Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/3133382e3131382e3232342e302f32322d3332203d3e20323634323637.roa
File:                     3133382e3131382e3232342e302f32322d3332203d3e20323634323637.roa (raw, json)
Hash identifier:          NX3WyNrlxx1MQO4xhm/1w0nfBEIzZnE8JjEi/PDj27Q=
Subject key identifier:   50:3A:77:67:E9:25:42:07:BB:2B:84:3F:A2:22:B2:00:7B:EE:94:61
Certificate issuer:       /CN=AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8
Certificate serial:       1EBC348ED3C38BB760F6534194D2DEEE0DA8C553
Authority key identifier: AE:0C:16:86:3F:4E:C3:36:AB:79:66:D9:9D:0A:DD:1C:C8:B7:4E:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/3133382e3131382e3232342e302f32322d3332203d3e20323634323637.roa
Signing time:             Thu 17 Sep 2026 04:06:57 +0000
ROA not before:           Thu 17 Sep 2026 04:01:57 +0000
ROA not after:            Thu 16 Sep 2027 04:06:57 +0000
asID:                     264267
IP address blocks:        138.118.224.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.crl
                          rsync://rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 14:31:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:bc:34:8e:d3:c3:8b:b7:60:f6:53:41:94:d2:de:ee:0d:a8:c5:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8
        Validity
            Not Before: Sep 17 04:01:57 2026 GMT
            Not After : Sep 16 04:06:57 2027 GMT
        Subject: CN=503A7767E9254207BB2B843FA222B2007BEE9461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2d:fe:9a:63:b8:45:14:fa:d1:84:23:5d:1e:
                    4d:16:0a:7f:31:d2:84:66:a3:7c:03:84:49:81:b0:
                    ba:24:15:6c:b2:13:60:f8:26:12:cd:05:26:ad:66:
                    f4:bf:69:5a:5e:e0:13:f3:d4:8a:a5:27:74:02:65:
                    35:84:2b:a1:b4:dc:d5:3a:82:ea:9e:e1:af:25:4c:
                    70:dd:a0:1a:ee:f9:d1:fc:dd:17:71:eb:17:7c:ee:
                    cf:f2:5c:b1:b9:3b:45:98:17:16:e8:dd:59:a3:27:
                    3b:f9:e1:69:62:0d:d8:22:87:60:79:36:f7:49:6e:
                    62:8f:4b:41:ed:d4:5b:39:7a:ae:f9:71:9c:45:10:
                    27:25:63:7d:f6:8f:21:6a:7c:43:ab:0e:11:24:32:
                    2f:77:d5:38:2c:6a:c4:b9:ac:56:8f:99:d5:b5:4a:
                    45:8a:6d:c4:a5:ee:ca:45:35:82:2a:ad:05:8b:7a:
                    b5:b4:17:85:d4:51:e0:43:46:02:36:a6:cd:9f:15:
                    cb:5d:28:ad:45:20:14:14:c9:6a:1c:7a:00:fc:d9:
                    68:ef:d3:59:ca:6d:eb:68:29:c9:e4:52:73:05:47:
                    a2:0f:aa:47:34:a9:a2:33:95:ec:17:66:52:04:9c:
                    84:4c:a7:9b:e2:6b:39:9b:3c:ee:22:65:54:84:c0:
                    69:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:3A:77:67:E9:25:42:07:BB:2B:84:3F:A2:22:B2:00:7B:EE:94:61
            X509v3 Authority Key Identifier:
                keyid:AE:0C:16:86:3F:4E:C3:36:AB:79:66:D9:9D:0A:DD:1C:C8:B7:4E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/3133382e3131382e3232342e302f32322d3332203d3e20323634323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:bc:c9:b6:17:df:0a:26:1e:e3:f2:d1:9d:99:a7:03:5d:63:
         f3:f1:92:f8:2e:61:35:bd:ba:5a:29:cb:b1:60:4e:03:6e:79:
         4c:ed:91:fa:82:f6:f1:d3:c2:19:c6:4d:5c:6c:b3:4a:06:4e:
         14:4e:0c:4a:66:22:8d:66:5c:f9:dc:23:e4:28:a3:b1:63:ae:
         e6:16:ac:16:72:be:a3:f7:cc:2f:2a:e4:1a:0a:5b:11:88:7c:
         07:03:7a:a0:b3:d5:a3:0e:ad:18:45:84:7e:5f:95:2a:a0:00:
         20:e9:60:65:62:f5:48:cf:9f:64:7e:11:d6:d7:3d:e5:83:74:
         7b:93:fa:45:bd:39:59:5f:cb:f4:3e:2a:73:67:e7:cb:a3:d9:
         58:af:30:b8:c9:2a:18:15:64:40:77:e4:be:4b:ec:de:2d:7f:
         d4:1f:df:9a:dd:18:fd:9c:91:66:9d:e5:df:fb:49:fa:fb:08:
         b4:7f:21:23:ec:c9:49:1f:f0:00:e7:1e:c9:9b:33:d2:4c:b8:
         5f:13:93:94:1b:b0:9d:1e:56:77:3e:82:42:de:07:b5:5e:2b:
         00:31:70:f6:33:a6:06:5e:86:81:01:30:09:bd:db:b7:9c:28:
         6d:f1:5b:ac:ae:bf:b9:df:db:64:8b:cb:dd:2c:84:8f:31:2b:
         8c:8c:33:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 01:37:43 2026 by rpki-client