Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2D2HJ6GCvpSH2xyUiLoCPweN5VsAm11LYHAPk51VHdhH/0/3132382e3230312e3135322e302f32322d3332203d3e20323636363333.roa
File:                     3132382e3230312e3135322e302f32322d3332203d3e20323636363333.roa (raw, json)
Hash identifier:          BCER9vceTLRBuVU5yloigOk/t9Jd9Trd5spEfBbGScY=
Subject key identifier:   8C:2B:7A:B7:3B:15:F8:AE:A3:BA:18:19:66:2E:AC:9C:08:2E:4A:CE
Certificate issuer:       /CN=26BB0A9DEEB1DE27D6B371079F81CABDBCD6B802
Certificate serial:       3A4B38334DB3F6C71790CEB047B2089B4C0E6B4F
Authority key identifier: 26:BB:0A:9D:EE:B1:DE:27:D6:B3:71:07:9F:81:CA:BD:BC:D6:B8:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26BB0A9DEEB1DE27D6B371079F81CABDBCD6B802.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2D2HJ6GCvpSH2xyUiLoCPweN5VsAm11LYHAPk51VHdhH/0/3132382e3230312e3135322e302f32322d3332203d3e20323636363333.roa
Signing time:             Tue 25 Aug 2026 15:34:01 +0000
ROA not before:           Tue 25 Aug 2026 15:29:01 +0000
ROA not after:            Tue 24 Aug 2027 15:34:01 +0000
asID:                     266633
IP address blocks:        128.201.152.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2D2HJ6GCvpSH2xyUiLoCPweN5VsAm11LYHAPk51VHdhH/0/26BB0A9DEEB1DE27D6B371079F81CABDBCD6B802.crl
                          rsync://rpki-repo.registro.br/repo/2D2HJ6GCvpSH2xyUiLoCPweN5VsAm11LYHAPk51VHdhH/0/26BB0A9DEEB1DE27D6B371079F81CABDBCD6B802.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26BB0A9DEEB1DE27D6B371079F81CABDBCD6B802.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 11:29:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:4b:38:33:4d:b3:f6:c7:17:90:ce:b0:47:b2:08:9b:4c:0e:6b:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26BB0A9DEEB1DE27D6B371079F81CABDBCD6B802
        Validity
            Not Before: Aug 25 15:29:01 2026 GMT
            Not After : Aug 24 15:34:01 2027 GMT
        Subject: CN=8C2B7AB73B15F8AEA3BA1819662EAC9C082E4ACE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:45:d1:e0:76:2e:48:f3:03:60:61:6a:f3:5b:
                    24:c7:48:34:05:eb:23:04:74:e3:dc:15:9c:db:81:
                    66:73:7a:64:70:ca:a3:2d:a7:f9:2e:84:c2:91:d2:
                    67:c1:71:50:bb:16:ea:17:39:d2:cc:7b:45:2c:17:
                    de:9a:d7:31:0a:8b:3b:86:60:3e:f4:e2:e3:b1:7d:
                    da:7f:c4:5e:b3:68:81:19:9e:3f:92:2a:a0:5b:fc:
                    e9:1d:be:aa:b6:a9:10:31:87:13:4d:40:fd:dd:88:
                    a8:5e:27:9d:46:5d:27:13:dd:bd:69:4d:9c:36:b0:
                    98:f5:e1:11:18:69:53:89:db:13:e9:fb:5a:4b:18:
                    a1:b8:30:68:55:91:d0:09:c0:32:11:e1:76:5a:1a:
                    6e:73:46:81:b9:6d:41:9d:d7:a6:db:6a:d9:5e:e5:
                    a2:fd:ce:7d:e8:a9:44:1d:2b:db:20:2c:11:7f:51:
                    66:a5:08:ea:65:2b:0f:54:a3:2b:92:4b:f6:9c:07:
                    43:c1:4d:88:d3:75:26:6f:a3:88:7e:f4:a0:b2:54:
                    c2:c4:74:76:60:37:8f:f3:c5:13:2d:08:a8:10:f7:
                    a6:e7:ed:d5:54:f7:9a:8d:8c:4f:a7:c6:64:08:32:
                    ec:cb:de:80:6f:94:2f:44:53:83:e5:71:b5:62:17:
                    3a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:2B:7A:B7:3B:15:F8:AE:A3:BA:18:19:66:2E:AC:9C:08:2E:4A:CE
            X509v3 Authority Key Identifier:
                keyid:26:BB:0A:9D:EE:B1:DE:27:D6:B3:71:07:9F:81:CA:BD:BC:D6:B8:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2D2HJ6GCvpSH2xyUiLoCPweN5VsAm11LYHAPk51VHdhH/0/26BB0A9DEEB1DE27D6B371079F81CABDBCD6B802.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26BB0A9DEEB1DE27D6B371079F81CABDBCD6B802.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2D2HJ6GCvpSH2xyUiLoCPweN5VsAm11LYHAPk51VHdhH/0/3132382e3230312e3135322e302f32322d3332203d3e20323636363333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:57:26:a2:74:1c:20:18:df:60:1e:f4:57:93:49:53:1c:92:
         93:23:a1:62:e6:2d:c5:52:a3:9d:ba:1f:0e:8c:36:ef:85:5e:
         46:45:bf:d9:f1:53:64:aa:86:c5:49:9c:68:77:6f:50:13:06:
         17:ff:43:97:26:39:0f:47:4a:94:fb:bd:33:ea:1a:bb:9f:d4:
         b1:18:bd:15:e5:35:cb:cc:27:fb:2d:4c:f3:3e:c2:1e:ef:74:
         8a:58:db:2c:c3:cb:79:3f:a1:32:70:ae:9f:81:db:e5:88:67:
         d3:ca:5d:e3:44:d4:18:47:35:b4:38:9d:cb:d5:72:e7:66:96:
         9c:6b:d9:eb:fb:5a:2b:c6:ee:99:b8:a4:b2:11:d7:09:2e:bc:
         13:d6:1f:bc:21:02:2a:49:2f:70:c4:55:94:95:2c:27:d2:8a:
         c3:ee:32:35:25:3d:c4:43:74:89:24:bc:fa:4f:6a:a2:60:f3:
         b9:69:00:da:38:89:57:e0:54:36:e9:6b:15:d6:e3:ce:b8:6b:
         93:52:11:37:42:45:b9:e4:61:ae:2d:80:81:13:2c:1a:96:98:
         c8:23:ac:1e:71:59:7e:d8:ec:c9:bf:88:f5:2e:ff:3b:bf:67:
         17:59:e1:0a:7c:d9:38:b4:40:9a:44:19:a1:da:1e:2c:7e:5f:
         12:a8:b7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 16:47:32 2026 by rpki-client