Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EennRTSYfwGuDgSRTw2tFLKSMbE7e6MXh8WehGCE9Ta/0/3139322e3134312e3231362e302f32322d3234203d3e20323634323231.roa
File:                     3139322e3134312e3231362e302f32322d3234203d3e20323634323231.roa (raw, json)
Hash identifier:          2uiNorPnuDyZX3rjYq60X1ZsL2exG63/eOJS1RdYrZs=
Subject key identifier:   09:FD:F3:15:A7:56:2C:D7:64:16:06:6B:FA:7D:E0:EC:C1:8F:F3:58
Certificate issuer:       /CN=BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33
Certificate serial:       1C69ECAB39871B9138BA5BAD390F69A7513925B7
Authority key identifier: BE:C2:FF:1E:C8:AC:86:D3:B2:25:2C:93:7D:13:CB:8E:9D:51:FF:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EennRTSYfwGuDgSRTw2tFLKSMbE7e6MXh8WehGCE9Ta/0/3139322e3134312e3231362e302f32322d3234203d3e20323634323231.roa
Signing time:             Tue 25 Aug 2026 13:22:03 +0000
ROA not before:           Tue 25 Aug 2026 13:17:03 +0000
ROA not after:            Tue 24 Aug 2027 13:22:03 +0000
asID:                     264221
IP address blocks:        192.141.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EennRTSYfwGuDgSRTw2tFLKSMbE7e6MXh8WehGCE9Ta/0/BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.crl
                          rsync://rpki-repo.registro.br/repo/EennRTSYfwGuDgSRTw2tFLKSMbE7e6MXh8WehGCE9Ta/0/BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 Oct 2026 04:23:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:69:ec:ab:39:87:1b:91:38:ba:5b:ad:39:0f:69:a7:51:39:25:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33
        Validity
            Not Before: Aug 25 13:17:03 2026 GMT
            Not After : Aug 24 13:22:03 2027 GMT
        Subject: CN=09FDF315A7562CD76416066BFA7DE0ECC18FF358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2d:c7:63:57:c2:07:1c:7a:ef:d4:ce:2e:c5:
                    2a:f4:ed:af:b1:58:25:05:94:4c:8d:6b:4a:bc:ca:
                    ed:c4:71:f3:fb:df:59:3a:4e:4b:76:51:7e:be:2d:
                    c6:8b:77:55:1d:fd:04:a9:2c:d7:db:b4:7e:be:52:
                    5b:8d:3b:3f:0c:bb:b2:cf:70:c2:6d:b9:25:d5:b4:
                    2b:db:a8:64:2e:93:92:94:b9:9d:2b:86:2e:b5:e8:
                    2a:4d:61:41:ad:6e:b3:80:3e:b5:c3:39:60:60:08:
                    39:5d:2f:19:70:18:6b:32:9c:c9:b2:3a:23:8a:e3:
                    a6:2f:e8:07:cf:51:04:ef:b1:92:ca:df:bf:f4:5c:
                    53:ca:a3:2e:cf:14:d9:b7:cf:fd:ab:d8:51:be:b5:
                    d8:0c:f3:1f:32:3a:27:57:ee:87:14:d3:9d:12:57:
                    56:a5:ab:1b:42:ba:33:6f:c1:53:a6:a7:e6:e0:a2:
                    cc:6b:3a:db:b2:98:a4:37:65:7c:50:ed:20:66:7f:
                    4b:36:41:6b:30:6d:2d:43:44:30:29:9d:6d:75:a4:
                    e7:ce:c2:a1:0d:68:9e:e7:0a:f7:87:a9:53:2d:ad:
                    a7:0a:63:dd:4b:ad:85:0d:77:4c:5a:5d:23:33:13:
                    a3:b8:71:88:60:98:3e:29:1a:e3:a7:42:84:c1:62:
                    81:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:FD:F3:15:A7:56:2C:D7:64:16:06:6B:FA:7D:E0:EC:C1:8F:F3:58
            X509v3 Authority Key Identifier:
                keyid:BE:C2:FF:1E:C8:AC:86:D3:B2:25:2C:93:7D:13:CB:8E:9D:51:FF:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EennRTSYfwGuDgSRTw2tFLKSMbE7e6MXh8WehGCE9Ta/0/BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EennRTSYfwGuDgSRTw2tFLKSMbE7e6MXh8WehGCE9Ta/0/3139322e3134312e3231362e302f32322d3234203d3e20323634323231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:03:43:2a:fe:68:fb:af:88:69:94:6b:44:27:5d:db:fc:25:
         42:76:2b:cc:97:26:0b:1f:f8:5e:56:ab:b5:c1:c6:ce:27:d4:
         cd:f8:ab:16:ef:60:f1:d3:e0:2b:67:57:17:82:81:df:8f:39:
         63:74:d2:4a:6a:a1:d7:70:76:9a:9a:e8:9a:91:23:19:ef:eb:
         19:b7:4d:98:a4:8a:d5:26:1f:95:ba:0f:8a:27:c9:e2:e9:3f:
         ef:f0:03:ef:5e:15:12:89:0d:b6:3d:d2:6f:fd:84:e3:bd:5c:
         30:03:ca:d0:f6:37:d4:48:dc:10:7b:be:34:db:2b:5c:8a:a8:
         d2:d3:7e:5d:a8:ee:30:60:42:b6:9f:3d:15:7f:12:78:20:00:
         60:1a:87:09:12:a0:50:60:8c:80:0c:79:de:6f:64:25:f7:14:
         dc:2a:3b:7b:ab:dd:f4:9d:02:9a:2f:be:ab:5c:64:a8:2c:5d:
         23:bf:08:a3:6c:1a:41:8a:52:35:bc:9c:34:8c:5f:16:46:a2:
         5c:1d:96:54:f6:75:e0:4f:15:ac:5b:7e:2d:b6:51:b2:63:50:
         d5:ad:98:b2:f7:0f:9f:3d:d9:cb:02:86:b8:34:32:38:09:a2:
         cb:92:4f:bd:40:9e:d3:9f:7c:82:74:2c:9c:69:dc:85:ba:21:
         7d:af:bb:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 07:45:42 2026 by rpki-client