Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/3138312e3232342e37362e302f32322d3234203d3e20323636323238.roa
File:                     3138312e3232342e37362e302f32322d3234203d3e20323636323238.roa (raw, json)
Hash identifier:          SZfBQxo+xzsPntZmiKeXuAx/QaK1avUSqxBWiKqBccY=
Subject key identifier:   07:A8:BF:4E:08:0C:05:EA:F0:5E:44:E8:C7:75:B2:DC:29:29:35:F7
Certificate issuer:       /CN=E7F1F0A299597CC5656B837D3DFD4B63C8649C47
Certificate serial:       22888BDDF4D9160ED44198946546BC3B6D152921
Authority key identifier: E7:F1:F0:A2:99:59:7C:C5:65:6B:83:7D:3D:FD:4B:63:C8:64:9C:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7F1F0A299597CC5656B837D3DFD4B63C8649C47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/3138312e3232342e37362e302f32322d3234203d3e20323636323238.roa
Signing time:             Wed 23 Sep 2026 01:25:39 +0000
ROA not before:           Wed 23 Sep 2026 01:20:39 +0000
ROA not after:            Wed 22 Sep 2027 01:25:39 +0000
asID:                     266228
IP address blocks:        181.224.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/E7F1F0A299597CC5656B837D3DFD4B63C8649C47.crl
                          rsync://rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/E7F1F0A299597CC5656B837D3DFD4B63C8649C47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7F1F0A299597CC5656B837D3DFD4B63C8649C47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 16:13:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:88:8b:dd:f4:d9:16:0e:d4:41:98:94:65:46:bc:3b:6d:15:29:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7F1F0A299597CC5656B837D3DFD4B63C8649C47
        Validity
            Not Before: Sep 23 01:20:39 2026 GMT
            Not After : Sep 22 01:25:39 2027 GMT
        Subject: CN=07A8BF4E080C05EAF05E44E8C775B2DC292935F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2e:b3:d4:1d:58:27:07:e5:7a:53:e8:10:ba:
                    67:33:35:cb:4e:86:3d:bf:7a:54:36:cd:c7:c8:73:
                    9c:e9:0d:5d:a9:08:f9:1d:bd:81:cb:96:86:19:20:
                    38:3c:39:65:1c:6a:63:7b:35:f0:ba:6f:1e:65:61:
                    ee:60:e0:20:13:ef:be:60:e7:4b:eb:7e:a0:1b:70:
                    ba:fb:eb:f5:ac:1f:d8:4d:b5:b6:a3:74:6c:09:76:
                    a2:c3:cb:c1:4b:e5:3f:4e:43:7d:c5:59:74:31:c4:
                    c2:b2:51:74:63:ad:c0:73:6a:51:12:3f:09:81:a6:
                    42:30:9f:89:f7:81:56:27:09:bd:32:4c:ea:6d:08:
                    c5:a7:bd:8c:73:44:75:6b:81:0f:e1:13:f9:33:b8:
                    cf:e1:55:67:aa:c6:61:93:a5:d2:49:b2:55:be:12:
                    f0:88:e9:39:63:da:92:82:f1:06:64:e7:2c:29:cb:
                    c3:13:33:8d:1d:de:b9:9b:d8:db:b4:17:e1:8d:9f:
                    b3:66:5b:af:02:1e:9d:de:57:dd:32:5e:5b:5a:aa:
                    d5:01:68:1a:8f:7f:ce:2e:7d:69:0b:3a:92:78:12:
                    f4:db:31:18:ef:8e:e5:35:1b:3d:98:03:2f:14:08:
                    e4:cd:8f:17:19:7d:82:f2:23:d8:92:af:66:3b:eb:
                    ec:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A8:BF:4E:08:0C:05:EA:F0:5E:44:E8:C7:75:B2:DC:29:29:35:F7
            X509v3 Authority Key Identifier:
                keyid:E7:F1:F0:A2:99:59:7C:C5:65:6B:83:7D:3D:FD:4B:63:C8:64:9C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/E7F1F0A299597CC5656B837D3DFD4B63C8649C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7F1F0A299597CC5656B837D3DFD4B63C8649C47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/3138312e3232342e37362e302f32322d3234203d3e20323636323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:6a:00:d1:3c:90:07:04:5e:cc:25:16:b9:07:e0:61:7d:6d:
         71:ff:e1:4d:fd:47:54:e6:70:d4:c2:ed:3e:60:1a:4d:07:e4:
         ba:be:96:60:5c:32:0a:bb:78:44:ce:8c:20:72:26:5d:1f:c9:
         69:44:e3:86:60:2c:c3:02:cb:99:29:30:c3:cd:21:d9:43:53:
         54:48:bb:2d:a0:a0:b2:43:c2:2d:35:5d:18:9b:fd:50:de:c7:
         ff:5a:44:5d:04:24:c8:20:e2:fc:a6:35:6a:7f:e1:cc:d2:62:
         68:23:99:a7:d0:ec:07:5c:f0:1a:6a:a7:06:eb:9c:fb:3a:52:
         0a:58:15:eb:ce:51:45:67:e0:cb:cc:c3:ee:d7:4d:e2:cc:3c:
         d6:62:09:70:52:8d:3a:84:0a:69:88:ce:87:78:8b:c1:f1:c8:
         e1:6c:04:44:8b:6f:17:c3:fc:8e:ce:41:bd:02:ce:42:4d:a3:
         97:df:1f:5f:15:0b:b4:cf:25:e9:eb:65:2c:a9:4f:a4:5f:ee:
         20:89:e1:64:46:9d:ad:1a:7a:bf:81:4a:91:0f:37:7a:39:fc:
         44:07:0d:25:02:38:97:44:e1:19:10:e9:d7:a8:7e:1c:95:58:
         44:6e:bd:d9:01:c1:fb:79:a5:f0:31:2a:62:28:b7:43:26:54:
         da:54:29:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 05:46:20 2026 by rpki-client