Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138392e39312e3234302e302f32302d3332203d3e203238363638.roa
File:                     3138392e39312e3234302e302f32302d3332203d3e203238363638.roa (raw, json)
Hash identifier:          UcboGFeSPwtOmU2l90OPFcpo3UrWDHMNTwdd/HKFWtU=
Subject key identifier:   83:50:E0:21:ED:AC:9C:84:3F:62:51:4A:22:17:9C:C9:86:FA:CD:E9
Certificate issuer:       /CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
Certificate serial:       5DDAD1DAB7CD6826F9BBF979AF9AD0F83F4F114C
Authority key identifier: 01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138392e39312e3234302e302f32302d3332203d3e203238363638.roa
Signing time:             Fri 17 Jul 2026 21:01:11 +0000
ROA not before:           Fri 17 Jul 2026 20:56:11 +0000
ROA not after:            Fri 16 Jul 2027 21:01:11 +0000
asID:                     28668
IP address blocks:        189.91.240.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:43:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:da:d1:da:b7:cd:68:26:f9:bb:f9:79:af:9a:d0:f8:3f:4f:11:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
        Validity
            Not Before: Jul 17 20:56:11 2026 GMT
            Not After : Jul 16 21:01:11 2027 GMT
        Subject: CN=8350E021EDAC9C843F62514A22179CC986FACDE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ee:37:5f:38:ba:ff:b5:88:a4:04:45:19:6f:
                    bd:a0:d7:c6:69:d4:58:8c:43:16:3c:fa:57:20:47:
                    ce:7b:d2:e8:c3:88:ce:b9:4c:49:21:0d:35:8f:3d:
                    86:fe:f1:a3:2c:eb:a5:25:9a:09:f8:86:c6:ee:62:
                    f9:a9:83:1e:fa:ff:72:71:00:e6:01:fd:c0:d8:14:
                    ee:4b:e6:c4:15:f9:a1:cc:5c:ab:2d:f2:73:9b:7d:
                    a6:58:59:c8:cf:bf:2c:ed:21:92:a1:2c:b4:b4:ff:
                    85:67:4f:c4:8c:4b:97:d4:7a:fc:20:c5:42:84:7a:
                    16:cc:95:40:b9:51:06:00:bd:13:59:c1:06:0d:4f:
                    a1:04:8f:bc:73:68:3d:8f:c7:59:f0:05:e5:e3:0b:
                    96:9e:90:07:73:4e:60:12:4f:cd:c7:1a:d2:9a:84:
                    f2:72:c6:f1:35:96:98:44:c3:a1:84:5f:9a:68:e0:
                    41:0f:09:af:01:9d:c4:47:3a:3f:0e:f0:96:4c:f3:
                    18:f6:79:f1:98:cd:73:6b:d4:87:7d:44:a2:75:ba:
                    f0:f9:e4:e1:86:65:57:a9:41:43:48:13:63:51:3f:
                    2d:34:00:73:c2:8d:dd:f9:93:69:4b:52:12:c4:a6:
                    d4:12:3d:95:1a:42:3c:9e:a7:b5:82:e6:09:6a:f8:
                    8b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:50:E0:21:ED:AC:9C:84:3F:62:51:4A:22:17:9C:C9:86:FA:CD:E9
            X509v3 Authority Key Identifier:
                keyid:01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138392e39312e3234302e302f32302d3332203d3e203238363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ac:8c:45:4a:50:9f:2d:fc:cb:f2:28:d0:08:d9:ef:dc:80:8e:
         bf:97:57:a5:c6:b0:37:ae:20:80:63:62:20:f6:0f:89:fc:a2:
         b7:b3:5c:43:60:d4:ff:a4:09:b5:17:72:12:56:d9:67:8b:5f:
         22:a8:a3:e1:5c:54:d0:6e:79:87:0a:92:0b:3a:b4:55:e0:12:
         b7:01:09:16:2b:3b:28:e1:15:02:a8:d1:d9:5b:ae:e0:29:65:
         65:95:36:97:bc:10:e4:e1:6d:73:09:d4:84:89:14:2a:dd:80:
         d2:79:db:6c:a4:4e:dd:1f:63:2f:26:f6:f1:1c:d0:34:f1:80:
         5a:3b:c9:97:dc:5f:fb:42:2d:8c:dd:1a:0f:16:20:43:3c:e5:
         51:44:5c:73:1a:87:a8:e3:69:a9:2f:c4:7b:0e:38:d9:90:e6:
         11:92:80:cc:cc:4b:fc:0d:cb:1e:6b:33:94:7c:57:81:56:56:
         27:b5:99:d6:11:2b:8e:70:99:20:f7:32:5a:a9:21:fe:db:70:
         5a:cb:c9:0d:cc:0f:4f:b7:c3:13:2e:ee:5b:41:26:df:ba:e5:
         73:4f:74:26:53:87:83:6c:9b:95:d1:56:e1:60:7c:26:0c:02:
         16:a2:0f:0d:bb:14:98:55:be:ae:ab:e3:5b:92:2d:0d:30:ad:
         bb:7f:c3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:22:53 2026 by rpki-client