Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/3138392e38392e3234352e302f32342d3234203d3e203238313838.roa
File:                     3138392e38392e3234352e302f32342d3234203d3e203238313838.roa (raw, json)
Hash identifier:          7b1gvgqJP7FaBZLjdEbPmuRNNbyG9G9IxrYd2SgGmHs=
Subject key identifier:   64:30:87:07:EB:80:9C:29:2A:C0:C2:A7:04:79:9D:E7:44:74:38:EA
Certificate issuer:       /CN=26F5B1E04ADF1D8B1298C9E56337C196C3C8034F
Certificate serial:       5859500A1EF75FBFD0DACC58627F239D025EDC8E
Authority key identifier: 26:F5:B1:E0:4A:DF:1D:8B:12:98:C9:E5:63:37:C1:96:C3:C8:03:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/3138392e38392e3234352e302f32342d3234203d3e203238313838.roa
Signing time:             Fri 09 Oct 2026 14:34:17 +0000
ROA not before:           Fri 09 Oct 2026 14:29:17 +0000
ROA not after:            Fri 08 Oct 2027 14:34:17 +0000
asID:                     28188
IP address blocks:        189.89.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.crl
                          rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 18:36:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:59:50:0a:1e:f7:5f:bf:d0:da:cc:58:62:7f:23:9d:02:5e:dc:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26F5B1E04ADF1D8B1298C9E56337C196C3C8034F
        Validity
            Not Before: Oct  9 14:29:17 2026 GMT
            Not After : Oct  8 14:34:17 2027 GMT
        Subject: CN=64308707EB809C292AC0C2A704799DE7447438EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6c:c9:dd:c6:a3:3e:d6:56:35:c1:a9:bc:d1:
                    d2:3c:e3:14:87:b2:60:4f:06:e6:7f:2d:7a:78:af:
                    f0:5a:83:b2:96:38:7e:9f:c6:f2:ca:ce:fe:5d:da:
                    7b:34:95:ea:d6:f6:1c:8c:11:7b:62:4d:b7:81:da:
                    ad:b4:a3:1a:df:3e:37:04:93:3b:f4:19:15:c9:21:
                    ec:47:34:44:ec:b1:46:a8:5a:bd:39:eb:eb:8a:50:
                    37:f9:b4:ca:f8:9b:f1:a8:d7:85:ec:cd:c6:fe:ef:
                    c5:b1:ff:69:46:9d:1e:a3:24:6a:c3:1e:f0:10:e6:
                    07:dd:01:6b:ae:82:99:ce:69:26:db:af:aa:9b:3b:
                    13:ad:ce:db:07:9f:00:5c:7e:05:30:34:af:21:52:
                    78:96:bd:bf:af:eb:fd:1b:68:aa:a4:3f:b8:96:36:
                    d7:50:c0:c7:fb:8c:32:00:c5:16:05:2d:51:9b:39:
                    66:2f:90:d3:53:4c:8c:81:d2:83:bc:e2:d3:66:a4:
                    19:a3:3c:1f:84:a7:39:b5:f5:93:34:55:ae:34:d2:
                    78:2c:30:8c:14:fd:8c:e5:09:4c:37:89:49:d6:6b:
                    e7:48:15:d8:f4:3d:c5:7b:77:b1:da:c7:8b:0f:3f:
                    f6:b8:49:ac:44:db:24:78:c1:e5:d7:30:e7:ac:0f:
                    8a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:30:87:07:EB:80:9C:29:2A:C0:C2:A7:04:79:9D:E7:44:74:38:EA
            X509v3 Authority Key Identifier:
                keyid:26:F5:B1:E0:4A:DF:1D:8B:12:98:C9:E5:63:37:C1:96:C3:C8:03:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/3138392e38392e3234352e302f32342d3234203d3e203238313838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:6f:91:ce:44:79:89:48:4e:ac:1e:9a:8e:5e:f3:5d:d0:f7:
         31:24:8c:05:1e:c2:ea:69:9a:e1:e7:7c:f0:e4:3a:58:63:66:
         17:f1:60:70:b8:7f:b1:16:70:58:d5:78:13:38:0d:92:53:ff:
         df:e1:f3:62:bd:bd:b8:67:5e:7e:8f:3e:35:b0:68:5d:02:47:
         87:8b:e7:2a:d9:1f:6c:97:28:89:84:03:84:ba:72:b4:1c:5d:
         eb:7d:06:09:f5:c7:b8:ad:a1:8f:4c:c8:8c:ef:50:be:19:b9:
         87:91:8c:a3:66:ef:e5:14:a7:ca:00:b8:de:d7:51:12:b1:e0:
         72:30:b1:72:95:51:70:7d:37:38:c1:7a:9f:22:8d:88:78:5c:
         f4:56:29:5d:8e:2a:40:4a:35:94:88:d9:68:24:6d:23:44:9b:
         27:6e:fc:46:17:2d:7d:a7:b4:da:dd:da:5c:1c:f7:b5:af:1e:
         8e:08:2a:ca:37:f3:6e:27:06:c9:df:c6:3c:c9:d3:6f:f3:41:
         0a:63:98:da:5b:5f:78:9e:11:12:29:a1:6b:c5:6c:2e:8c:97:
         02:88:1a:fc:45:d4:07:b5:0d:3c:22:7e:73:95:91:b2:0c:f9:
         10:99:87:9c:cb:7b:35:9b:dd:77:a4:f5:f2:dd:e5:23:31:c1:
         49:b7:92:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:14:25 2026 by rpki-client