Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/3139312e33372e3133362e302f32322d3232203d3e20323633333630.roa
File:                     3139312e33372e3133362e302f32322d3232203d3e20323633333630.roa (raw, json)
Hash identifier:          FjWW8rgOOPXpLgBLL2j5Tx25w6FnmfT3yQZswN72Mu4=
Subject key identifier:   B8:40:90:21:54:96:0E:C3:83:15:DE:B3:34:71:B5:25:6D:70:53:AF
Certificate issuer:       /CN=F89015ACAD83687DD07E72AE4660DC92145645EC
Certificate serial:       5E6DF7F4E08927479DDE327AE11FC0D07DA65D68
Authority key identifier: F8:90:15:AC:AD:83:68:7D:D0:7E:72:AE:46:60:DC:92:14:56:45:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F89015ACAD83687DD07E72AE4660DC92145645EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/3139312e33372e3133362e302f32322d3232203d3e20323633333630.roa
Signing time:             Mon 05 Oct 2026 13:08:06 +0000
ROA not before:           Mon 05 Oct 2026 13:03:06 +0000
ROA not after:            Mon 04 Oct 2027 13:08:06 +0000
asID:                     263360
IP address blocks:        191.37.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/F89015ACAD83687DD07E72AE4660DC92145645EC.crl
                          rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/F89015ACAD83687DD07E72AE4660DC92145645EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F89015ACAD83687DD07E72AE4660DC92145645EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 23:48:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:6d:f7:f4:e0:89:27:47:9d:de:32:7a:e1:1f:c0:d0:7d:a6:5d:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F89015ACAD83687DD07E72AE4660DC92145645EC
        Validity
            Not Before: Oct  5 13:03:06 2026 GMT
            Not After : Oct  4 13:08:06 2027 GMT
        Subject: CN=B840902154960EC38315DEB33471B5256D7053AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:67:73:4e:87:8c:12:09:44:61:1c:a5:9f:8c:
                    cb:45:0b:a5:2a:4e:4d:d4:a0:14:d3:1f:a2:8a:e0:
                    9e:9b:bb:96:8a:ac:9c:46:25:bd:0b:b5:12:94:a4:
                    d4:83:bc:be:b6:58:22:e5:7d:f0:40:1f:7b:01:00:
                    b4:5a:04:44:06:3b:fd:38:0a:bc:82:0c:a3:db:bb:
                    26:3d:0f:3a:19:fa:1c:f7:9f:e0:f8:53:86:a6:b9:
                    5c:7f:92:2f:5a:33:de:85:b2:1b:c9:ab:3f:7e:40:
                    01:16:9e:a3:93:e3:78:ea:2c:35:de:72:4e:c0:94:
                    3b:40:89:85:d0:26:56:a5:ad:42:e8:fd:23:ee:9e:
                    e4:2f:6b:9d:24:65:d3:a7:1b:a2:79:8b:96:ef:87:
                    e2:82:68:e7:f1:a0:4e:f1:6c:d6:87:52:00:b6:99:
                    52:62:0a:93:17:0d:d9:cb:f4:0d:56:ec:31:71:bb:
                    7f:88:5d:b6:99:c2:b1:4b:5e:17:22:a3:e4:24:14:
                    26:7c:6a:bb:01:93:1e:5b:8b:17:83:e1:80:3b:a1:
                    54:f9:a0:47:70:16:65:70:f7:e5:55:9c:8b:5d:60:
                    ba:b5:3e:8e:f9:9f:8b:f0:1e:23:f8:8c:8a:64:5d:
                    8d:cb:6d:3a:ba:6c:04:cd:0e:4c:57:2f:32:a9:11:
                    66:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:40:90:21:54:96:0E:C3:83:15:DE:B3:34:71:B5:25:6D:70:53:AF
            X509v3 Authority Key Identifier:
                keyid:F8:90:15:AC:AD:83:68:7D:D0:7E:72:AE:46:60:DC:92:14:56:45:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/F89015ACAD83687DD07E72AE4660DC92145645EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F89015ACAD83687DD07E72AE4660DC92145645EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/3139312e33372e3133362e302f32322d3232203d3e20323633333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:32:7f:f7:98:6a:4f:19:c8:01:45:eb:05:60:54:14:b2:68:
         8a:06:0a:f7:f2:fa:d0:94:0b:b4:82:8c:b6:b3:11:c8:10:97:
         03:f2:a2:4d:ab:19:31:82:05:a4:9d:ca:7d:1e:81:17:4d:c4:
         92:a3:25:4a:d4:9b:ca:01:85:f0:6b:27:b6:f5:05:9b:34:3b:
         af:1b:4f:db:81:a3:1d:34:13:34:12:d1:5f:d9:a7:2b:73:ab:
         9c:6a:06:16:95:8b:e6:85:f0:49:5b:3e:bd:09:35:a7:6e:98:
         45:d5:38:55:2b:9b:1a:73:7c:1e:6d:94:cc:63:38:bc:d8:e9:
         cb:7b:26:04:44:4a:76:82:e3:9f:9a:12:72:70:19:d6:33:8c:
         a2:bd:dd:7d:f9:7f:74:20:7c:60:bd:4b:83:76:e7:f9:a6:15:
         ee:31:73:3a:d1:9e:14:17:93:0d:49:7b:84:63:40:d9:68:bd:
         60:09:07:d0:87:a6:c2:69:a1:74:83:d7:24:ab:db:74:71:7a:
         69:0d:28:35:8e:03:09:83:80:8d:58:26:5c:98:9d:52:70:02:
         33:67:f3:93:f0:d2:05:e9:41:7e:06:d7:2d:d1:89:e7:c5:84:
         d1:92:38:fa:a7:11:75:61:0e:4e:4b:91:13:83:55:a0:03:0f:
         18:ba:d4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:52:57 2026 by rpki-client