:8b:a2:
                    1d:1d:2d:87:6d:8e:2e:d4:c0:74:a4:78:2d:a4:4f:
                    27:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:FB:F2:27:97:3E:83:E7:7F:A3:BA:33:D9:4D:74:7B:29:83:13:FD
            X509v3 Authority Key Identifier:
                keyid:94:73:38:27:22:11:82:49:A5:8E:8A:C6:3C:1F:00:AE:E6:F3:8E:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4iao2nsAW4fgGYrNc7LxEZDM7br71oQW5bfVoBkLm9Lg/0/9473382722118249A58E8AC63C1F00AEE6F38EC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9473382722118249A58E8AC63C1F00AEE6F38EC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4iao2nsAW4fgGYrNc7LxEZDM7br71oQW5bfVoBkLm9Lg/0/3136382e3233322e3132302e302f32322d3234203d3e20323731363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:f1:4f:8c:f5:55:b4:0d:d4:0a:79:ed:3a:fe:44:3c:c5:b5:
         92:2e:18:e4:7c:79:34:b1:83:67:99:bc:ec:73:a5:8d:aa:e4:
         df:27:a6:05:ed:df:b1:f1:d7:a4:21:5d:90:bf:98:14:e4:66:
         ca:c7:c3:e2:44:40:c6:5a:47:4b:af:ec:1a:8c:d9:f0:fc:b6:
         a9:35:6a:35:82:04:52:37:48:17:6e:8f:fe:b6:79:63:ba:a5:
         94:f2:59:08:96:46:fa:6d:89:8c:ad:b7:c1:f0:44:4b:ec:c4:
         6b:53:b4:24:29:29:a0:8a:7e:e6:60:bf:04:0e:7d:6a:f2:2b:
         52:16:aa:4e:01:a4:21:e5:18:26:42:6e:b8:42:b0:49:de:b9:
         c7:2d:66:0b:1c:34:d4:26:86:f0:e8:42:0a:cf:ef:cf:8f:9d:
         81:da:05:ed:55:f3:99:6d:3d:48:97:25:9a:1d:f7:29:c6:30:
         27:83:e1:84:2b:4a:4a:58:7a:3d:12:15:54:15:a9:90:01:2c:
         e1:ba:c8:7a:d0:bb:09:e6:07:9f:9e:94:99:20:8a:af:b2:2f:
         6b:11:56:e0:29:6b:d3:ac:85:04:ad:a1:0e:6b:2c:6b:59:c1:
         ed:f1:ca:a1:9f:91:3c:6c:33:c1:22:fa:b8:3e:74:08:d2:d8:
         c9:c5:8c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 17:22:33 2026 by rpki-client