Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/3138362e3231312e39362e302f32302d3234203d3e203533303632.roa
File:                     3138362e3231312e39362e302f32302d3234203d3e203533303632.roa (raw, json)
Hash identifier:          b2tOfnfCJh4+Nnzn7t+3oBE2x2UUI0lLTmlh9nAVUGQ=
Subject key identifier:   A9:8E:03:D2:07:5C:15:48:50:C5:6F:20:7E:69:1B:B0:FB:06:26:2E
Certificate issuer:       /CN=1063B5203A1581839E177D89B6F58F1744A1E5D8
Certificate serial:       78B6FDC1C5FB9F68F15E3D8B62D5A68915225C9C
Authority key identifier: 10:63:B5:20:3A:15:81:83:9E:17:7D:89:B6:F5:8F:17:44:A1:E5:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1063B5203A1581839E177D89B6F58F1744A1E5D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/3138362e3231312e39362e302f32302d3234203d3e203533303632.roa
Signing time:             Thu 17 Sep 2026 00:23:09 +0000
ROA not before:           Thu 17 Sep 2026 00:18:09 +0000
ROA not after:            Thu 16 Sep 2027 00:23:09 +0000
asID:                     53062
IP address blocks:        186.211.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/1063B5203A1581839E177D89B6F58F1744A1E5D8.crl
                          rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/1063B5203A1581839E177D89B6F58F1744A1E5D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1063B5203A1581839E177D89B6F58F1744A1E5D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 22:51:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:b6:fd:c1:c5:fb:9f:68:f1:5e:3d:8b:62:d5:a6:89:15:22:5c:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1063B5203A1581839E177D89B6F58F1744A1E5D8
        Validity
            Not Before: Sep 17 00:18:09 2026 GMT
            Not After : Sep 16 00:23:09 2027 GMT
        Subject: CN=A98E03D2075C154850C56F207E691BB0FB06262E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:54:3f:b0:e6:c9:14:c4:f8:3c:29:86:ae:61:
                    1b:24:0c:42:57:2e:21:55:60:ac:e2:b6:89:82:1f:
                    c7:f8:ac:fc:1d:d1:5b:79:aa:82:64:a1:0f:b4:d6:
                    ae:43:64:00:f2:e4:8c:da:5b:fe:14:ef:70:a7:70:
                    2d:cb:f4:e1:db:8e:67:1c:f4:df:27:95:0a:30:cb:
                    32:f4:89:cb:27:a5:7f:b3:03:50:11:bb:f9:db:63:
                    4d:1b:bf:90:39:7b:59:dd:8c:b5:3f:93:f5:20:85:
                    79:84:11:1f:25:54:06:67:8d:65:6f:63:b8:99:ef:
                    51:16:48:6d:f4:4a:40:32:a6:64:f2:15:96:d5:4d:
                    d8:7f:bf:01:e5:b1:91:16:73:61:4e:c3:32:bf:7a:
                    24:6b:67:6d:5a:39:18:0d:95:18:0a:a3:52:71:3b:
                    05:d5:da:54:94:c3:1d:64:df:84:ec:dc:a4:46:38:
                    b4:ba:59:1b:1a:c8:56:64:a5:0c:8c:92:2c:20:05:
                    06:7f:d0:b4:50:e1:59:a4:58:d6:19:d9:1f:2b:48:
                    89:d2:83:41:20:f9:1f:8a:92:59:29:9b:ea:21:e7:
                    4c:91:7b:b6:d6:72:6c:f0:7c:dc:de:21:81:8b:b5:
                    ee:ce:9d:f1:f2:90:07:22:f0:a6:e0:3e:b1:24:a4:
                    9b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:8E:03:D2:07:5C:15:48:50:C5:6F:20:7E:69:1B:B0:FB:06:26:2E
            X509v3 Authority Key Identifier:
                keyid:10:63:B5:20:3A:15:81:83:9E:17:7D:89:B6:F5:8F:17:44:A1:E5:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/1063B5203A1581839E177D89B6F58F1744A1E5D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1063B5203A1581839E177D89B6F58F1744A1E5D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/3138362e3231312e39362e302f32302d3234203d3e203533303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.211.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         10:f4:51:c9:ef:a7:c8:43:de:43:7d:a5:56:be:a1:63:7f:b7:
         f8:36:a7:44:b7:61:90:c8:99:02:3a:4d:b1:8b:c6:6b:d6:91:
         fb:e4:a8:c4:f7:20:26:df:d8:fe:00:84:e1:8e:16:f5:1d:84:
         65:fd:ed:78:11:fd:e9:52:25:72:eb:fc:c6:4d:c0:28:bc:a6:
         8f:bd:ec:59:0f:ad:28:f5:5a:7b:fa:14:bb:2b:05:3e:3b:db:
         0c:d8:f0:3a:35:61:da:ca:cf:7d:45:53:28:db:e1:d4:6e:da:
         ea:13:5d:4f:b7:a3:85:d7:25:29:98:c5:72:71:61:06:c6:13:
         ae:64:9c:22:4a:fc:26:09:e9:12:dd:a8:b3:49:08:44:1d:bc:
         1a:d6:32:c3:02:47:4d:68:a2:b2:c6:35:80:76:17:ef:6f:aa:
         fb:c8:ad:d7:41:6d:ff:62:7c:58:05:3d:e5:22:4b:28:0b:16:
         e5:e2:be:cf:66:f9:0d:24:ba:51:8b:c4:6e:f1:42:b4:9c:83:
         9e:86:f7:ed:b5:3b:4a:ed:ac:5e:18:f5:4d:ea:8a:be:1a:96:
         a6:86:83:80:0b:15:04:bd:a0:ee:ef:be:87:d9:17:01:85:a0:
         8a:53:23:3c:0e:58:dd:40:b2:37:32:9f:11:ef:56:31:f7:54:
         84:9a:78:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 09:26:08 2026 by rpki-client