Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3139342e39362e302f32312d3234203d3e203131393231.roa
File:                     3230302e3139342e39362e302f32312d3234203d3e203131393231.roa (raw, json)
Hash identifier:          pbql74XDULllJVH6yUZI5PSJr0B0/XIdvTSGuTnxCMM=
Subject key identifier:   F5:FE:D9:DD:22:62:20:37:3A:F0:99:E7:06:1D:42:DB:A5:D6:A6:91
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       7EA63B053763C9793CC15894BD6316CE61EA31AB
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3139342e39362e302f32312d3234203d3e203131393231.roa
Signing time:             Tue 25 Aug 2026 19:43:19 +0000
ROA not before:           Tue 25 Aug 2026 19:38:19 +0000
ROA not after:            Tue 24 Aug 2027 19:43:19 +0000
asID:                     11921
IP address blocks:        200.194.96.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl
                          rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 22:25:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:a6:3b:05:37:63:c9:79:3c:c1:58:94:bd:63:16:ce:61:ea:31:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Aug 25 19:38:19 2026 GMT
            Not After : Aug 24 19:43:19 2027 GMT
        Subject: CN=F5FED9DD226220373AF099E7061D42DBA5D6A691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2e:c4:41:87:9d:70:61:ae:84:f7:54:b5:66:
                    b9:ae:e4:87:d4:b5:c5:94:ff:c5:30:88:00:17:00:
                    31:86:9e:90:0d:bd:1f:e5:b7:e7:ac:45:03:be:53:
                    c1:66:f4:c7:a1:d2:8b:02:d7:de:a4:42:38:3f:1b:
                    01:f4:f0:94:e2:5c:6a:e8:68:f3:ce:16:90:11:09:
                    0f:c8:93:4d:0c:86:4c:93:fc:fd:e5:d7:b4:83:95:
                    07:7f:e8:3b:61:69:1f:c9:bd:6c:b2:f3:3d:cf:8a:
                    a7:ed:39:16:a8:51:12:f5:28:36:c4:6b:7e:79:b6:
                    12:5f:c4:28:e5:77:40:fb:ca:cf:b0:93:e3:9d:2b:
                    a0:54:ff:bc:26:52:66:be:15:e9:63:75:39:f9:e3:
                    25:65:e0:11:26:01:9d:a6:07:e7:1c:c2:1d:b6:40:
                    47:88:99:84:a8:ae:b4:ea:1d:70:56:1f:19:e2:79:
                    28:14:fd:0b:f7:5f:6d:5e:31:c5:b7:54:ae:0f:ec:
                    6e:c0:ec:be:ef:ae:3a:43:25:61:e3:4a:86:f2:17:
                    11:f0:3a:30:5f:78:e8:6d:ff:aa:c3:f7:5f:56:f5:
                    91:1d:6f:f1:6b:38:96:e6:9e:50:e9:4a:86:2c:be:
                    f2:d7:cc:e8:13:c1:ec:a4:bc:4f:d4:24:ca:23:54:
                    aa:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:FE:D9:DD:22:62:20:37:3A:F0:99:E7:06:1D:42:DB:A5:D6:A6:91
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3139342e39362e302f32312d3234203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.194.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a1:65:7d:1e:e3:4e:9b:5d:03:3d:8b:d6:64:da:98:72:9c:a2:
         98:c3:ae:a1:c2:e2:81:fb:01:91:02:44:e1:be:74:45:0c:19:
         fe:6c:df:0c:3b:7a:08:05:e8:99:e4:c3:2c:17:b9:d9:09:af:
         3a:61:52:b7:ae:6e:ac:ab:ce:36:34:51:2f:0d:58:97:0b:10:
         74:68:4a:5e:e0:9b:f2:e0:c6:1d:4a:89:16:a7:eb:55:ed:6b:
         a5:12:37:08:f6:b0:03:de:6e:20:2b:e6:00:2a:7a:a6:5d:01:
         12:67:d7:c4:4d:c1:af:b5:87:ae:a2:86:dc:d3:36:25:f6:c7:
         98:a4:0b:96:7e:c5:27:75:40:c7:e2:a2:26:9b:0d:93:96:07:
         12:e8:ab:54:e9:7d:97:9d:49:f3:57:6e:35:5c:cf:d7:db:fc:
         39:c0:4a:24:8d:cb:c3:20:7d:1d:62:9e:eb:7b:09:1b:d3:6d:
         b1:07:60:67:ee:6f:82:ff:e7:3e:8e:a5:2f:ae:b9:59:b4:58:
         05:c4:45:da:19:fa:0f:00:10:6f:3c:7b:9a:60:97:e8:b9:39:
         69:af:f7:6d:e8:1e:94:10:75:03:36:95:d3:b7:ee:c5:fd:44:
         ea:ad:40:bf:9e:35:a7:a3:db:c9:27:ce:65:8f:88:a7:92:db:
         4b:b9:38:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 06:03:25 2026 by rpki-client