Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3130342e302f32342d3234203d3e20323633333439.roa
File:                     3138392e35312e3130342e302f32342d3234203d3e20323633333439.roa (raw, json)
Hash identifier:          52rHBrsZKM5DPwbyvZKLGtODSBcRpombkAlWfsTTlEw=
Subject key identifier:   A7:8C:6B:32:89:52:40:13:08:27:6B:AE:87:52:4D:04:AF:90:63:4D
Certificate issuer:       /CN=FFA68D377DD670E18ECE3E12AA656C6280B2D0C3
Certificate serial:       254D1CAEEFEAA6CCA2717BC875A5B7B4D7F08399
Authority key identifier: FF:A6:8D:37:7D:D6:70:E1:8E:CE:3E:12:AA:65:6C:62:80:B2:D0:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3130342e302f32342d3234203d3e20323633333439.roa
Signing time:             Wed 23 Sep 2026 01:05:18 +0000
ROA not before:           Wed 23 Sep 2026 01:00:18 +0000
ROA not after:            Wed 22 Sep 2027 01:05:18 +0000
asID:                     263349
IP address blocks:        189.51.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.crl
                          rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 00:12:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:4d:1c:ae:ef:ea:a6:cc:a2:71:7b:c8:75:a5:b7:b4:d7:f0:83:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFA68D377DD670E18ECE3E12AA656C6280B2D0C3
        Validity
            Not Before: Sep 23 01:00:18 2026 GMT
            Not After : Sep 22 01:05:18 2027 GMT
        Subject: CN=A78C6B328952401308276BAE87524D04AF90634D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6f:9c:fb:db:9f:08:5f:aa:f2:5f:99:65:a3:
                    a3:f4:f4:61:89:5a:93:52:6d:71:03:f9:25:b0:c8:
                    dc:1e:a2:43:b3:cc:e1:6e:9e:eb:1c:e4:e7:8f:76:
                    74:b1:25:7a:41:db:91:0e:74:ef:e6:68:df:a1:a3:
                    86:d1:94:12:ea:7b:54:eb:3f:13:51:c4:97:4e:3a:
                    cc:a0:96:c0:b4:88:05:d3:22:94:9d:4c:53:ca:1a:
                    20:6b:27:0c:d1:84:8b:9e:69:f2:61:3f:7e:35:83:
                    f7:4b:fc:da:bd:4e:69:db:b6:5a:04:3c:1c:26:d6:
                    7d:ac:5d:7f:22:8f:fe:44:75:bb:3c:d0:b1:0c:31:
                    ce:8f:4f:07:f1:a5:44:e0:78:f9:a1:b8:0b:66:0a:
                    07:aa:8d:7c:b9:4c:eb:b9:54:cd:f9:e3:91:1f:90:
                    71:16:e5:8b:bb:43:cc:82:fb:13:d3:40:5b:32:85:
                    bb:f4:e7:69:fa:76:dc:18:90:72:89:33:0a:0a:b1:
                    db:73:64:89:be:fc:dc:98:f6:6c:90:3b:4f:59:a8:
                    3b:22:2c:a8:5e:e9:df:92:ae:7b:c4:ac:07:b7:69:
                    5a:33:53:85:0d:6b:c3:cd:8c:09:4a:25:fe:0e:bc:
                    7d:97:3c:3c:a4:4c:0b:3a:1e:c9:d2:5a:83:71:60:
                    37:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:8C:6B:32:89:52:40:13:08:27:6B:AE:87:52:4D:04:AF:90:63:4D
            X509v3 Authority Key Identifier:
                keyid:FF:A6:8D:37:7D:D6:70:E1:8E:CE:3E:12:AA:65:6C:62:80:B2:D0:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3130342e302f32342d3234203d3e20323633333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:35:b6:ae:76:16:31:5c:a2:64:0f:7d:60:25:62:a1:2f:7b:
         01:a2:28:fa:a0:24:93:72:69:e2:89:4e:a6:85:19:90:83:9c:
         17:e3:b5:11:ff:fc:2e:41:66:ef:1f:e4:b4:c3:bd:9a:6d:75:
         a4:60:33:ae:87:1b:4b:1f:e9:07:97:3c:4f:2e:23:8f:5d:e9:
         ef:00:e3:50:72:b7:33:c1:b1:48:36:bb:ef:bb:4a:96:5a:83:
         a1:d4:a2:37:d5:8a:89:29:b3:56:f3:44:9f:02:12:ab:e6:71:
         a3:f3:dc:d5:00:7e:08:61:92:5d:cd:36:06:4e:c4:ce:40:6e:
         33:dc:23:b2:fe:22:3a:d9:98:4b:c7:b7:5c:b1:b3:fc:fc:1f:
         57:6a:eb:72:ef:0b:6a:a5:f6:31:3b:a8:87:7a:89:0e:57:8a:
         a5:3f:2b:00:f4:b1:26:cf:dc:fc:d6:b2:56:8f:d5:b1:f0:d1:
         de:5f:92:99:30:c8:29:c0:7f:41:b4:68:15:24:09:73:8b:ba:
         67:30:5f:2a:9b:20:76:d3:67:4f:4c:fe:8d:fc:67:2f:47:64:
         d4:c6:32:53:51:56:3d:24:fc:aa:e0:17:ba:b2:31:3d:7a:2c:
         71:6f:f5:12:13:67:52:64:44:30:60:87:c0:9f:8c:0c:fe:ef:
         23:5c:f1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 19:02:03 2026 by rpki-client