Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/3138392e3132362e3134302e302f32332d3234203d3e20323730363331.roa
File:                     3138392e3132362e3134302e302f32332d3234203d3e20323730363331.roa (raw, json)
Hash identifier:          sfwpUX16gdu53WYIRDnpFO2J4gVj9ZDY4wJYqQKw+oE=
Subject key identifier:   08:A3:44:63:E2:A9:CC:18:26:49:80:F4:E0:07:66:4B:B2:9D:31:BD
Certificate issuer:       /CN=F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562
Certificate serial:       3472796AAE733BA1C054DD69B7FBA7877F174145
Authority key identifier: F0:F9:0B:08:A3:E9:F0:2E:AC:9E:16:5C:1B:0D:3D:CE:B3:8C:C5:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/3138392e3132362e3134302e302f32332d3234203d3e20323730363331.roa
Signing time:             Thu 27 Aug 2026 02:21:39 +0000
ROA not before:           Thu 27 Aug 2026 02:16:39 +0000
ROA not after:            Thu 26 Aug 2027 02:21:39 +0000
asID:                     270631
IP address blocks:        189.126.140.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.crl
                          rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 18:32:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:72:79:6a:ae:73:3b:a1:c0:54:dd:69:b7:fb:a7:87:7f:17:41:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562
        Validity
            Not Before: Aug 27 02:16:39 2026 GMT
            Not After : Aug 26 02:21:39 2027 GMT
        Subject: CN=08A34463E2A9CC18264980F4E007664BB29D31BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:52:07:6a:37:2d:57:df:99:7f:96:fb:44:73:
                    2a:c5:26:ea:92:16:9b:26:31:bd:6f:59:70:9f:b9:
                    e6:a6:5b:b1:9b:19:b7:d0:01:71:ca:85:56:e0:54:
                    76:0e:41:79:82:f4:fd:ee:71:ff:f9:c9:79:9e:1a:
                    d3:2a:62:6e:52:2d:9c:bc:6e:84:99:6a:a1:b9:64:
                    18:bd:1f:a3:b1:38:ac:ea:d6:52:77:d2:45:3a:8d:
                    a8:40:75:1e:c7:e7:2a:27:f1:2b:89:de:0c:a7:b5:
                    36:0c:36:9b:13:5d:bb:9b:e3:b8:95:a4:aa:9d:41:
                    9c:c1:c3:ca:cc:8e:72:8e:fd:69:f8:24:98:41:8b:
                    4b:0b:f1:43:f6:a7:76:66:85:e8:cf:50:67:b2:03:
                    9f:eb:95:48:66:b4:bf:70:89:1d:d6:f0:bd:16:a8:
                    ea:b7:38:4c:89:77:af:0e:53:35:e7:11:0e:b6:ba:
                    33:4e:12:5d:78:20:30:9d:bc:85:20:ea:47:00:b1:
                    5d:5a:5f:dc:db:26:6b:47:68:4c:99:cf:53:da:2c:
                    a8:27:17:a6:bb:1e:0d:bd:27:44:3b:12:f4:04:2b:
                    2f:e6:07:95:bd:c5:e0:a9:2a:1d:8c:ce:4c:64:cc:
                    2b:c2:32:60:cf:7d:89:56:af:01:c6:0b:78:5c:3c:
                    94:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A3:44:63:E2:A9:CC:18:26:49:80:F4:E0:07:66:4B:B2:9D:31:BD
            X509v3 Authority Key Identifier:
                keyid:F0:F9:0B:08:A3:E9:F0:2E:AC:9E:16:5C:1B:0D:3D:CE:B3:8C:C5:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/3138392e3132362e3134302e302f32332d3234203d3e20323730363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:4f:12:77:58:01:80:1e:23:bd:3f:b1:43:7e:88:7a:db:54:
         3e:7d:4d:bf:67:e0:01:9d:40:fc:0f:6c:5a:20:cd:ef:c0:c9:
         4d:29:40:f3:e1:29:1a:72:d0:ed:13:ef:5a:04:b7:bc:1c:c3:
         16:b0:b5:1d:ff:70:90:31:d4:1b:91:63:05:5c:1c:76:7d:d7:
         91:ca:0e:59:2a:3b:99:5f:86:d6:0b:6a:80:65:5e:da:3c:d1:
         9f:2d:16:3c:ea:0a:8f:98:af:08:f0:f8:f4:45:93:e5:78:d1:
         fa:20:ff:d3:06:16:b3:13:40:4d:e6:62:ab:5d:06:f0:ee:0f:
         e9:9f:48:e5:74:af:03:1e:01:06:c4:02:8f:63:e4:ab:48:dd:
         43:cf:cd:c6:8c:df:5f:25:ba:ff:7e:9e:ca:80:1a:35:dd:7b:
         b2:c4:15:53:2c:96:fa:4c:d7:4a:94:2f:a3:1e:a9:ec:56:90:
         ca:72:35:2b:4e:2a:24:72:94:33:00:c5:ef:d7:fb:56:e3:58:
         d7:d4:b9:1d:20:0a:4a:83:bf:d5:e5:b0:81:26:35:4b:db:21:
         96:ad:26:3c:d7:b6:c4:70:42:26:b1:fe:f0:2a:e1:5c:be:ab:
         1f:35:b9:fe:a7:dd:c2:e3:49:a1:fb:c5:ca:9e:a2:b8:61:64:
         a1:06:4f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:30:16 2026 by rpki-client