Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/3133382e3235352e3132302e302f32322d3332203d3e20323633343431.roa
File:                     3133382e3235352e3132302e302f32322d3332203d3e20323633343431.roa (raw, json)
Hash identifier:          RAPuWKml/DP9qC/f1gnIue+XF4cxNf0rwiPOZwBsxiw=
Subject key identifier:   20:61:1C:CE:98:28:D8:36:1E:E6:A8:62:41:73:5B:41:89:83:52:F7
Certificate issuer:       /CN=26E3D1B009E7A8557F73668315C1AA6376A4A0C1
Certificate serial:       5BD200B34676EDA811719D0A443D8EEEAC2125B8
Authority key identifier: 26:E3:D1:B0:09:E7:A8:55:7F:73:66:83:15:C1:AA:63:76:A4:A0:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26E3D1B009E7A8557F73668315C1AA6376A4A0C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/3133382e3235352e3132302e302f32322d3332203d3e20323633343431.roa
Signing time:             Sat 12 Sep 2026 15:28:39 +0000
ROA not before:           Sat 12 Sep 2026 15:23:39 +0000
ROA not after:            Sat 11 Sep 2027 15:28:39 +0000
asID:                     263441
IP address blocks:        138.255.120.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/26E3D1B009E7A8557F73668315C1AA6376A4A0C1.crl
                          rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/26E3D1B009E7A8557F73668315C1AA6376A4A0C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26E3D1B009E7A8557F73668315C1AA6376A4A0C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 14:08:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:d2:00:b3:46:76:ed:a8:11:71:9d:0a:44:3d:8e:ee:ac:21:25:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26E3D1B009E7A8557F73668315C1AA6376A4A0C1
        Validity
            Not Before: Sep 12 15:23:39 2026 GMT
            Not After : Sep 11 15:28:39 2027 GMT
        Subject: CN=20611CCE9828D8361EE6A86241735B41898352F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0d:8e:76:17:da:2d:33:e8:00:a8:16:71:a1:
                    8d:ee:13:b5:eb:ae:82:f9:37:d6:d6:3d:f0:49:ea:
                    8d:07:3c:1e:96:68:31:7d:cc:42:93:64:11:91:e4:
                    27:cb:ab:bb:fc:bd:bd:bc:17:9c:8d:d4:32:3c:02:
                    83:a8:c0:38:1a:24:8d:fd:45:f3:c0:0b:95:47:50:
                    41:d8:dd:68:e7:26:23:f4:f7:d7:cb:bd:57:88:52:
                    fa:f1:7b:aa:a0:f5:dd:15:96:d3:f5:76:99:5a:15:
                    65:a9:44:da:e7:49:f7:f8:81:51:9f:fa:35:4d:72:
                    72:6e:78:47:57:b0:da:bb:75:9d:50:5e:02:03:b5:
                    93:c0:d4:39:5a:f9:2f:b6:7f:50:90:e9:e2:62:2d:
                    57:e6:11:38:85:04:ac:bf:68:bb:32:c4:4e:b1:5d:
                    0c:a7:d9:18:cb:4e:22:c2:f8:6a:ea:3a:ca:18:cb:
                    e8:57:92:c8:7c:c8:3c:94:70:2d:68:d8:74:f5:16:
                    52:ac:58:16:e0:45:7a:f2:ef:84:0b:69:cb:f1:d3:
                    b4:14:34:dc:d6:ba:34:b9:75:a7:a0:66:09:81:57:
                    79:d0:96:45:6a:34:9e:2a:51:43:3d:f6:0d:f3:3b:
                    33:95:e4:c6:ab:07:60:49:10:c7:9a:63:9f:17:50:
                    3a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:61:1C:CE:98:28:D8:36:1E:E6:A8:62:41:73:5B:41:89:83:52:F7
            X509v3 Authority Key Identifier:
                keyid:26:E3:D1:B0:09:E7:A8:55:7F:73:66:83:15:C1:AA:63:76:A4:A0:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/26E3D1B009E7A8557F73668315C1AA6376A4A0C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26E3D1B009E7A8557F73668315C1AA6376A4A0C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/3133382e3235352e3132302e302f32322d3332203d3e20323633343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:86:21:81:55:4b:fb:26:8c:52:75:94:85:d3:44:32:7b:d4:
         41:7d:cd:05:47:30:8c:3a:ac:c1:21:c9:87:ab:dc:e2:07:f1:
         5d:8b:39:1f:b6:47:c0:bb:96:c3:84:15:c4:39:02:06:4c:54:
         14:c6:74:bc:91:97:11:6e:99:3c:25:77:1b:b0:86:6b:5a:11:
         83:b1:77:b5:e1:32:16:11:9a:69:18:1d:a2:6f:5c:65:46:de:
         48:e8:61:c2:d5:6d:c8:af:2c:28:23:b8:a9:89:95:36:24:a3:
         7c:be:61:6b:2a:6f:56:5e:70:71:07:09:cc:82:e8:34:f8:9c:
         27:94:16:b6:da:c9:ce:e0:63:73:da:87:5c:41:d2:be:37:14:
         ee:69:aa:a9:e4:5c:05:63:2f:2b:da:29:54:30:87:fa:1c:6b:
         29:1e:91:1c:3f:93:6a:4a:6e:66:7d:1f:84:61:2f:31:4d:af:
         16:a7:00:8f:11:fb:99:ad:fb:d6:3b:f6:22:94:ae:1c:a5:07:
         96:3c:47:76:05:aa:d9:35:02:cb:5d:f6:99:90:03:13:5f:f6:
         43:30:a7:06:0b:0f:9b:68:a6:2d:35:07:fc:d1:20:ab:c3:02:
         27:07:56:31:e9:96:0a:eb:73:42:03:61:bd:80:eb:7e:98:dc:
         7e:5d:c2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 17:45:49 2026 by rpki-client