Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/3138372e39342e35362e302f32342d3234203d3e20323730363331.roa
File:                     3138372e39342e35362e302f32342d3234203d3e20323730363331.roa (raw, json)
Hash identifier:          asmGbnVIVX8WhXSy8afR3zWiK9lkD+WYi5KVrHXRilc=
Subject key identifier:   F4:A6:19:03:A2:A7:99:3F:61:1C:A7:BC:0B:98:3E:45:B2:1D:57:8A
Certificate issuer:       /CN=F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562
Certificate serial:       61A1B707B8134E794F85B01A787FEF73D6B46D04
Authority key identifier: F0:F9:0B:08:A3:E9:F0:2E:AC:9E:16:5C:1B:0D:3D:CE:B3:8C:C5:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/3138372e39342e35362e302f32342d3234203d3e20323730363331.roa
Signing time:             Thu 27 Aug 2026 02:21:36 +0000
ROA not before:           Thu 27 Aug 2026 02:16:36 +0000
ROA not after:            Thu 26 Aug 2027 02:21:36 +0000
asID:                     270631
IP address blocks:        187.94.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.crl
                          rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 07:35:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:a1:b7:07:b8:13:4e:79:4f:85:b0:1a:78:7f:ef:73:d6:b4:6d:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562
        Validity
            Not Before: Aug 27 02:16:36 2026 GMT
            Not After : Aug 26 02:21:36 2027 GMT
        Subject: CN=F4A61903A2A7993F611CA7BC0B983E45B21D578A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a0:7d:8e:9b:da:90:21:0a:a2:ca:20:8d:dd:
                    09:06:e2:6a:2c:a0:1e:bd:d7:56:a2:60:0e:ad:19:
                    7e:ad:ca:ef:53:57:df:80:ed:9b:82:6c:df:29:fe:
                    29:75:bf:4e:9d:f8:fe:f0:99:45:57:bc:c0:10:49:
                    1c:43:98:03:06:2d:21:e1:e0:6a:b4:b7:3f:f5:2c:
                    88:2d:da:c7:e1:e0:0c:38:61:c0:08:4a:c8:40:8e:
                    d9:4c:45:f5:b7:4c:37:20:58:98:b1:3b:6e:64:3e:
                    f3:87:64:f3:ef:ba:68:e6:03:ab:c7:39:e7:76:1f:
                    24:56:bb:ab:00:b6:6a:6d:29:a1:9c:96:df:36:29:
                    9d:07:42:5c:c9:eb:34:93:08:b1:f2:59:e3:1c:22:
                    0e:9b:33:8a:03:97:49:52:d2:53:de:b2:1f:8d:70:
                    26:f0:8b:7a:c5:c8:34:7b:17:49:ef:e0:3f:4f:ad:
                    19:74:d2:95:c6:84:05:09:40:f7:ec:81:82:8e:fd:
                    09:ab:20:7a:9d:8c:7c:c7:38:02:cc:ba:c3:31:51:
                    9c:7a:61:fb:c6:7c:21:7e:90:57:1f:16:62:67:d1:
                    0f:6c:25:9b:aa:b9:a5:d2:43:e1:bb:e1:3a:1b:f7:
                    6a:c6:de:5a:44:7b:eb:1d:50:de:96:38:bb:6b:67:
                    e7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A6:19:03:A2:A7:99:3F:61:1C:A7:BC:0B:98:3E:45:B2:1D:57:8A
            X509v3 Authority Key Identifier:
                keyid:F0:F9:0B:08:A3:E9:F0:2E:AC:9E:16:5C:1B:0D:3D:CE:B3:8C:C5:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/3138372e39342e35362e302f32342d3234203d3e20323730363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:96:84:06:c2:3f:9a:fb:6b:15:b6:1f:f2:d4:a1:69:b6:56:
         6c:0f:29:37:80:d0:86:a6:e1:4f:ba:f5:19:7c:51:54:db:b3:
         02:44:7b:44:cd:b6:2c:71:ee:c2:01:37:8f:29:fe:8a:85:a2:
         55:01:a9:dd:3a:5b:a2:d0:09:1c:5a:f1:a3:f0:97:40:97:17:
         90:8d:ec:14:8c:f7:9e:f5:1c:49:7e:9b:e1:61:22:94:9e:4e:
         ac:a2:f4:d4:42:ff:e1:ce:71:21:2a:c5:1f:c0:72:b4:c4:19:
         cc:a7:a2:2c:7a:c1:f1:c5:ae:87:54:cd:48:81:90:ee:07:80:
         5c:47:d5:ab:4b:e3:0d:b7:b0:ce:ec:a4:79:0e:c8:d9:b6:63:
         7f:28:b8:b9:52:3e:5c:bf:61:83:11:25:78:c8:0e:17:34:20:
         7f:07:3e:dc:4e:8f:85:6a:30:cf:bd:da:1b:9b:4a:4e:e2:0f:
         5e:e8:36:e4:8b:81:d0:cc:23:b5:8d:9d:76:81:74:32:83:d0:
         96:bb:dd:f3:24:4b:b4:7c:c7:b4:5a:4f:85:15:90:34:ea:78:
         49:c2:70:d6:4b:d0:a0:cc:22:dc:49:1a:3e:2c:01:36:48:96:
         7b:16:e0:13:39:1e:7b:e4:ff:76:73:ab:56:5c:c9:99:b7:5e:
         c9:e0:53:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 20:42:26 2026 by rpki-client