Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Bns6T5M9tRSFwW6wVuwGb55MSTj9mRvtbymmZoB3wszv/0/3139302e3130392e39362e302f32332d3233203d3e20323731323232.roa
File:                     3139302e3130392e39362e302f32332d3233203d3e20323731323232.roa (raw, json)
Hash identifier:          Zc0+irkt/W3BXl7UYlAukRViLHHegL0kl/P1QY9IJ4U=
Subject key identifier:   B9:13:AB:D6:7B:D7:A6:48:F5:1C:39:22:E4:D4:B7:3D:DF:93:F3:2C
Certificate issuer:       /CN=8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838
Certificate serial:       726C7A0DB2F4EED2543470D33513097BE353894B
Authority key identifier: 8A:E3:3D:76:F6:C9:FC:9D:0B:0F:F7:F5:54:C3:51:92:71:D1:C8:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bns6T5M9tRSFwW6wVuwGb55MSTj9mRvtbymmZoB3wszv/0/3139302e3130392e39362e302f32332d3233203d3e20323731323232.roa
Signing time:             Wed 26 Aug 2026 20:00:00 +0000
ROA not before:           Wed 26 Aug 2026 19:55:00 +0000
ROA not after:            Wed 25 Aug 2027 20:00:00 +0000
asID:                     271222
IP address blocks:        190.109.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bns6T5M9tRSFwW6wVuwGb55MSTj9mRvtbymmZoB3wszv/0/8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.crl
                          rsync://rpki-repo.registro.br/repo/Bns6T5M9tRSFwW6wVuwGb55MSTj9mRvtbymmZoB3wszv/0/8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 04:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:6c:7a:0d:b2:f4:ee:d2:54:34:70:d3:35:13:09:7b:e3:53:89:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838
        Validity
            Not Before: Aug 26 19:55:00 2026 GMT
            Not After : Aug 25 20:00:00 2027 GMT
        Subject: CN=B913ABD67BD7A648F51C3922E4D4B73DDF93F32C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e3:b6:ec:10:d6:21:e1:48:55:c9:8b:3c:ac:
                    cc:25:a3:5a:a0:8b:e1:b0:21:52:2d:32:40:d2:dd:
                    95:8a:e7:ca:10:0e:51:26:2c:1f:35:0c:15:c8:69:
                    e4:01:e8:17:75:f6:cf:fe:c1:e5:22:8c:9f:95:ef:
                    a5:8e:86:8b:55:37:1b:db:0b:12:f6:83:51:b6:b6:
                    82:25:66:61:95:64:a8:a6:73:ec:8b:2b:ef:91:1a:
                    46:04:46:1a:80:73:51:80:4b:e6:c3:29:de:f6:9c:
                    cf:01:b0:29:6b:2b:4b:ac:c6:60:e6:2e:b2:71:f3:
                    d5:60:43:3d:3e:4c:13:ee:11:0a:a0:6c:5b:86:79:
                    47:3a:19:fd:7f:a7:3c:c1:9b:ea:67:9b:cc:cd:31:
                    ef:08:93:44:27:9a:85:0d:42:65:2d:90:a2:f6:da:
                    d3:62:b9:63:de:f6:fa:f3:20:ee:59:dc:67:e7:82:
                    81:45:17:cc:84:de:d7:96:63:de:04:06:e9:a4:fb:
                    fd:14:69:d1:ae:07:13:a2:1e:69:fa:23:ea:1f:d3:
                    85:03:74:47:9f:c8:55:b0:88:c0:18:14:70:c4:3d:
                    bd:cd:b5:01:0d:0b:a2:6f:70:b1:63:ce:b2:6b:8a:
                    58:e2:b6:9b:f0:e9:80:4d:b5:b0:fe:63:84:87:8d:
                    64:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:13:AB:D6:7B:D7:A6:48:F5:1C:39:22:E4:D4:B7:3D:DF:93:F3:2C
            X509v3 Authority Key Identifier:
                keyid:8A:E3:3D:76:F6:C9:FC:9D:0B:0F:F7:F5:54:C3:51:92:71:D1:C8:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bns6T5M9tRSFwW6wVuwGb55MSTj9mRvtbymmZoB3wszv/0/8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bns6T5M9tRSFwW6wVuwGb55MSTj9mRvtbymmZoB3wszv/0/3139302e3130392e39362e302f32332d3233203d3e20323731323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:a3:a3:e9:27:92:29:32:7a:ad:a1:90:aa:cf:d9:78:f8:ec:
         46:c0:47:84:94:d7:e6:22:b5:b1:1c:0b:e7:1f:a7:87:41:33:
         c5:dc:c5:8e:b5:b8:f7:10:99:aa:6e:29:2a:fe:63:c3:0f:cc:
         24:ad:25:d7:0a:d9:2a:f8:fb:b2:cb:f3:1c:62:81:cc:d6:9f:
         b6:97:98:89:78:28:6f:f7:88:4f:26:e1:0e:b1:b5:07:89:6b:
         9a:b4:42:60:47:61:7a:0a:a0:50:27:89:5f:83:a5:92:50:5d:
         f7:8d:b2:af:a8:d9:cf:77:21:e5:f3:06:58:3e:e7:6b:93:62:
         f2:05:6b:84:73:1e:0b:a0:43:dc:4b:7b:af:d8:03:60:53:a8:
         18:29:ae:31:d1:0e:02:03:e1:b0:41:11:ef:2f:ea:c7:cd:2c:
         b0:5f:83:c3:5e:aa:98:bf:96:5c:61:58:45:25:a3:29:48:d0:
         7b:6b:28:45:96:a7:a6:db:72:77:01:88:06:29:c5:50:f6:ca:
         db:e5:c7:f0:41:e6:98:27:dd:be:fa:f4:ca:0f:76:33:95:3f:
         6b:20:fe:66:f6:89:f8:a8:5e:66:7c:9c:8f:24:ce:cd:57:af:
         c6:ff:2e:4b:19:08:a3:4c:d1:af:31:46:a3:41:9f:10:f0:c0:
         0d:12:c2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 11:33:44 2026 by rpki-client