Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/3139312e33372e3133382e302f32332d3233203d3e20323633333630.roa
File:                     3139312e33372e3133382e302f32332d3233203d3e20323633333630.roa (raw, json)
Hash identifier:          AxjG3vlFMSXXyhXH/JdNeYMlLYZe4Di/FPW6KW91vV4=
Subject key identifier:   5D:66:39:46:B8:D3:6B:DB:00:A6:3D:4D:45:2A:FF:88:19:BD:D3:C7
Certificate issuer:       /CN=F89015ACAD83687DD07E72AE4660DC92145645EC
Certificate serial:       488ABDCD496256F57E4F6F2BC96F5CB35A5EAF1B
Authority key identifier: F8:90:15:AC:AD:83:68:7D:D0:7E:72:AE:46:60:DC:92:14:56:45:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F89015ACAD83687DD07E72AE4660DC92145645EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/3139312e33372e3133382e302f32332d3233203d3e20323633333630.roa
Signing time:             Mon 05 Oct 2026 13:08:06 +0000
ROA not before:           Mon 05 Oct 2026 13:03:06 +0000
ROA not after:            Mon 04 Oct 2027 13:08:06 +0000
asID:                     263360
IP address blocks:        191.37.138.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/F89015ACAD83687DD07E72AE4660DC92145645EC.crl
                          rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/F89015ACAD83687DD07E72AE4660DC92145645EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F89015ACAD83687DD07E72AE4660DC92145645EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 23:48:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:8a:bd:cd:49:62:56:f5:7e:4f:6f:2b:c9:6f:5c:b3:5a:5e:af:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F89015ACAD83687DD07E72AE4660DC92145645EC
        Validity
            Not Before: Oct  5 13:03:06 2026 GMT
            Not After : Oct  4 13:08:06 2027 GMT
        Subject: CN=5D663946B8D36BDB00A63D4D452AFF8819BDD3C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:78:cf:52:69:0e:62:d4:ae:37:7c:1d:e4:28:
                    d1:ac:f1:ab:3a:29:6c:42:d8:8d:74:7b:7a:c3:11:
                    e9:5a:fb:2a:a7:4e:c0:29:5a:98:48:9c:b6:bd:94:
                    32:67:01:75:0e:ff:c2:4b:f9:88:26:01:a5:ae:f0:
                    dd:7c:37:92:83:f6:e6:fa:44:9c:47:57:ab:50:27:
                    0c:41:56:92:79:2d:ab:99:6a:ab:5f:af:18:cc:71:
                    5c:3c:aa:f0:8e:eb:8f:96:3e:11:49:19:1c:52:fb:
                    1a:0f:64:8f:76:93:50:39:28:f6:f6:5a:8c:8c:8d:
                    68:d3:a4:5c:d8:ad:90:3e:08:a5:23:a8:95:d6:1e:
                    98:8d:16:82:16:de:69:87:6e:49:cb:ca:be:37:ef:
                    b1:fc:80:04:9d:9d:08:c8:28:1c:25:d9:cf:89:6b:
                    dd:df:b5:95:1e:d1:57:b2:51:02:08:8b:2b:4a:96:
                    88:b2:85:c6:1b:a5:f4:5d:f8:c5:70:26:d6:49:0f:
                    bf:27:1c:71:d8:62:38:12:50:65:72:db:51:1f:b9:
                    03:44:d6:6a:30:02:b5:e6:6f:e8:75:cb:4c:df:a3:
                    15:a5:25:28:3d:6c:42:8f:9a:ce:65:07:ec:c6:e9:
                    d9:2f:c3:3f:76:c3:6f:a8:d6:9f:32:b0:a3:18:e9:
                    24:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:66:39:46:B8:D3:6B:DB:00:A6:3D:4D:45:2A:FF:88:19:BD:D3:C7
            X509v3 Authority Key Identifier:
                keyid:F8:90:15:AC:AD:83:68:7D:D0:7E:72:AE:46:60:DC:92:14:56:45:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/F89015ACAD83687DD07E72AE4660DC92145645EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F89015ACAD83687DD07E72AE4660DC92145645EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/3139312e33372e3133382e302f32332d3233203d3e20323633333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:c8:a8:38:ab:c4:8a:e0:43:d7:01:db:d5:b3:90:35:42:bc:
         20:e0:5b:c3:79:1c:58:88:7a:4e:4f:f8:9a:0e:e1:e6:e5:db:
         27:75:62:68:5c:0f:e4:41:31:d5:11:7e:6b:80:85:b9:22:1f:
         34:48:ee:96:cd:53:a0:3e:9e:59:44:43:4a:50:50:83:89:cd:
         93:5c:89:96:01:cc:e0:4c:a4:d2:83:8c:42:d1:3e:4b:bd:96:
         43:cc:77:53:40:05:0f:a8:d2:a5:a5:9b:3e:82:ac:bb:66:f8:
         f0:cc:c1:5a:c8:24:9e:4a:d8:80:a7:28:b1:9d:47:e9:7c:71:
         3d:4e:78:46:22:7d:04:a2:0a:5d:85:2e:6c:aa:66:0e:bc:e8:
         72:65:a0:0f:3c:09:aa:3c:53:a2:03:13:a8:cb:31:98:ff:8e:
         38:73:65:e4:09:ac:5a:3a:35:e1:3f:e5:b4:ed:d5:ac:a2:f3:
         00:a8:55:ed:72:e6:81:fa:2b:78:6f:fa:6a:1a:45:89:00:8b:
         26:a1:6b:e5:39:50:74:91:c7:6f:8e:b5:e6:37:62:73:c5:cb:
         d4:d6:f6:53:b9:5a:7f:b3:e5:30:0c:3e:7f:ba:af:cb:ce:86:
         da:50:81:fb:61:9e:e9:3f:cb:0c:38:32:d1:c0:c1:76:aa:61:
         d3:b9:d5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:23:56 2026 by rpki-client