Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/3139322e3134312e3135372e302f32342d3234203d3e20323637343639.roa
File:                     3139322e3134312e3135372e302f32342d3234203d3e20323637343639.roa (raw, json)
Hash identifier:          7d13h/NHJYqFQTgJVrii/suctIT9nxNVWj1QNqRpJ0A=
Subject key identifier:   04:E9:33:F5:39:B9:3F:FB:4E:7F:1D:E9:D3:D1:19:72:86:15:79:53
Certificate issuer:       /CN=FAA66A1B59B1FF832D30110F8B4A72F4F10B7139
Certificate serial:       778E31B3A73D59AF055891266DD289C262064D44
Authority key identifier: FA:A6:6A:1B:59:B1:FF:83:2D:30:11:0F:8B:4A:72:F4:F1:0B:71:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/3139322e3134312e3135372e302f32342d3234203d3e20323637343639.roa
Signing time:             Wed 07 Oct 2026 01:36:43 +0000
ROA not before:           Wed 07 Oct 2026 01:31:43 +0000
ROA not after:            Wed 06 Oct 2027 01:36:43 +0000
asID:                     267469
IP address blocks:        192.141.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.crl
                          rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 12:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:8e:31:b3:a7:3d:59:af:05:58:91:26:6d:d2:89:c2:62:06:4d:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAA66A1B59B1FF832D30110F8B4A72F4F10B7139
        Validity
            Not Before: Oct  7 01:31:43 2026 GMT
            Not After : Oct  6 01:36:43 2027 GMT
        Subject: CN=04E933F539B93FFB4E7F1DE9D3D1197286157953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ca:d3:b5:3e:b4:ad:ad:b6:a9:f5:41:8c:cb:
                    ee:55:2b:3f:25:7d:84:e5:22:1e:37:9c:c3:b3:36:
                    f5:92:1d:cb:f7:a6:80:f6:0e:c3:7e:f2:cc:f7:e9:
                    9a:24:cb:af:8a:c2:e5:26:c1:5d:6b:f8:ad:73:4a:
                    99:6b:b4:d0:c3:b3:03:b9:6d:ca:a2:52:66:d2:c5:
                    7f:be:df:ee:69:93:4f:ea:7a:19:9f:95:f0:10:0b:
                    0f:5a:42:ea:e9:4b:e1:d4:c6:62:08:e8:aa:ec:33:
                    c1:6f:91:45:0f:04:ac:22:4a:66:08:31:01:82:9b:
                    4e:07:e1:97:e2:3e:37:ee:40:c8:53:80:1c:09:4c:
                    57:86:25:58:98:c3:46:d5:04:b1:46:93:87:1d:29:
                    03:d8:ff:d1:0c:dc:6b:bd:ec:14:68:6e:cb:97:5b:
                    81:f9:29:50:dc:07:79:06:7e:05:69:a7:03:1e:4b:
                    45:cf:68:d7:2e:db:4e:e5:31:98:f5:20:c8:dc:ad:
                    99:ba:14:03:7b:d8:bb:18:69:27:b9:06:32:77:97:
                    f8:3b:94:e5:af:7d:5c:ec:74:41:c9:70:76:c3:fc:
                    a6:23:e8:b3:26:97:a5:01:55:4d:44:af:28:14:62:
                    9d:cb:fe:96:35:97:a3:1f:7d:ee:5f:2a:d7:18:79:
                    74:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E9:33:F5:39:B9:3F:FB:4E:7F:1D:E9:D3:D1:19:72:86:15:79:53
            X509v3 Authority Key Identifier:
                keyid:FA:A6:6A:1B:59:B1:FF:83:2D:30:11:0F:8B:4A:72:F4:F1:0B:71:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/3139322e3134312e3135372e302f32342d3234203d3e20323637343639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:5b:a1:ea:65:df:21:2e:b3:6d:91:38:2d:10:af:66:80:6e:
         49:8a:09:40:46:b3:78:ee:04:e8:f0:73:6e:ec:01:38:cb:8a:
         26:4f:b8:d3:26:9c:02:2c:cb:b5:64:79:7c:35:af:88:4c:91:
         01:16:99:24:18:99:5a:67:cc:41:1a:3c:fa:de:4d:c4:b3:8f:
         e1:e1:8d:d8:ad:14:5b:0e:9e:4e:f1:e2:50:25:da:f6:7e:15:
         81:73:2f:cb:d1:a7:9b:81:90:74:66:65:d4:a1:df:2a:c6:00:
         04:4c:fc:c2:9d:a4:d8:0e:7e:6a:b5:e4:10:fd:ef:de:56:bd:
         00:91:e5:c1:cc:98:93:1c:04:d9:f5:4f:ce:2f:92:e7:ec:ab:
         5e:b0:2f:15:f6:8c:c9:a5:4a:1a:e1:97:db:43:06:92:cd:3a:
         fc:50:4a:44:e1:82:8d:7b:fe:76:a6:1c:0e:ef:be:40:8c:ff:
         6d:6e:f1:17:37:52:01:04:25:02:fb:d5:da:4d:5e:76:2e:04:
         ad:61:e1:c7:27:cd:ec:9b:b2:32:8e:6e:22:0e:e2:2c:d5:97:
         a7:4f:10:a4:b8:ea:17:c5:79:bf:bb:9b:2f:90:8e:da:de:7a:
         8d:c8:73:8a:31:72:e1:3d:97:f1:fc:d1:3c:2d:6c:f6:be:a9:
         29:6b:f5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 18:11:34 2026 by rpki-client