Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3139322e302f32302d3234203d3e203238333532.roa
File:                     3138392e35312e3139322e302f32302d3234203d3e203238333532.roa (raw, json)
Hash identifier:          PB1ThcHpGUiYKK6rJjMNZeWu+9DjJy3ozelOjZG+jvY=
Subject key identifier:   B5:A6:C5:BD:A2:98:72:2E:B6:C4:07:97:D7:81:5F:E1:06:F7:1E:45
Certificate issuer:       /CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
Certificate serial:       6B4FC2FB496785507BC5163880273116B157045B
Authority key identifier: D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3139322e302f32302d3234203d3e203238333532.roa
Signing time:             Fri 06 Mar 2026 17:54:11 +0000
ROA not before:           Fri 06 Mar 2026 17:49:11 +0000
ROA not after:            Fri 05 Mar 2027 17:54:11 +0000
asID:                     28352
IP address blocks:        189.51.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 21:13:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:4f:c2:fb:49:67:85:50:7b:c5:16:38:80:27:31:16:b1:57:04:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
        Validity
            Not Before: Mar  6 17:49:11 2026 GMT
            Not After : Mar  5 17:54:11 2027 GMT
        Subject: CN=B5A6C5BDA298722EB6C40797D7815FE106F71E45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:1f:8e:9c:fe:60:0e:35:96:b2:4e:1d:aa:0a:
                    af:66:13:11:fd:e0:58:20:4c:74:ca:56:67:91:94:
                    54:f7:d6:9f:66:c3:d2:7a:38:f5:b4:80:26:5c:84:
                    a7:5a:6e:e6:5b:13:93:23:3a:fc:71:dd:10:55:30:
                    1f:c2:6d:15:5d:7d:9f:58:a8:07:7d:ce:d8:a6:b1:
                    c8:26:23:fa:be:8f:33:0d:9d:90:7b:a4:b7:2d:26:
                    0c:dc:e8:ae:b6:11:fb:b2:f4:8b:a3:b1:e6:38:2d:
                    f8:43:f9:59:02:7d:f2:01:9f:8a:ac:73:2d:fe:54:
                    91:11:8a:dc:1a:c3:94:79:7f:99:ec:47:3f:3f:de:
                    16:5e:7f:49:b2:89:52:fa:62:5c:fa:5d:68:9f:2a:
                    58:8f:25:e9:63:a4:49:95:c1:93:2c:45:e3:e1:17:
                    62:1a:6e:d6:88:11:a2:bf:6c:e9:db:7a:59:8f:cc:
                    82:9c:d9:ef:34:3c:09:92:ea:a8:a4:64:20:3a:0e:
                    16:44:47:b6:67:8c:1b:45:5d:f8:6a:99:27:c3:12:
                    64:d6:f2:32:39:a6:6d:7d:e7:2e:36:b7:0d:75:91:
                    99:f3:e1:59:9b:77:bb:60:d0:4f:c8:d6:28:f6:10:
                    c5:7a:c7:a2:03:95:a9:e0:58:a7:20:7c:05:de:82:
                    c3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A6:C5:BD:A2:98:72:2E:B6:C4:07:97:D7:81:5F:E1:06:F7:1E:45
            X509v3 Authority Key Identifier:
                keyid:D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3139322e302f32302d3234203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bb:b4:7f:0d:4d:a4:f7:aa:ba:92:3f:0b:e6:07:40:41:05:a1:
         5f:59:82:fd:44:b7:a8:83:68:36:52:18:d2:99:c7:b7:5b:79:
         48:25:e7:84:f1:92:20:7b:eb:d5:31:55:27:11:1c:00:a7:ab:
         0d:2d:ab:b7:91:fe:50:ae:c3:09:22:9a:b5:71:b6:a8:d4:3a:
         f3:b2:ad:5e:9e:61:39:91:dc:d4:95:53:eb:db:5f:43:07:ed:
         4c:81:97:b2:db:06:f2:26:e3:79:7c:f9:bc:ba:ba:45:44:84:
         86:ad:7a:6c:b0:66:f5:26:be:a9:51:dc:ec:6b:6b:ae:ce:62:
         46:20:56:2c:9c:1b:00:8f:96:a6:9c:ae:23:64:48:3a:86:11:
         ac:85:22:cb:c4:41:17:2b:0c:88:90:6b:0f:84:c0:95:be:6b:
         f5:3c:d9:16:90:9b:4e:3b:01:c7:55:d6:3b:41:34:75:b2:85:
         bf:4c:63:c4:ed:2a:65:43:82:4f:a1:a3:ce:c0:90:0b:8a:33:
         72:9c:a7:42:ae:83:d7:f1:1d:73:1d:7c:be:90:81:00:a7:74:
         15:00:be:0d:71:45:67:f5:ab:33:e8:f0:bb:2e:bb:84:b1:95:
         a6:f2:f1:4e:4d:22:e5:09:c1:96:b9:ec:97:c4:34:60:ae:44:
         5b:23:c6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:23:47 2026 by rpki-client