Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuVMKttxg1WPDB4yxqepxLEyVMBPzZqMcPYPuqWK7zMe/0/3136382e3233322e382e302f32322d3234203d3e20323634393331.roa
File:                     3136382e3233322e382e302f32322d3234203d3e20323634393331.roa (raw, json)
Hash identifier:          Yso0B2paNbSIik7timH8s53fHHE5c5nXAPSqFJ2U7ik=
Subject key identifier:   F2:D4:6D:70:BF:A3:C4:BD:89:95:C2:FE:01:19:30:21:47:75:B6:E4
Certificate issuer:       /CN=426EFD46988248FDEE178BB94A8C8EBD2B95293D
Certificate serial:       591F5C919E28BC3B58458A05F67EA66F9D3E9CB5
Authority key identifier: 42:6E:FD:46:98:82:48:FD:EE:17:8B:B9:4A:8C:8E:BD:2B:95:29:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/426EFD46988248FDEE178BB94A8C8EBD2B95293D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuVMKttxg1WPDB4yxqepxLEyVMBPzZqMcPYPuqWK7zMe/0/3136382e3233322e382e302f32322d3234203d3e20323634393331.roa
Signing time:             Mon 20 Jul 2026 18:07:19 +0000
ROA not before:           Mon 20 Jul 2026 18:02:19 +0000
ROA not after:            Mon 19 Jul 2027 18:07:19 +0000
asID:                     264931
IP address blocks:        168.232.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuVMKttxg1WPDB4yxqepxLEyVMBPzZqMcPYPuqWK7zMe/0/426EFD46988248FDEE178BB94A8C8EBD2B95293D.crl
                          rsync://rpki-repo.registro.br/repo/HuVMKttxg1WPDB4yxqepxLEyVMBPzZqMcPYPuqWK7zMe/0/426EFD46988248FDEE178BB94A8C8EBD2B95293D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/426EFD46988248FDEE178BB94A8C8EBD2B95293D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 13:12:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:1f:5c:91:9e:28:bc:3b:58:45:8a:05:f6:7e:a6:6f:9d:3e:9c:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=426EFD46988248FDEE178BB94A8C8EBD2B95293D
        Validity
            Not Before: Jul 20 18:02:19 2026 GMT
            Not After : Jul 19 18:07:19 2027 GMT
        Subject: CN=F2D46D70BFA3C4BD8995C2FE011930214775B6E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4d:11:83:38:1e:a7:48:aa:c3:13:ce:3a:a5:
                    dc:d6:d8:04:ed:50:67:a6:3e:58:35:67:e3:82:5f:
                    a4:d8:65:90:7e:b1:7f:a2:47:65:c5:7c:7a:95:92:
                    d1:24:49:73:d5:72:e3:43:81:00:65:e9:27:f8:1d:
                    d8:55:c6:70:d2:42:42:3c:bd:33:01:31:5e:ed:0e:
                    01:c1:07:38:8e:79:e3:61:7b:4f:64:42:d7:65:f3:
                    35:0c:6a:03:6d:f4:82:e2:7f:2c:3f:7b:bd:b4:ff:
                    3a:5f:ff:2b:22:e6:52:9c:4b:eb:72:71:ae:e1:9f:
                    0f:7d:0d:a6:ca:1d:d0:ec:0f:32:bf:ea:55:e9:ab:
                    f1:fa:13:e6:65:13:53:10:4a:ec:14:bf:9f:e2:50:
                    0b:ec:5c:1e:42:e8:a0:ac:c4:3e:e1:d3:74:5b:30:
                    8f:76:49:00:20:79:01:d7:6d:8e:00:8d:0e:36:d7:
                    8e:62:73:d9:7c:35:4b:47:71:c9:23:76:05:b3:35:
                    60:e9:4f:98:ab:8b:21:4b:93:02:6e:90:6a:31:00:
                    9a:e9:14:52:e6:f1:82:50:ee:bc:cd:fa:2f:ad:5f:
                    7b:c5:14:b1:5b:17:8e:50:3f:f1:23:0e:da:24:ce:
                    d5:d2:37:97:61:c3:82:c0:ce:b5:60:70:47:a5:3a:
                    36:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:D4:6D:70:BF:A3:C4:BD:89:95:C2:FE:01:19:30:21:47:75:B6:E4
            X509v3 Authority Key Identifier:
                keyid:42:6E:FD:46:98:82:48:FD:EE:17:8B:B9:4A:8C:8E:BD:2B:95:29:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuVMKttxg1WPDB4yxqepxLEyVMBPzZqMcPYPuqWK7zMe/0/426EFD46988248FDEE178BB94A8C8EBD2B95293D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/426EFD46988248FDEE178BB94A8C8EBD2B95293D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuVMKttxg1WPDB4yxqepxLEyVMBPzZqMcPYPuqWK7zMe/0/3136382e3233322e382e302f32322d3234203d3e20323634393331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:d2:53:b1:f7:0c:b0:d0:09:77:9e:6a:53:71:7b:22:98:dc:
         f1:43:58:02:41:be:ed:94:78:ba:f2:45:a4:32:a6:ee:1b:40:
         80:95:49:bb:48:b9:64:c2:cf:ce:d1:1b:67:78:dc:00:6c:4c:
         45:c8:b5:1f:3a:3e:de:ba:4a:09:b4:a7:cb:6d:f7:b4:dd:6b:
         e4:6a:e9:82:ff:bf:86:7f:c2:8a:22:50:cb:95:d0:ea:83:9d:
         91:d9:fa:65:eb:55:13:7b:99:57:70:f0:65:e7:42:d5:fe:bd:
         93:35:0b:2c:ca:ce:86:75:91:cb:d3:10:7d:52:ae:7e:46:00:
         41:17:06:12:3a:9a:54:34:c3:51:99:22:f0:5a:9c:b4:88:de:
         d2:ca:36:da:53:83:b1:ff:a0:e0:27:a8:c4:61:fa:ac:77:ee:
         f8:bd:19:3c:10:4f:91:c1:2b:80:74:27:17:28:e3:bd:69:69:
         3b:f8:4c:2e:29:fd:c2:8b:97:24:d0:c8:dd:1e:63:47:18:b5:
         02:a6:b3:c6:5b:93:5d:ec:29:11:23:fe:9d:07:a0:20:5e:50:
         f6:87:4d:74:d4:17:b4:ab:76:cd:d7:bf:04:0e:ad:e3:8c:2b:
         26:30:55:22:be:7a:a9:26:62:18:3c:80:df:34:8d:ca:ee:2a:
         79:2b:f6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:54:33 2026 by rpki-client