Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/2/3136382e3233322e3230302e302f32322d3332203d3e20323634393534.roa
File:                     3136382e3233322e3230302e302f32322d3332203d3e20323634393534.roa (raw, json)
Hash identifier:          7T2oJl9Qffsjj8tqpMOuo7P0OfKrG8pyqSKmLvytiXk=
Subject key identifier:   A9:CC:B7:54:9B:B5:78:8E:DD:CB:28:1F:96:3D:72:98:42:D8:70:46
Certificate issuer:       /CN=E0DFF758D8C76FC45D57B13F7B2C4DC505E8A264
Certificate serial:       3A18B4B3BEB17E9C03E690B7C7AC50DB3E75197D
Authority key identifier: E0:DF:F7:58:D8:C7:6F:C4:5D:57:B1:3F:7B:2C:4D:C5:05:E8:A2:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0DFF758D8C76FC45D57B13F7B2C4DC505E8A264.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/2/3136382e3233322e3230302e302f32322d3332203d3e20323634393534.roa
Signing time:             Wed 26 Aug 2026 20:38:50 +0000
ROA not before:           Wed 26 Aug 2026 20:33:50 +0000
ROA not after:            Wed 25 Aug 2027 20:38:50 +0000
asID:                     264954
IP address blocks:        168.232.200.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/2/E0DFF758D8C76FC45D57B13F7B2C4DC505E8A264.crl
                          rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/2/E0DFF758D8C76FC45D57B13F7B2C4DC505E8A264.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0DFF758D8C76FC45D57B13F7B2C4DC505E8A264.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 07:28:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:18:b4:b3:be:b1:7e:9c:03:e6:90:b7:c7:ac:50:db:3e:75:19:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0DFF758D8C76FC45D57B13F7B2C4DC505E8A264
        Validity
            Not Before: Aug 26 20:33:50 2026 GMT
            Not After : Aug 25 20:38:50 2027 GMT
        Subject: CN=A9CCB7549BB5788EDDCB281F963D729842D87046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a6:50:52:2f:86:7e:01:1b:97:95:b1:44:b8:
                    67:12:39:4d:c1:08:1e:33:85:60:c2:14:b0:7f:55:
                    48:ac:2f:4e:2e:8e:54:a1:c5:a0:b3:c5:04:ff:38:
                    23:48:51:8a:ed:aa:b2:c2:bb:6f:60:99:2b:9d:78:
                    d0:7c:c4:e5:d9:de:91:e4:26:6d:99:62:eb:86:1f:
                    a9:08:10:c5:0c:23:99:6e:ba:34:ac:70:79:d6:1c:
                    2c:4b:e0:2c:80:37:b8:dd:c8:8f:14:4d:7c:05:49:
                    97:c3:aa:2f:dd:1b:7e:5f:2a:55:dc:c2:8a:a4:eb:
                    63:e5:c3:40:15:36:63:ac:09:23:b7:2d:b8:46:a7:
                    17:d8:b0:a1:81:54:12:24:0f:93:be:5a:82:dc:8a:
                    e2:f4:38:ba:92:6e:a8:1d:cb:36:55:83:0a:8c:f1:
                    ff:84:85:cc:7e:88:d6:8b:1c:e6:6f:79:72:35:e7:
                    01:76:b4:35:e7:56:9a:77:a9:9f:a9:a7:db:b4:96:
                    1a:bd:84:99:b2:a3:e0:19:7c:f8:6a:26:b8:8f:15:
                    af:c7:c6:ea:0f:cc:91:10:ff:cb:84:58:94:62:6f:
                    7a:8c:a9:f0:d9:21:1c:9e:9f:7c:cb:38:c2:f6:bc:
                    90:d8:bf:eb:09:62:b1:b4:8a:9a:ed:18:b8:a0:6a:
                    89:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:CC:B7:54:9B:B5:78:8E:DD:CB:28:1F:96:3D:72:98:42:D8:70:46
            X509v3 Authority Key Identifier:
                keyid:E0:DF:F7:58:D8:C7:6F:C4:5D:57:B1:3F:7B:2C:4D:C5:05:E8:A2:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/2/E0DFF758D8C76FC45D57B13F7B2C4DC505E8A264.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0DFF758D8C76FC45D57B13F7B2C4DC505E8A264.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/2/3136382e3233322e3230302e302f32322d3332203d3e20323634393534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:77:91:2b:eb:dd:8c:33:e2:4a:77:c8:6a:d3:83:71:29:ce:
         89:bd:fd:d6:09:71:d6:ed:7a:f7:d7:40:64:2f:d3:51:12:ac:
         9e:56:67:dd:b1:64:84:aa:c6:37:08:a6:88:d2:55:c2:a9:9e:
         54:1f:02:64:92:5e:b1:9e:42:51:fb:4e:57:87:37:96:b6:17:
         02:7d:f3:f8:46:99:51:cf:75:21:6e:a5:ed:dd:3c:a6:7a:86:
         0c:71:c5:46:bc:52:b6:d5:e6:53:6b:dc:47:d6:a4:d3:2a:84:
         eb:c1:bf:51:b5:91:64:98:fc:fa:16:9b:be:fc:93:36:d6:a8:
         e3:ef:71:84:a6:6d:ef:51:9a:95:da:9f:eb:b8:83:23:0f:3e:
         46:ff:97:c3:bd:31:3d:5b:12:b4:02:a7:56:15:54:5a:c0:67:
         51:b5:f7:1c:d4:05:b6:37:ed:f8:a7:f9:21:b5:ab:cd:95:38:
         9f:02:e2:89:5b:6d:11:93:25:b3:47:bb:a3:f3:6a:c0:89:ee:
         15:e9:fb:ac:10:3f:63:0f:1f:e2:ee:74:03:9c:98:65:71:4b:
         f6:0f:14:2c:ca:c6:16:b9:e3:fd:6c:d2:21:f5:0a:16:3d:5d:
         75:00:76:8f:b1:77:f0:2e:a2:62:b0:4f:8d:02:2a:62:1d:33:
         3b:76:4c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 16:28:16 2026 by rpki-client