Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/3136382e3139342e3235312e302f32342d3234203d3e20323639333539.roa
File:                     3136382e3139342e3235312e302f32342d3234203d3e20323639333539.roa (raw, json)
Hash identifier:          7T0713hKA1J/7ysEd8qOSNTYoj8AjmAWFUu1Za53YQw=
Subject key identifier:   AE:AD:AF:CA:2F:91:36:09:68:A4:ED:DE:8E:FA:5B:3E:BA:33:F0:6C
Certificate issuer:       /CN=BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63
Certificate serial:       55EA0A39F467A18FEADB4F6BDB0F89317ED46C9F
Authority key identifier: BC:F9:27:3F:C3:E8:3E:CF:7C:4B:19:36:A3:28:D3:DF:02:51:AC:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/3136382e3139342e3235312e302f32342d3234203d3e20323639333539.roa
Signing time:             Thu 03 Sep 2026 18:50:32 +0000
ROA not before:           Thu 03 Sep 2026 18:45:32 +0000
ROA not after:            Thu 02 Sep 2027 18:50:32 +0000
asID:                     269359
IP address blocks:        168.194.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.crl
                          rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 19:31:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:ea:0a:39:f4:67:a1:8f:ea:db:4f:6b:db:0f:89:31:7e:d4:6c:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63
        Validity
            Not Before: Sep  3 18:45:32 2026 GMT
            Not After : Sep  2 18:50:32 2027 GMT
        Subject: CN=AEADAFCA2F91360968A4EDDE8EFA5B3EBA33F06C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4b:4b:9c:c7:e3:4b:9a:df:20:b1:73:46:4f:
                    d8:90:7b:7d:87:5b:5e:67:bf:b5:54:13:74:c3:64:
                    8a:ff:4d:52:02:f6:df:6d:84:21:67:44:bc:a8:47:
                    76:15:76:a9:ae:ad:12:a9:44:0e:f5:15:00:51:52:
                    2a:d2:21:b0:3e:8b:21:51:15:9b:91:a5:7f:0b:b9:
                    2e:98:51:dc:9c:bb:9a:38:9c:f4:e7:c8:de:a5:03:
                    80:bc:e5:80:70:1d:e7:bc:90:b5:61:03:8f:69:09:
                    7a:23:e8:ab:48:af:e3:8d:97:c3:44:e9:9f:eb:c8:
                    4c:ef:f2:e0:d9:22:87:ff:11:bc:5b:35:b1:a0:9b:
                    a0:96:94:51:76:0a:35:72:22:0c:73:a2:68:c8:e1:
                    b5:2f:70:24:ca:8d:5c:34:f5:c0:b5:e4:e3:aa:6d:
                    ca:e1:ef:7f:46:9d:07:80:43:b5:53:cf:f9:a0:44:
                    63:f4:aa:48:ff:ff:b3:de:d1:1b:42:db:c9:f6:1f:
                    0d:fa:3b:e4:fc:3d:0e:53:3d:48:32:72:4d:34:7c:
                    ac:82:3e:11:24:3c:8c:1d:4d:ed:c8:8d:ae:16:93:
                    de:bf:e7:c3:15:58:0b:f1:5e:76:3e:24:f3:d6:1f:
                    6d:0d:d7:cc:f4:d4:36:93:ca:06:11:d5:b3:15:09:
                    25:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:AD:AF:CA:2F:91:36:09:68:A4:ED:DE:8E:FA:5B:3E:BA:33:F0:6C
            X509v3 Authority Key Identifier:
                keyid:BC:F9:27:3F:C3:E8:3E:CF:7C:4B:19:36:A3:28:D3:DF:02:51:AC:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/3136382e3139342e3235312e302f32342d3234203d3e20323639333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:04:ae:49:ab:79:e9:03:c7:2a:81:0c:7b:b8:ed:dc:f2:ef:
         90:97:6d:50:d5:0e:7a:bb:de:de:d1:70:21:e9:3a:7d:ed:c5:
         0e:59:f5:a2:a6:5c:63:2d:5f:7d:8d:e6:92:1f:fd:1b:d4:f3:
         34:69:e1:fd:06:a8:75:b5:d0:fb:1a:e2:55:94:23:02:4d:2e:
         fb:c5:04:4d:40:1b:85:d5:98:a4:10:50:fa:db:f2:51:17:7b:
         86:81:3d:33:66:00:9f:ab:d7:e8:6f:64:9a:2f:9b:96:6a:e3:
         b2:27:7e:56:9c:10:df:41:1e:ed:90:12:9c:e5:56:5c:86:52:
         eb:d9:07:ae:11:de:de:73:a9:79:42:1c:47:2f:d0:08:d6:c4:
         7b:bf:e8:d4:1c:75:d4:94:ad:f7:85:f0:ce:f7:59:3b:37:25:
         bd:ab:94:de:2a:34:6a:63:5b:70:ab:18:8b:82:94:34:93:66:
         10:c7:d7:23:77:48:69:d7:43:50:8a:5a:7b:25:df:a0:04:43:
         fe:06:05:f0:b2:e7:0c:8a:12:b0:0d:99:83:33:0b:d5:5d:6f:
         e0:f0:cf:1b:28:02:d8:f2:ef:fb:3f:c5:e5:31:59:4a:83:05:
         fb:32:bc:ea:12:49:3e:17:6a:61:e3:10:64:27:c4:8e:98:9f:
         6b:73:ac:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 05:11:34 2026 by rpki-client