Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/3138312e34312e3136302e302f32312d3234203d3e20323730363331.roa
File:                     3138312e34312e3136302e302f32312d3234203d3e20323730363331.roa (raw, json)
Hash identifier:          5WS8qOjxr4DIMusUIeevtrPr+IRZpas8cAGVSYwaQko=
Subject key identifier:   81:0F:16:60:A2:1F:B0:28:65:E3:72:09:BB:C6:5E:0F:BE:7F:44:AC
Certificate issuer:       /CN=F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562
Certificate serial:       36C899CD9AA06662E24BD5B1F42C05BAF73E462A
Authority key identifier: F0:F9:0B:08:A3:E9:F0:2E:AC:9E:16:5C:1B:0D:3D:CE:B3:8C:C5:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/3138312e34312e3136302e302f32312d3234203d3e20323730363331.roa
Signing time:             Thu 27 Aug 2026 02:21:44 +0000
ROA not before:           Thu 27 Aug 2026 02:16:44 +0000
ROA not after:            Thu 26 Aug 2027 02:21:44 +0000
asID:                     270631
IP address blocks:        181.41.160.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.crl
                          rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 12:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:c8:99:cd:9a:a0:66:62:e2:4b:d5:b1:f4:2c:05:ba:f7:3e:46:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562
        Validity
            Not Before: Aug 27 02:16:44 2026 GMT
            Not After : Aug 26 02:21:44 2027 GMT
        Subject: CN=810F1660A21FB02865E37209BBC65E0FBE7F44AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d3:93:18:6f:b1:80:49:f1:8c:2f:d3:e3:ee:
                    b9:a0:1b:38:06:e4:8d:46:7e:e9:67:cb:20:b7:48:
                    3c:19:14:63:ea:3f:4c:07:ad:27:64:e8:ab:85:1a:
                    9a:35:ae:23:0e:1d:1d:9b:25:fe:d4:e9:92:70:73:
                    73:9f:10:7a:90:0f:e2:ac:87:35:ad:04:01:6a:7e:
                    05:6b:50:7a:5b:59:64:7b:54:f6:c8:aa:f7:8d:2c:
                    38:48:23:52:35:9b:24:19:f7:5b:61:fd:d3:d4:c7:
                    19:53:51:6e:77:f0:53:27:00:1b:fb:7a:ba:75:db:
                    60:e1:f9:91:f3:56:a2:26:fc:44:d8:9b:69:c4:a9:
                    ff:0e:62:59:d3:ff:b0:f7:33:2c:d0:fd:f8:f0:15:
                    d7:ab:40:d7:31:3e:de:9c:20:d9:b8:82:93:65:13:
                    b3:20:d0:b1:cf:a5:76:a1:b5:bb:66:20:98:bc:5d:
                    5c:f5:8c:53:1a:2e:57:71:28:63:c7:65:22:a0:c3:
                    1e:27:d2:54:bc:43:97:ff:3e:6d:87:bc:12:8a:53:
                    5d:f5:aa:c2:e3:a6:dd:49:de:da:e5:18:eb:6e:b9:
                    63:ac:17:9d:e1:00:22:db:0e:de:ea:b3:b1:72:5e:
                    80:0e:b1:da:39:9c:9a:7f:e7:9e:8d:d1:db:24:80:
                    c3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:0F:16:60:A2:1F:B0:28:65:E3:72:09:BB:C6:5E:0F:BE:7F:44:AC
            X509v3 Authority Key Identifier:
                keyid:F0:F9:0B:08:A3:E9:F0:2E:AC:9E:16:5C:1B:0D:3D:CE:B3:8C:C5:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/3138312e34312e3136302e302f32312d3234203d3e20323730363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         19:4f:07:75:d8:7e:6d:a0:5e:66:d9:31:1f:07:ea:38:f3:7c:
         da:b5:29:d7:05:0f:d3:87:87:2d:8f:84:d6:19:f3:f8:4d:5a:
         19:12:c0:bb:0c:b0:41:e3:0b:a5:b3:70:a0:a4:ec:c2:da:a7:
         6c:2a:53:bd:78:23:fb:3b:16:85:b1:38:fb:4e:80:0c:f0:5d:
         d8:45:5d:03:d5:28:2f:d8:88:c2:71:cf:a3:b9:f6:cb:ce:df:
         1f:c6:d3:81:cf:32:9b:bc:c2:84:58:f5:f0:2e:b3:95:51:d7:
         6b:03:4c:34:18:1c:8a:e0:b1:d1:5c:7f:5e:54:34:93:90:65:
         62:b4:3e:02:d2:8c:5a:4c:b0:13:05:ab:14:69:61:9d:ff:ac:
         82:63:b7:96:a7:1c:46:1d:22:e9:3e:75:ae:50:d7:7d:73:e9:
         95:e7:a5:96:21:01:9c:48:03:ee:d8:d3:c9:ae:e0:84:b8:f2:
         83:3c:56:9c:ef:67:60:4e:e0:87:0e:0f:ef:b0:09:8f:e2:24:
         24:9f:cd:46:d6:ca:03:1b:81:21:23:32:dc:51:7c:d9:a5:6e:
         d8:47:30:5c:51:3d:8e:46:74:9c:b4:b8:a3:30:19:c1:c5:37:
         60:a3:2a:64:28:a6:9a:de:d5:f5:1d:f0:7f:58:39:51:84:73:
         4f:14:27:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:40:21 2026 by rpki-client