Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e39372e302f32342d3234203d3e20323633333439.roa
File:                     3138392e35312e39372e302f32342d3234203d3e20323633333439.roa (raw, json)
Hash identifier:          XZ+96O3fH2vSxWfvNjD25l6JYJWnkqjTc4tq8hBYq7Y=
Subject key identifier:   E1:82:FA:F7:A4:AA:8D:0C:82:68:A0:FC:AC:2C:5C:4D:A3:47:26:FF
Certificate issuer:       /CN=FFA68D377DD670E18ECE3E12AA656C6280B2D0C3
Certificate serial:       0263603B09C707E97339BE25774484CF3E55953B
Authority key identifier: FF:A6:8D:37:7D:D6:70:E1:8E:CE:3E:12:AA:65:6C:62:80:B2:D0:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e39372e302f32342d3234203d3e20323633333439.roa
Signing time:             Wed 23 Sep 2026 01:05:09 +0000
ROA not before:           Wed 23 Sep 2026 01:00:09 +0000
ROA not after:            Wed 22 Sep 2027 01:05:09 +0000
asID:                     263349
IP address blocks:        189.51.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.crl
                          rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 23:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:63:60:3b:09:c7:07:e9:73:39:be:25:77:44:84:cf:3e:55:95:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFA68D377DD670E18ECE3E12AA656C6280B2D0C3
        Validity
            Not Before: Sep 23 01:00:09 2026 GMT
            Not After : Sep 22 01:05:09 2027 GMT
        Subject: CN=E182FAF7A4AA8D0C8268A0FCAC2C5C4DA34726FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:34:c8:14:3a:a6:cd:e1:93:12:72:9f:6c:4e:
                    1c:eb:15:ea:83:69:d5:88:6a:96:9a:2e:ed:9f:91:
                    52:3b:b1:b0:83:77:4e:9b:80:61:71:e4:09:ae:4e:
                    18:41:7c:80:1e:5e:c9:40:2e:4d:0f:03:98:b7:ac:
                    1f:8e:fa:24:f2:ba:81:72:48:ca:0a:77:cd:13:fe:
                    e5:0d:3f:eb:bc:79:a5:aa:b6:13:68:bb:03:c4:19:
                    cc:a0:96:ac:0d:52:59:e3:ec:ac:c5:1d:f6:2a:1d:
                    38:6d:22:b8:bb:58:5b:71:28:aa:15:f7:60:54:79:
                    5d:bb:f9:a9:c4:2e:99:cd:21:02:36:48:54:5b:fe:
                    3c:8c:13:ca:c4:96:6d:d8:cc:b5:b0:44:9d:a6:cf:
                    41:bf:65:02:29:8e:37:df:df:8b:20:4b:57:21:83:
                    12:3e:6c:10:73:62:7e:e5:5f:b1:8f:90:bb:40:6b:
                    d2:9a:8d:34:2f:2a:be:07:77:0c:f8:47:40:f1:2a:
                    e8:4c:c1:b9:12:b5:0a:25:ed:c4:b7:1d:75:c5:43:
                    3a:24:dd:4f:9d:e7:32:1d:f3:10:24:20:17:a3:a5:
                    b6:e8:55:36:83:39:c7:a0:bf:10:54:49:1c:43:70:
                    a8:fd:4f:ef:5d:6e:49:c2:88:0b:45:66:6c:19:17:
                    04:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:82:FA:F7:A4:AA:8D:0C:82:68:A0:FC:AC:2C:5C:4D:A3:47:26:FF
            X509v3 Authority Key Identifier:
                keyid:FF:A6:8D:37:7D:D6:70:E1:8E:CE:3E:12:AA:65:6C:62:80:B2:D0:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e39372e302f32342d3234203d3e20323633333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:34:ac:be:e2:47:7e:b7:87:d4:d3:7a:0c:49:81:5a:7d:8d:
         c0:e4:25:c8:d7:b8:81:0d:65:8d:18:42:bb:a6:cd:1d:c6:b7:
         e3:d7:0e:1a:bb:f4:dd:2f:5c:29:4e:65:be:b8:cc:fa:d4:55:
         01:c8:25:0f:50:21:45:ae:0e:df:0f:79:6f:ed:58:ce:fb:b2:
         7e:bf:59:26:73:c6:22:52:76:0d:4d:99:de:5e:9b:ad:a2:61:
         67:7c:b9:0f:09:c2:25:ae:de:0a:4e:0a:6c:67:31:ae:15:a2:
         ff:5b:8a:9c:b2:12:be:a7:dd:ce:c4:dc:21:79:46:c5:bd:db:
         07:0a:06:e2:99:be:b2:f4:5b:63:8b:20:0a:13:e2:46:17:37:
         81:e8:38:58:6a:3e:60:39:5b:36:40:4b:8d:53:cf:04:aa:d6:
         2d:c4:c8:a6:ee:83:31:36:bc:6e:00:d2:f9:9b:e2:02:e7:ba:
         c0:30:49:8f:e0:72:6a:ad:c4:51:ec:7d:2f:ef:4e:b5:13:39:
         83:fe:8d:13:a1:a0:f8:f7:bf:20:fd:60:28:1f:f8:44:b9:0d:
         58:d9:0f:ea:60:fd:24:be:ea:79:e0:8d:58:57:58:2d:89:d8:
         a4:18:4c:dc:54:aa:d8:7b:07:20:8c:8b:6d:65:62:aa:3b:ee:
         91:f9:79:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:21:48 2026 by rpki-client