Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/3138392e33382e33322e302f32302d3234203d3e203238333039.roa
File:                     3138392e33382e33322e302f32302d3234203d3e203238333039.roa (raw, json)
Hash identifier:          7PkXJdC0gfaqEKNYRGVXMc9xPGptFcc9YmcL6BSOMqI=
Subject key identifier:   87:8A:BE:AD:1B:04:1C:78:35:B8:BC:4C:BB:54:6D:04:DF:5D:F0:78
Certificate issuer:       /CN=69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123
Certificate serial:       08FFB1B3206FF9032D04BAC9DA326FF698EF522C
Authority key identifier: 69:DE:5A:D1:A5:B1:F9:78:84:D1:9D:C3:E9:EF:DA:3F:96:54:C1:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/3138392e33382e33322e302f32302d3234203d3e203238333039.roa
Signing time:             Thu 05 Mar 2026 14:05:16 +0000
ROA not before:           Thu 05 Mar 2026 14:00:16 +0000
ROA not after:            Thu 04 Mar 2027 14:05:16 +0000
asID:                     28309
IP address blocks:        189.38.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.crl
                          rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 15:56:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ff:b1:b3:20:6f:f9:03:2d:04:ba:c9:da:32:6f:f6:98:ef:52:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123
        Validity
            Not Before: Mar  5 14:00:16 2026 GMT
            Not After : Mar  4 14:05:16 2027 GMT
        Subject: CN=878ABEAD1B041C7835B8BC4CBB546D04DF5DF078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:96:34:9f:8a:83:4a:15:22:df:6b:2c:99:7b:
                    a8:63:3e:09:10:b1:79:83:fa:ac:ab:42:e9:74:9d:
                    9e:ee:fe:ba:12:78:fe:ae:52:8f:d1:d3:d6:e4:99:
                    af:43:68:65:d1:25:f8:0c:74:50:2b:bb:01:f6:8f:
                    14:42:19:1f:bb:67:bc:de:f9:32:86:65:ee:99:7d:
                    1a:dd:39:57:9a:3e:3c:fd:6f:5d:fc:d6:4d:69:41:
                    cb:4e:8f:51:e0:e8:c4:d1:11:d1:49:6a:4b:c7:15:
                    84:95:a5:de:86:c4:13:41:3c:48:ae:44:4e:66:0b:
                    7d:0b:83:23:95:ef:36:31:4b:a9:a1:e1:45:89:96:
                    28:d3:45:e2:f0:94:8e:9d:98:3f:c8:1d:cd:59:aa:
                    c4:d7:fd:c6:72:7e:87:42:3a:d6:0c:c7:ab:f0:50:
                    bd:e0:bf:c0:fd:01:f0:e4:66:fb:34:f9:c9:5a:23:
                    98:ca:67:ad:ed:95:eb:14:49:73:fc:ce:25:dd:67:
                    18:1f:2f:e7:29:75:6f:fd:d9:0b:a0:1c:36:8d:90:
                    dd:f7:bf:58:a1:c4:c7:aa:b8:8a:1a:fb:cf:fa:df:
                    63:8c:95:4f:1c:7a:84:7e:f3:70:4c:16:a5:2d:8d:
                    34:4d:20:24:10:c0:f1:97:98:0b:b7:59:b4:f0:c1:
                    1b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:8A:BE:AD:1B:04:1C:78:35:B8:BC:4C:BB:54:6D:04:DF:5D:F0:78
            X509v3 Authority Key Identifier:
                keyid:69:DE:5A:D1:A5:B1:F9:78:84:D1:9D:C3:E9:EF:DA:3F:96:54:C1:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/3138392e33382e33322e302f32302d3234203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         24:4f:01:70:8b:8d:8d:b4:56:ff:16:ee:64:0a:9c:28:bd:a9:
         e9:8f:d9:b0:f1:ac:da:16:b4:ba:d7:68:1f:03:ac:eb:49:7a:
         88:12:93:94:11:1a:42:b7:50:a0:4f:f9:b2:ae:02:fb:b2:58:
         22:06:81:8e:6d:dd:89:26:03:da:bb:3c:be:f8:e9:69:4b:d8:
         61:b6:fe:33:fe:eb:83:87:ca:24:68:b5:88:b5:20:7d:8b:4e:
         27:ea:fc:2b:28:68:fa:b3:e5:20:ad:7d:ef:dd:72:44:33:4b:
         dc:fb:93:41:45:71:a5:2c:b6:22:d8:40:c9:41:e2:1a:32:c1:
         e4:80:f7:04:8a:5d:a9:70:d3:1b:91:70:60:78:9f:eb:4f:d3:
         f8:4b:72:26:3d:4c:d8:2c:b8:2c:a4:e3:73:d7:93:be:b8:66:
         45:e2:82:a0:40:fd:73:a5:96:15:49:98:5d:a4:cd:68:47:6b:
         39:ab:44:59:82:82:ac:d1:21:26:c2:6d:24:19:15:f1:96:91:
         d3:85:14:37:4c:a2:be:7f:98:6a:1c:42:e7:3e:7b:a6:f7:c7:
         3e:c4:47:9b:51:9a:70:63:c4:2d:8c:d2:39:3d:c4:97:ea:60:
         a2:b2:af:cd:ae:c1:31:50:a3:5b:f3:40:e6:e6:10:e6:42:fd:
         30:ab:54:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:58:43 2026 by rpki-client