Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/3138312e3139312e3130342e302f32342d3234203d3e20323636303039.roa
File:                     3138312e3139312e3130342e302f32342d3234203d3e20323636303039.roa (raw, json)
Hash identifier:          CTJwui3uYLvzB/yuqoInLCeFs/DR4KRAO62CUk8xcX4=
Subject key identifier:   81:8A:45:CC:E9:55:E8:FA:67:A1:8B:B3:9D:FF:C5:F7:60:D3:2B:F0
Certificate issuer:       /CN=7F26572E5BEE74A9546D5DB49A0AD8194F5BF810
Certificate serial:       7B71B9C329DD89BF84FA7031130A26CCF5C09342
Authority key identifier: 7F:26:57:2E:5B:EE:74:A9:54:6D:5D:B4:9A:0A:D8:19:4F:5B:F8:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F26572E5BEE74A9546D5DB49A0AD8194F5BF810.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/3138312e3139312e3130342e302f32342d3234203d3e20323636303039.roa
Signing time:             Thu 17 Sep 2026 09:14:32 +0000
ROA not before:           Thu 17 Sep 2026 09:09:32 +0000
ROA not after:            Thu 16 Sep 2027 09:14:32 +0000
asID:                     266009
IP address blocks:        181.191.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/7F26572E5BEE74A9546D5DB49A0AD8194F5BF810.crl
                          rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/7F26572E5BEE74A9546D5DB49A0AD8194F5BF810.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F26572E5BEE74A9546D5DB49A0AD8194F5BF810.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 21:37:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:71:b9:c3:29:dd:89:bf:84:fa:70:31:13:0a:26:cc:f5:c0:93:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F26572E5BEE74A9546D5DB49A0AD8194F5BF810
        Validity
            Not Before: Sep 17 09:09:32 2026 GMT
            Not After : Sep 16 09:14:32 2027 GMT
        Subject: CN=818A45CCE955E8FA67A18BB39DFFC5F760D32BF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:af:de:6e:3c:81:b7:83:66:e4:d1:9e:3e:28:
                    b2:8c:cf:5c:4e:c9:ca:72:4a:29:68:a4:e1:20:48:
                    9b:c3:73:30:02:23:55:e0:56:54:5b:6d:5d:ed:05:
                    42:1b:a5:88:69:81:98:85:f4:b9:e3:6b:e7:20:71:
                    4f:c7:5d:43:a7:35:cb:cb:3f:52:fe:e6:fd:e3:57:
                    f1:35:a0:37:af:ec:3b:4b:d2:d4:58:2e:74:ad:2e:
                    68:62:e6:87:fa:b1:41:83:a3:67:83:73:f9:4a:2a:
                    ca:22:cd:58:cb:b2:9b:55:a6:df:74:fd:66:63:c2:
                    61:d9:c3:f9:3a:59:16:ec:16:f6:f8:68:1c:90:ff:
                    d7:c9:e1:4e:97:85:f5:65:40:dc:50:99:b0:58:a8:
                    6e:06:f8:1f:f4:0d:91:ff:5d:9c:9c:83:c5:27:4b:
                    92:d7:32:44:c7:59:34:38:5a:9b:d0:97:ea:c7:8b:
                    ee:01:da:7e:33:13:21:a5:ab:da:cf:11:1e:c0:3b:
                    3b:6f:ea:13:f9:0e:43:e9:32:12:c2:15:be:ee:e5:
                    9c:9b:9b:0d:1b:9e:25:7d:4b:e2:6a:8b:2b:59:28:
                    4a:f7:32:e2:9f:da:20:37:28:ba:ff:09:8b:e5:ee:
                    dd:a5:c8:86:6d:9a:31:a1:ef:a9:88:d5:c8:a0:5b:
                    be:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:8A:45:CC:E9:55:E8:FA:67:A1:8B:B3:9D:FF:C5:F7:60:D3:2B:F0
            X509v3 Authority Key Identifier:
                keyid:7F:26:57:2E:5B:EE:74:A9:54:6D:5D:B4:9A:0A:D8:19:4F:5B:F8:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/7F26572E5BEE74A9546D5DB49A0AD8194F5BF810.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F26572E5BEE74A9546D5DB49A0AD8194F5BF810.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/3138312e3139312e3130342e302f32342d3234203d3e20323636303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:8c:d8:67:b3:91:b9:59:8b:e8:b7:34:2a:64:e6:1f:c9:cb:
         51:a7:26:c9:e5:0b:4d:60:85:47:3f:da:da:86:6a:1d:d4:82:
         33:95:84:4e:ba:9c:7d:33:32:8f:b5:aa:1f:d3:66:e5:fc:08:
         9e:c5:41:fe:28:eb:71:6e:07:ca:e6:b0:c5:44:74:2f:c1:7c:
         ed:bc:80:5b:c4:34:b7:63:22:36:a6:cd:20:96:ab:d6:6f:1f:
         48:21:00:d9:3d:ec:f3:20:14:2c:a1:dc:ec:bf:2d:b5:c9:3b:
         59:de:47:c8:14:cb:ea:59:19:58:56:63:5c:d6:01:59:45:89:
         53:00:cf:5f:c4:76:41:ed:10:f4:34:91:ff:86:c1:80:4f:ec:
         09:86:02:95:3d:af:02:f0:0f:fe:c6:04:07:95:a9:2e:6d:c9:
         77:0c:44:96:ff:e7:f0:0a:07:f6:80:f3:b5:48:99:8f:d0:a5:
         2c:8d:11:7d:ad:39:f3:df:a4:4f:1f:87:8e:36:b1:f7:d9:c6:
         3c:30:6d:2c:5b:2e:37:66:29:c4:6c:c4:6c:67:91:e4:64:9d:
         7d:35:2d:6e:39:a8:83:66:71:0c:e3:d1:e4:c2:7e:d4:6e:09:
         50:99:4d:47:5f:3a:6a:25:d6:6d:b3:db:77:29:01:c3:63:e5:
         66:69:37:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 04:10:40 2026 by rpki-client