Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/3136372e3235302e322e302f32332d3233203d3e20323635313835.roa
File:                     3136372e3235302e322e302f32332d3233203d3e20323635313835.roa (raw, json)
Hash identifier:          dalew8B+CeDv2iSka0R+q54XmtH5DEq+o5Dvj+40Yy4=
Subject key identifier:   0C:5E:C2:29:6F:D3:10:77:CB:5A:7A:75:07:DB:7E:8B:7E:D5:C1:18
Certificate issuer:       /CN=5F3B18ACB6D17DB71656252E569070817AC536BF
Certificate serial:       7500BE1916DBDDD347B99C9BC8ACA042540FDE15
Authority key identifier: 5F:3B:18:AC:B6:D1:7D:B7:16:56:25:2E:56:90:70:81:7A:C5:36:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F3B18ACB6D17DB71656252E569070817AC536BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/3136372e3235302e322e302f32332d3233203d3e20323635313835.roa
Signing time:             Mon 19 Oct 2026 12:34:05 +0000
ROA not before:           Mon 19 Oct 2026 12:29:05 +0000
ROA not after:            Mon 18 Oct 2027 12:34:05 +0000
asID:                     265185
IP address blocks:        167.250.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/5F3B18ACB6D17DB71656252E569070817AC536BF.crl
                          rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/5F3B18ACB6D17DB71656252E569070817AC536BF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F3B18ACB6D17DB71656252E569070817AC536BF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 05:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:00:be:19:16:db:dd:d3:47:b9:9c:9b:c8:ac:a0:42:54:0f:de:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F3B18ACB6D17DB71656252E569070817AC536BF
        Validity
            Not Before: Oct 19 12:29:05 2026 GMT
            Not After : Oct 18 12:34:05 2027 GMT
        Subject: CN=0C5EC2296FD31077CB5A7A7507DB7E8B7ED5C118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:27:be:97:f6:d1:c4:2a:cd:64:78:43:80:e4:
                    c6:f7:9a:08:a7:20:44:c0:1b:df:2b:58:58:14:9f:
                    f6:77:89:3f:39:6e:7c:13:f8:45:a3:02:93:b2:07:
                    9d:8c:82:f6:8d:56:27:ec:37:7c:fe:c1:ca:e7:be:
                    65:e0:9f:7a:5b:b7:f8:50:48:cb:ca:28:12:01:81:
                    ea:5d:fe:71:d3:b4:d0:3a:8c:c1:cf:14:22:e6:34:
                    3e:05:4f:fe:6f:0f:dd:f3:14:5b:73:af:73:4b:fb:
                    ea:2d:40:cf:21:34:bd:c3:a6:6f:f9:cf:69:78:ae:
                    13:e1:69:e9:7a:17:00:b2:35:5b:74:79:52:31:5e:
                    bc:ea:a7:c1:46:6d:3f:3f:b7:a2:45:9c:47:d1:0c:
                    2e:c8:f8:23:b2:38:5f:61:f1:1f:96:81:1b:3f:1e:
                    be:dd:ea:54:67:40:2a:72:34:fd:7e:6e:37:cf:65:
                    ea:ce:b2:cb:96:db:c5:74:bb:04:ea:0a:94:3b:3f:
                    a7:b6:98:85:cc:c6:cb:b5:4b:61:df:06:84:32:6b:
                    c5:bb:1b:ac:2a:d7:2c:6d:0a:4f:e0:0f:fa:16:05:
                    ba:11:4b:bc:a2:26:69:f2:a2:8a:a5:fa:63:44:4d:
                    24:40:37:c0:41:52:d5:ff:12:ae:c6:ce:c7:ff:96:
                    af:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:5E:C2:29:6F:D3:10:77:CB:5A:7A:75:07:DB:7E:8B:7E:D5:C1:18
            X509v3 Authority Key Identifier:
                keyid:5F:3B:18:AC:B6:D1:7D:B7:16:56:25:2E:56:90:70:81:7A:C5:36:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/5F3B18ACB6D17DB71656252E569070817AC536BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F3B18ACB6D17DB71656252E569070817AC536BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/3136372e3235302e322e302f32332d3233203d3e20323635313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:17:82:fb:24:c8:98:49:f4:48:92:73:c4:dc:f6:3d:8f:be:
         93:3b:d2:fd:97:cb:6d:fc:b8:e4:9f:62:68:86:7e:5e:50:4b:
         b5:aa:9b:f5:b4:85:7d:89:df:51:34:76:18:fa:4b:9e:b1:4b:
         2f:dd:63:cc:d8:ec:ce:92:52:18:63:04:45:b3:b1:dd:1f:d1:
         ad:45:d3:f4:7f:7c:e5:47:90:b8:97:9f:05:05:7d:ce:db:de:
         18:ee:85:0e:16:e6:d3:8c:5b:d5:fc:18:39:92:9a:99:fc:6e:
         d2:df:07:ab:b8:ca:f4:af:33:f0:3c:86:f5:08:1f:31:cf:aa:
         e8:34:d4:ef:0b:d4:a0:fc:83:02:9c:1b:d4:55:4d:d8:90:bc:
         fe:00:a3:c3:a3:28:08:97:0e:97:2c:f4:ec:f1:61:bf:db:7b:
         11:ef:24:42:c1:eb:2b:77:78:4c:8f:cd:73:84:f5:96:00:e3:
         72:10:31:ca:ba:3d:51:ff:a5:d9:b7:c0:ff:b1:b2:e8:4d:cb:
         7e:06:04:e2:46:db:99:2b:a6:e7:d2:46:52:78:83:fc:df:dc:
         da:7c:cf:14:71:37:b9:ea:3f:a0:22:9a:37:22:00:ba:51:78:
         53:6b:c9:ee:42:db:22:e0:46:de:35:d3:ed:4d:45:85:19:2a:
         ff:4b:a5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 21:59:46 2026 by rpki-client