Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/3133382e3235352e31322e302f32332d3234203d3e20323633393437.roa
File:                     3133382e3235352e31322e302f32332d3234203d3e20323633393437.roa (raw, json)
Hash identifier:          D/j0J6/wp37xMezErOdQmlBJR5jQvzrv62cE8hyctlo=
Subject key identifier:   39:7C:BD:37:C8:FB:81:9E:41:4D:BF:0F:98:8A:C5:C2:20:0F:7F:C9
Certificate issuer:       /CN=FAF093F291860536EFFC93934E77DC96693302DB
Certificate serial:       4484F2446B366C64A57020070FA666580002714C
Authority key identifier: FA:F0:93:F2:91:86:05:36:EF:FC:93:93:4E:77:DC:96:69:33:02:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAF093F291860536EFFC93934E77DC96693302DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/3133382e3235352e31322e302f32332d3234203d3e20323633393437.roa
Signing time:             Thu 08 Oct 2026 13:58:19 +0000
ROA not before:           Thu 08 Oct 2026 13:53:19 +0000
ROA not after:            Thu 07 Oct 2027 13:58:19 +0000
asID:                     263947
IP address blocks:        138.255.12.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.crl
                          rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAF093F291860536EFFC93934E77DC96693302DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 15:42:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:84:f2:44:6b:36:6c:64:a5:70:20:07:0f:a6:66:58:00:02:71:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAF093F291860536EFFC93934E77DC96693302DB
        Validity
            Not Before: Oct  8 13:53:19 2026 GMT
            Not After : Oct  7 13:58:19 2027 GMT
        Subject: CN=397CBD37C8FB819E414DBF0F988AC5C2200F7FC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:72:cf:8a:71:4a:6a:35:a1:04:f2:a7:9e:90:
                    b5:34:ec:d8:76:8c:1c:23:d3:32:50:0c:d7:fa:80:
                    0e:b8:46:46:8e:ce:77:2f:29:50:74:81:89:6e:02:
                    e7:dd:52:b4:40:bd:47:6b:ba:a8:15:b6:d3:b1:34:
                    7c:4f:6a:f8:5e:e8:c4:49:c9:e1:af:a6:4d:03:be:
                    09:0b:6c:60:e0:8d:d4:38:74:6a:53:1f:a2:7e:89:
                    e4:fc:52:c2:c6:aa:01:91:ef:70:8b:8f:0e:6b:ca:
                    7e:4a:77:0f:38:ed:27:f3:24:50:67:4d:85:cd:fa:
                    0d:a2:8e:89:d7:30:36:55:9a:e9:1d:d2:08:71:27:
                    6a:a2:24:0d:fd:4f:0b:8f:55:7d:37:0e:4f:a9:8b:
                    36:26:4c:35:24:d1:ea:7d:50:26:1b:8c:ef:06:8f:
                    c3:a1:b7:66:fd:39:d3:8c:b3:4a:84:33:39:13:76:
                    4c:3b:08:7d:82:fc:9e:76:a2:22:2d:53:41:3b:52:
                    f8:e3:e6:f1:50:6e:4e:11:b1:60:04:a6:ad:96:e9:
                    9d:83:f9:8c:09:89:f5:5d:41:ba:a4:fc:90:fc:9f:
                    15:e2:cc:7c:9b:d3:c8:a9:7e:c9:fc:13:67:04:43:
                    48:f4:e4:a2:50:a9:0e:12:a5:e7:e1:ba:20:e7:53:
                    b5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:7C:BD:37:C8:FB:81:9E:41:4D:BF:0F:98:8A:C5:C2:20:0F:7F:C9
            X509v3 Authority Key Identifier:
                keyid:FA:F0:93:F2:91:86:05:36:EF:FC:93:93:4E:77:DC:96:69:33:02:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAF093F291860536EFFC93934E77DC96693302DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/3133382e3235352e31322e302f32332d3234203d3e20323633393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:3c:dc:2c:1c:3d:30:cf:8d:43:6b:bc:c5:a7:43:a2:41:c8:
         6c:f5:0f:57:9a:4a:ca:19:2b:57:72:8d:35:47:a9:2a:0e:80:
         92:c9:d6:7c:49:74:c5:31:e3:88:2d:3d:1e:09:e4:08:12:47:
         75:c7:ec:1a:31:78:93:de:b6:90:4c:04:43:69:0e:c6:4f:3b:
         42:c5:ba:0b:d9:50:21:3b:37:9a:47:34:2d:be:ee:e2:58:e6:
         a1:8e:53:1c:ed:6c:35:ea:8a:91:e6:da:a0:71:06:29:39:27:
         d7:bb:50:57:2d:e7:a1:63:9b:97:8b:aa:b6:b5:99:44:1f:33:
         ba:60:1e:f3:8e:46:e9:49:38:99:51:d7:8a:06:d1:b0:39:d3:
         ca:90:96:6e:70:0a:cf:4c:e9:e8:73:ee:7d:13:e2:f3:77:f0:
         87:db:cb:56:59:e8:3d:47:73:11:fa:0f:71:cb:74:23:34:f6:
         90:97:14:f1:70:2a:88:14:23:a7:a2:a2:19:da:7e:e6:f6:c9:
         43:74:f2:18:27:94:2a:5a:77:0f:6a:73:85:d3:7d:21:0c:dd:
         d6:c9:a0:b5:72:ba:39:2a:01:a3:c7:32:86:c1:54:17:50:fa:
         8d:c4:07:69:e1:e9:2f:97:b4:19:12:50:18:56:1e:d9:0c:51:
         24:e7:d8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:52:41 2026 by rpki-client