Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8CgQPhXqA3uSGmZCwysLvv7wMyju17bVmaw5CPfhY4J4/0/3132382e3230312e3139322e302f32322d3234203d3e20323635383836.roa
File:                     3132382e3230312e3139322e302f32322d3234203d3e20323635383836.roa (raw, json)
Hash identifier:          dHKDsasq52Ll230umK3MpwjeZiS+ZIgnLgPRR9+uXVo=
Subject key identifier:   CA:92:66:83:08:7F:DB:4C:D0:45:6C:08:0D:57:70:B6:6F:82:03:58
Certificate issuer:       /CN=D90DD42D153287D3EBFE1E6CC2D9887686D587B6
Certificate serial:       1B3EFE659A824FE7BD818954B82A1947899FF022
Authority key identifier: D9:0D:D4:2D:15:32:87:D3:EB:FE:1E:6C:C2:D9:88:76:86:D5:87:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D90DD42D153287D3EBFE1E6CC2D9887686D587B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8CgQPhXqA3uSGmZCwysLvv7wMyju17bVmaw5CPfhY4J4/0/3132382e3230312e3139322e302f32322d3234203d3e20323635383836.roa
Signing time:             Mon 05 Oct 2026 13:43:11 +0000
ROA not before:           Mon 05 Oct 2026 13:38:11 +0000
ROA not after:            Mon 04 Oct 2027 13:43:11 +0000
asID:                     265886
IP address blocks:        128.201.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8CgQPhXqA3uSGmZCwysLvv7wMyju17bVmaw5CPfhY4J4/0/D90DD42D153287D3EBFE1E6CC2D9887686D587B6.crl
                          rsync://rpki-repo.registro.br/repo/8CgQPhXqA3uSGmZCwysLvv7wMyju17bVmaw5CPfhY4J4/0/D90DD42D153287D3EBFE1E6CC2D9887686D587B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D90DD42D153287D3EBFE1E6CC2D9887686D587B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 22:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:3e:fe:65:9a:82:4f:e7:bd:81:89:54:b8:2a:19:47:89:9f:f0:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D90DD42D153287D3EBFE1E6CC2D9887686D587B6
        Validity
            Not Before: Oct  5 13:38:11 2026 GMT
            Not After : Oct  4 13:43:11 2027 GMT
        Subject: CN=CA926683087FDB4CD0456C080D5770B66F820358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1b:8e:d6:47:40:c5:55:3c:83:8a:58:7c:1e:
                    8d:51:9c:a3:69:0f:3f:18:9e:75:53:37:21:56:90:
                    ae:97:7a:43:02:ec:66:34:95:83:4c:45:2f:b8:ae:
                    6b:38:37:8a:62:ee:7a:3c:8e:33:5c:24:a2:b1:d5:
                    46:b5:f0:81:8b:73:a0:82:92:aa:94:2c:fe:e0:aa:
                    9e:a4:7b:20:6f:1c:3d:d7:ae:c4:95:98:e0:18:bb:
                    30:4b:5f:7f:5b:13:8b:fd:c7:2f:f0:f5:3a:9a:36:
                    1f:a5:8d:cb:64:43:7f:b7:1e:3a:a0:ed:d4:15:5e:
                    ab:be:fe:83:32:95:99:f7:44:d1:60:ac:7b:ba:53:
                    f9:a4:8b:8f:51:14:5c:c8:7c:79:7e:04:28:90:26:
                    e4:b4:12:c5:d8:85:cd:d5:2a:be:3d:40:e3:78:8b:
                    c3:34:2d:77:4c:f3:15:e0:ec:40:c1:51:fe:b3:35:
                    ce:21:cf:83:9c:39:8f:5c:e5:f7:7f:f6:ff:b3:b9:
                    a4:79:2e:a2:b5:64:2e:4d:52:ec:c4:f4:f6:6f:69:
                    d5:62:23:f1:5f:86:c4:5d:ca:6d:e2:1e:7e:df:bc:
                    d4:3a:34:4c:9d:9d:81:b0:d4:17:32:1b:fc:ea:a8:
                    ea:4f:f0:4a:c3:7b:a9:73:27:c1:01:49:19:3f:8d:
                    5e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:92:66:83:08:7F:DB:4C:D0:45:6C:08:0D:57:70:B6:6F:82:03:58
            X509v3 Authority Key Identifier:
                keyid:D9:0D:D4:2D:15:32:87:D3:EB:FE:1E:6C:C2:D9:88:76:86:D5:87:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8CgQPhXqA3uSGmZCwysLvv7wMyju17bVmaw5CPfhY4J4/0/D90DD42D153287D3EBFE1E6CC2D9887686D587B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D90DD42D153287D3EBFE1E6CC2D9887686D587B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8CgQPhXqA3uSGmZCwysLvv7wMyju17bVmaw5CPfhY4J4/0/3132382e3230312e3139322e302f32322d3234203d3e20323635383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:80:25:b4:16:47:ec:ea:a4:5f:4f:29:99:3d:4f:74:26:78:
         15:3b:12:a2:7c:49:73:cc:5d:0c:20:fb:b7:78:55:99:cc:a2:
         50:66:ab:be:bb:db:fb:a2:9b:6d:fa:86:58:84:c7:84:66:81:
         85:66:9f:3a:8a:2c:63:00:28:c5:3a:14:4e:be:a7:99:d8:72:
         1c:ca:76:62:d6:05:0f:07:dc:a2:54:fd:62:22:78:3f:f0:82:
         45:2a:0a:b0:1e:7d:dc:24:57:e3:f9:77:0b:b8:43:81:00:c9:
         c9:4c:2d:d3:84:cc:2b:7d:36:f8:7a:1b:9a:04:f2:6b:ec:18:
         62:e6:17:8e:05:85:c3:3c:79:3e:b0:fe:52:f5:bf:e9:16:8a:
         23:58:ef:77:07:64:42:a4:1f:96:2d:81:3b:a6:a0:5a:a9:b1:
         59:d4:0e:5b:a4:50:f3:71:ae:50:46:41:a0:0a:57:ae:2a:38:
         c6:79:28:c0:63:04:f8:07:87:94:9c:df:d5:fe:73:d0:e7:dc:
         a4:b0:f9:77:1d:9d:ba:c6:9a:83:56:1b:ed:26:43:13:be:78:
         db:da:7f:3a:b9:fb:23:d9:a2:5a:64:8c:dd:c6:65:82:96:35:
         03:1e:da:d4:50:4c:b5:68:f4:07:4e:4b:7e:70:62:af:38:38:
         cb:e4:00:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 11:37:43 2026 by rpki-client