Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8KTA547LKuaskGYs8zhnixSg8UT2oUy5RzdLFbchDMSz/0/3139312e3234322e3231322e302f32332d3234203d3e20323633343831.roa
File:                     3139312e3234322e3231322e302f32332d3234203d3e20323633343831.roa (raw, json)
Hash identifier:          aeD8nNLNDLcEggkhLJIFv6M4yL8/SGv0H+o4hc98Y/w=
Subject key identifier:   D3:02:0D:3A:B3:59:36:CF:A4:7E:4E:2A:D6:5F:1C:8D:F0:7C:34:A3
Certificate issuer:       /CN=2D78BBFF742117E04F48BDE939DC77C5E62F81A5
Certificate serial:       49F7AA8D0C0A5DC4DA2403CD43393E0A6446A207
Authority key identifier: 2D:78:BB:FF:74:21:17:E0:4F:48:BD:E9:39:DC:77:C5:E6:2F:81:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D78BBFF742117E04F48BDE939DC77C5E62F81A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8KTA547LKuaskGYs8zhnixSg8UT2oUy5RzdLFbchDMSz/0/3139312e3234322e3231322e302f32332d3234203d3e20323633343831.roa
Signing time:             Wed 14 Oct 2026 18:19:38 +0000
ROA not before:           Wed 14 Oct 2026 18:14:38 +0000
ROA not after:            Wed 13 Oct 2027 18:19:38 +0000
asID:                     263481
IP address blocks:        191.242.212.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8KTA547LKuaskGYs8zhnixSg8UT2oUy5RzdLFbchDMSz/0/2D78BBFF742117E04F48BDE939DC77C5E62F81A5.crl
                          rsync://rpki-repo.registro.br/repo/8KTA547LKuaskGYs8zhnixSg8UT2oUy5RzdLFbchDMSz/0/2D78BBFF742117E04F48BDE939DC77C5E62F81A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D78BBFF742117E04F48BDE939DC77C5E62F81A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 21:39:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:f7:aa:8d:0c:0a:5d:c4:da:24:03:cd:43:39:3e:0a:64:46:a2:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D78BBFF742117E04F48BDE939DC77C5E62F81A5
        Validity
            Not Before: Oct 14 18:14:38 2026 GMT
            Not After : Oct 13 18:19:38 2027 GMT
        Subject: CN=D3020D3AB35936CFA47E4E2AD65F1C8DF07C34A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e2:b8:52:23:9d:cd:55:8b:1e:74:27:f6:54:
                    50:24:91:91:3a:f6:31:78:5a:96:29:56:2c:d4:9b:
                    2c:df:c0:b6:57:2f:21:63:b7:41:a4:1f:c8:a6:10:
                    cf:67:ae:a5:88:64:71:9d:9b:56:21:83:ac:44:37:
                    5d:56:f5:cf:1e:76:59:00:0f:95:fc:9d:fc:96:25:
                    60:86:ca:7d:e7:49:22:d7:0e:03:91:37:93:6f:02:
                    74:ce:26:5a:05:bc:ba:24:ef:66:d6:40:50:6a:76:
                    12:54:8c:fb:a1:96:c3:c1:a7:ca:53:92:fd:7f:06:
                    c5:87:5e:b4:22:4b:0b:3a:3b:91:b3:d0:8e:f1:d8:
                    b8:76:40:3f:df:df:ab:41:57:e5:88:da:d5:7c:ea:
                    95:32:50:e0:e3:2d:09:88:be:56:aa:73:f2:c1:8f:
                    9e:ef:76:14:70:b8:25:5d:cb:dc:4f:e5:2b:cf:42:
                    a9:74:d4:96:c2:86:95:e4:ae:17:46:ac:dd:30:c5:
                    31:ed:74:c5:5a:66:e4:64:19:14:a3:e0:f2:59:2f:
                    13:ee:9b:73:e7:c9:ed:46:5b:70:a8:5e:4b:54:1a:
                    91:6c:8c:bc:65:41:e9:63:f9:08:05:e7:77:18:de:
                    b3:e4:58:b8:07:8d:c8:ad:f7:59:e1:d7:76:e7:6c:
                    0c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:02:0D:3A:B3:59:36:CF:A4:7E:4E:2A:D6:5F:1C:8D:F0:7C:34:A3
            X509v3 Authority Key Identifier:
                keyid:2D:78:BB:FF:74:21:17:E0:4F:48:BD:E9:39:DC:77:C5:E6:2F:81:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8KTA547LKuaskGYs8zhnixSg8UT2oUy5RzdLFbchDMSz/0/2D78BBFF742117E04F48BDE939DC77C5E62F81A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D78BBFF742117E04F48BDE939DC77C5E62F81A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8KTA547LKuaskGYs8zhnixSg8UT2oUy5RzdLFbchDMSz/0/3139312e3234322e3231322e302f32332d3234203d3e20323633343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:05:95:9a:f3:77:33:8d:2e:4f:83:a3:a1:42:97:11:87:d7:
         29:03:13:ad:7d:5a:95:2c:d4:58:30:56:48:fb:20:d1:ca:b5:
         9f:a4:6e:16:a2:47:60:7f:c7:0d:47:be:ff:e9:cc:d6:64:cf:
         f6:56:38:02:f0:2e:e3:3f:f9:6b:31:3f:54:cc:82:60:09:75:
         4a:d8:eb:ea:41:8f:78:4a:d6:f9:ca:ea:3f:90:0e:77:25:28:
         14:f8:f1:c6:b8:b6:5e:bb:eb:f7:ae:65:24:42:3e:1f:79:c9:
         de:13:ee:0d:49:a7:25:7e:62:0d:3c:20:37:7f:ef:17:c3:c3:
         9a:80:3e:b7:7e:e8:f2:68:73:07:18:60:6e:82:29:68:e6:e5:
         13:89:c6:80:d3:48:f9:59:27:ad:72:2b:2c:91:71:4e:16:2c:
         1d:c4:5f:39:a0:3c:a8:01:8b:0f:1c:ae:13:a6:6f:e4:6b:f5:
         39:de:84:a0:38:ed:2f:64:04:91:e6:0d:2d:5c:83:37:fb:54:
         0c:1a:57:b3:2d:fc:15:4e:4f:36:e6:14:d5:ef:34:bc:5b:80:
         68:59:80:57:e7:69:67:6a:e2:66:c4:e5:a2:f9:ae:45:f0:49:
         3c:15:b3:f1:ba:ad:2d:f2:16:6d:ee:fa:1c:51:c1:14:e5:9c:
         e9:6c:90:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:33:49 2026 by rpki-client