Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/3139322e3134312e3135392e302f32342d3234203d3e20323637343639.roa
File:                     3139322e3134312e3135392e302f32342d3234203d3e20323637343639.roa (raw, json)
Hash identifier:          DP6XnToBnJ7j6oXCtwUouEJHrqMSlg8CeAIQxplnfX4=
Subject key identifier:   18:2E:8F:04:E5:5C:4A:63:20:81:21:A8:76:76:5D:BB:02:13:E0:6A
Certificate issuer:       /CN=FAA66A1B59B1FF832D30110F8B4A72F4F10B7139
Certificate serial:       330840B402726B52BAC8C993A729A522CD3FEE80
Authority key identifier: FA:A6:6A:1B:59:B1:FF:83:2D:30:11:0F:8B:4A:72:F4:F1:0B:71:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/3139322e3134312e3135392e302f32342d3234203d3e20323637343639.roa
Signing time:             Wed 07 Oct 2026 01:36:45 +0000
ROA not before:           Wed 07 Oct 2026 01:31:45 +0000
ROA not after:            Wed 06 Oct 2027 01:36:45 +0000
asID:                     267469
IP address blocks:        192.141.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.crl
                          rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 04:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:08:40:b4:02:72:6b:52:ba:c8:c9:93:a7:29:a5:22:cd:3f:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAA66A1B59B1FF832D30110F8B4A72F4F10B7139
        Validity
            Not Before: Oct  7 01:31:45 2026 GMT
            Not After : Oct  6 01:36:45 2027 GMT
        Subject: CN=182E8F04E55C4A63208121A876765DBB0213E06A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:49:60:47:3e:71:b8:1c:10:b8:71:a1:27:01:
                    08:b2:15:23:1c:4d:8e:84:65:05:4a:f5:15:84:04:
                    9f:40:11:6d:08:eb:6a:1d:21:34:8e:82:3e:9c:47:
                    e8:0e:c0:48:3c:66:69:84:05:8a:97:0b:8e:a1:08:
                    e0:95:59:84:f5:cf:95:36:a7:c4:68:aa:6c:4c:0f:
                    83:d0:57:c6:8a:fe:4e:77:e3:93:a4:bc:da:fe:80:
                    c8:82:d5:96:2d:58:20:76:e0:f5:59:3b:eb:4b:d4:
                    1e:61:60:9a:f9:b5:af:c8:ad:33:ad:71:48:e8:cf:
                    a5:92:e0:d4:c8:4c:9e:ac:97:00:d8:e4:76:53:b1:
                    15:11:dd:23:87:52:e3:38:3e:3f:51:ba:be:a8:f3:
                    2b:45:b2:71:42:80:44:2d:f3:20:2e:88:3f:36:68:
                    ae:fb:5b:4d:83:f3:38:77:a9:7e:50:23:01:db:6a:
                    1f:cb:84:8b:8c:47:0d:93:91:33:4e:0a:9b:69:76:
                    5d:9f:72:d1:30:00:70:45:08:90:dd:d7:16:d9:ab:
                    2b:89:c7:f4:de:6f:3a:c7:e3:3d:ac:9a:d7:fe:0f:
                    8d:95:12:fc:f0:ca:87:0a:6f:d6:7f:56:d1:16:98:
                    80:3b:1e:6b:a3:c7:a3:7f:5a:74:f7:13:2d:5d:c6:
                    65:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:2E:8F:04:E5:5C:4A:63:20:81:21:A8:76:76:5D:BB:02:13:E0:6A
            X509v3 Authority Key Identifier:
                keyid:FA:A6:6A:1B:59:B1:FF:83:2D:30:11:0F:8B:4A:72:F4:F1:0B:71:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/3139322e3134312e3135392e302f32342d3234203d3e20323637343639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:a2:69:6e:11:7f:17:f5:82:72:0a:81:b6:dc:87:94:86:fa:
         53:f3:07:44:f5:77:72:1a:d0:12:19:fa:cc:cd:7e:86:29:b0:
         ba:3c:57:e1:6d:0a:24:bf:bd:24:48:6c:79:b1:d3:9d:f7:af:
         71:c2:f3:9c:c2:ae:23:a9:85:a8:a7:d7:3c:ca:df:75:96:3a:
         b3:3c:4a:b4:2a:79:11:f2:b3:e5:5d:6e:75:bb:3a:14:bd:4a:
         a1:a9:c8:7a:81:2a:c9:e1:9f:e0:90:40:c6:25:24:13:53:73:
         13:15:93:8f:02:26:fe:b0:96:63:24:4c:34:a0:5d:ae:77:d6:
         93:34:62:01:56:d5:a5:9c:03:17:c5:af:9d:32:3e:48:cd:f9:
         ff:5c:79:29:8f:d1:a6:c2:0a:73:9c:bf:a2:06:6f:65:34:f6:
         23:de:d6:ee:de:fb:df:b1:1e:b0:71:0d:32:69:a9:4c:24:af:
         98:4e:46:94:db:c5:dd:6a:05:8c:05:68:e5:78:3e:db:b0:fd:
         fa:fa:c2:ca:68:b3:b0:d2:49:da:d1:c2:ed:54:e0:6f:7c:cd:
         67:84:3d:4f:d5:b0:49:de:96:16:71:f6:b2:27:de:c3:81:1f:
         72:3f:2d:38:f8:4b:0b:3b:21:44:49:ea:7e:22:d2:81:71:a2:
         38:b0:b2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 12:51:04 2026 by rpki-client