Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/2/3136382e3233322e34342e302f32322d3234203d3e20323634393439.roa
File:                     3136382e3233322e34342e302f32322d3234203d3e20323634393439.roa (raw, json)
Hash identifier:          MZ23AjP0KmXpEzf1TDrp0TcUTxKEp7Y07TwdlbQ1REY=
Subject key identifier:   EE:96:01:86:85:99:A2:21:C1:D4:E6:43:80:5E:72:92:1A:54:2E:73
Certificate issuer:       /CN=5B9DECAF81F80B2EAE426A050CB11C33DD2F0FCB
Certificate serial:       578DA3630DE271DDB312CA1A3DDF265CB616E0E8
Authority key identifier: 5B:9D:EC:AF:81:F8:0B:2E:AE:42:6A:05:0C:B1:1C:33:DD:2F:0F:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B9DECAF81F80B2EAE426A050CB11C33DD2F0FCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/2/3136382e3233322e34342e302f32322d3234203d3e20323634393439.roa
Signing time:             Wed 14 Oct 2026 00:40:55 +0000
ROA not before:           Wed 14 Oct 2026 00:35:55 +0000
ROA not after:            Wed 13 Oct 2027 00:40:55 +0000
asID:                     264949
IP address blocks:        168.232.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/2/5B9DECAF81F80B2EAE426A050CB11C33DD2F0FCB.crl
                          rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/2/5B9DECAF81F80B2EAE426A050CB11C33DD2F0FCB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B9DECAF81F80B2EAE426A050CB11C33DD2F0FCB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 23:46:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:8d:a3:63:0d:e2:71:dd:b3:12:ca:1a:3d:df:26:5c:b6:16:e0:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B9DECAF81F80B2EAE426A050CB11C33DD2F0FCB
        Validity
            Not Before: Oct 14 00:35:55 2026 GMT
            Not After : Oct 13 00:40:55 2027 GMT
        Subject: CN=EE9601868599A221C1D4E643805E72921A542E73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:20:65:ed:92:57:bb:3f:be:16:a9:a1:68:88:
                    d1:b3:e8:b8:1f:04:c6:80:52:a9:f9:76:12:e8:75:
                    5f:4f:29:fd:85:7b:b3:35:9f:31:07:f8:d1:b8:2d:
                    f0:a5:c5:e1:bb:3c:78:15:69:70:ac:4f:e1:05:63:
                    30:92:97:20:94:66:27:c2:49:eb:5d:63:cc:91:b1:
                    63:cc:44:51:c6:e5:e3:9b:74:dc:82:43:e8:4e:09:
                    2f:05:aa:3c:84:ae:1b:e5:a2:d3:c6:84:55:cc:2f:
                    30:07:bf:6b:79:b7:ae:b2:c0:bf:c7:ab:35:97:b6:
                    90:0e:64:0a:23:9d:14:d5:44:3a:fb:8c:f3:ce:00:
                    92:e4:3a:3c:f3:0f:d1:2d:5d:7b:ba:e9:df:9c:5c:
                    11:ce:eb:66:fc:7f:64:3f:31:2e:0f:54:5e:f8:4f:
                    63:18:14:e9:67:77:05:78:77:e4:aa:bf:fc:c5:c2:
                    8b:da:be:10:d2:84:f8:e5:70:da:80:fa:5b:1c:85:
                    17:37:c0:62:4c:34:03:56:65:36:76:27:f4:20:fc:
                    f5:a7:4a:f1:45:c6:53:90:c0:2e:ed:50:30:1f:aa:
                    d8:c1:cc:e7:5a:69:b3:77:15:86:f8:23:6e:8c:14:
                    dd:7e:6c:3f:ad:2e:80:e3:b9:b8:d6:26:22:72:b0:
                    3f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:96:01:86:85:99:A2:21:C1:D4:E6:43:80:5E:72:92:1A:54:2E:73
            X509v3 Authority Key Identifier:
                keyid:5B:9D:EC:AF:81:F8:0B:2E:AE:42:6A:05:0C:B1:1C:33:DD:2F:0F:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/2/5B9DECAF81F80B2EAE426A050CB11C33DD2F0FCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B9DECAF81F80B2EAE426A050CB11C33DD2F0FCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/2/3136382e3233322e34342e302f32322d3234203d3e20323634393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:c6:f6:b4:13:04:32:84:68:ef:3b:28:d9:17:51:a7:f5:af:
         4d:74:4d:6d:09:55:96:c3:37:cd:d6:91:60:8c:78:b5:74:4a:
         5d:d3:da:80:04:29:0c:7e:af:c5:de:bd:9b:c1:95:27:49:a2:
         2b:26:e4:0e:cb:5e:bb:6e:cd:98:81:8b:b4:2b:34:16:5c:16:
         5b:36:4e:cc:27:b2:2d:3a:29:33:f0:f6:0c:26:aa:77:24:55:
         67:84:01:c3:2b:b5:54:eb:e5:f0:11:a1:3a:7f:df:f2:2c:34:
         bc:51:0c:51:72:e5:0d:d8:06:e1:ec:9f:5d:84:a4:db:27:32:
         5f:3b:37:cf:e6:e6:a8:c5:61:da:d6:71:54:98:0e:44:a7:97:
         c0:36:e9:78:2e:46:15:8a:17:3c:eb:d2:4c:11:34:1d:58:e7:
         11:0e:0e:b3:76:2a:7e:ea:d1:47:9e:b1:b5:99:72:8f:59:1d:
         3f:34:d8:5b:f1:b1:08:31:f3:03:30:db:e0:0a:3c:ac:5e:7a:
         67:10:71:34:99:40:24:c8:31:5a:59:75:2b:cd:27:1d:5d:6f:
         3f:87:40:42:92:a5:e4:84:1a:17:1f:24:cf:3e:70:59:bb:f8:
         05:64:38:f3:49:42:a7:f8:b8:2a:22:42:70:c0:b8:ad:3c:58:
         20:27:23:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 08:52:57 2026 by rpki-client