Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5ayJTmdpMcycQEuVqeEZ5ufF1ikeKFqUMScWPsxMzf3e/0/3136372e3235302e32382e302f32322d3234203d3e20323635313938.roa
File:                     3136372e3235302e32382e302f32322d3234203d3e20323635313938.roa (raw, json)
Hash identifier:          nAalitJ5E2bxy/wCi0FQlPcSBncrq6P+VguJAhn7zYU=
Subject key identifier:   BF:B1:AB:7C:A8:89:A0:59:07:29:A3:49:86:D8:17:55:80:1A:D7:96
Certificate issuer:       /CN=08B96662A0C7D84FF28CAF0BBAC15478F1C89C04
Certificate serial:       479D85DA0B8825C8C2697301033F4EEA7B732D8B
Authority key identifier: 08:B9:66:62:A0:C7:D8:4F:F2:8C:AF:0B:BA:C1:54:78:F1:C8:9C:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B96662A0C7D84FF28CAF0BBAC15478F1C89C04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ayJTmdpMcycQEuVqeEZ5ufF1ikeKFqUMScWPsxMzf3e/0/3136372e3235302e32382e302f32322d3234203d3e20323635313938.roa
Signing time:             Mon 17 Aug 2026 17:02:57 +0000
ROA not before:           Mon 17 Aug 2026 16:57:57 +0000
ROA not after:            Mon 16 Aug 2027 17:02:57 +0000
asID:                     265198
IP address blocks:        167.250.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ayJTmdpMcycQEuVqeEZ5ufF1ikeKFqUMScWPsxMzf3e/0/08B96662A0C7D84FF28CAF0BBAC15478F1C89C04.crl
                          rsync://rpki-repo.registro.br/repo/5ayJTmdpMcycQEuVqeEZ5ufF1ikeKFqUMScWPsxMzf3e/0/08B96662A0C7D84FF28CAF0BBAC15478F1C89C04.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B96662A0C7D84FF28CAF0BBAC15478F1C89C04.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 20:39:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:9d:85:da:0b:88:25:c8:c2:69:73:01:03:3f:4e:ea:7b:73:2d:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08B96662A0C7D84FF28CAF0BBAC15478F1C89C04
        Validity
            Not Before: Aug 17 16:57:57 2026 GMT
            Not After : Aug 16 17:02:57 2027 GMT
        Subject: CN=BFB1AB7CA889A0590729A34986D81755801AD796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:70:4e:c3:1e:40:ad:da:93:b8:98:dd:55:fe:
                    4e:6a:d4:54:24:a4:46:aa:fc:61:2a:b0:b9:61:30:
                    5c:94:ff:e1:81:38:df:da:52:7a:a8:c1:e9:f4:93:
                    96:e5:06:d2:97:cb:58:b4:ac:fe:67:b6:8c:b6:63:
                    a9:e9:e3:8d:da:ab:19:3d:ac:23:65:97:a1:33:d1:
                    0d:76:a7:49:07:50:3d:0a:cb:a9:63:d3:1a:c4:85:
                    e8:98:a2:c0:11:1b:de:f1:26:0a:22:22:f2:61:a7:
                    6b:a5:e6:3a:cf:ea:f7:c0:11:3a:d0:b2:6f:23:20:
                    a7:0e:b1:97:3e:0c:ee:00:03:67:02:8d:37:17:48:
                    ec:2e:42:e3:da:69:2c:61:4f:d7:bf:2a:07:b2:61:
                    8d:ef:35:80:af:8e:87:37:14:e0:d8:a6:2a:87:53:
                    b9:ff:b1:1a:f3:2a:1d:31:f1:ab:ec:37:90:5e:07:
                    01:af:b7:04:92:59:77:b4:1f:6c:f3:38:37:aa:5c:
                    85:c1:65:10:f1:42:7e:50:92:e2:ab:0b:40:92:91:
                    b1:0c:1d:ce:b1:a4:84:f7:e9:45:e3:b7:1f:30:7e:
                    33:50:32:f6:f7:aa:50:0f:03:c0:eb:18:82:8b:3d:
                    25:2e:26:c3:ab:6e:fc:f7:b1:18:9a:05:17:83:5f:
                    a9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B1:AB:7C:A8:89:A0:59:07:29:A3:49:86:D8:17:55:80:1A:D7:96
            X509v3 Authority Key Identifier:
                keyid:08:B9:66:62:A0:C7:D8:4F:F2:8C:AF:0B:BA:C1:54:78:F1:C8:9C:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ayJTmdpMcycQEuVqeEZ5ufF1ikeKFqUMScWPsxMzf3e/0/08B96662A0C7D84FF28CAF0BBAC15478F1C89C04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B96662A0C7D84FF28CAF0BBAC15478F1C89C04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ayJTmdpMcycQEuVqeEZ5ufF1ikeKFqUMScWPsxMzf3e/0/3136372e3235302e32382e302f32322d3234203d3e20323635313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:6a:33:10:a1:0b:4c:45:da:bf:52:ee:98:0d:1d:3e:2a:43:
         d6:7a:36:0e:e4:eb:a8:85:10:7d:c5:94:10:08:da:5d:43:a1:
         b9:54:b8:0b:c3:bb:7a:2e:1b:90:49:64:fd:9c:5e:6f:1c:62:
         a7:f4:20:49:bf:5b:dc:63:cf:eb:48:f6:7a:ce:cc:72:2d:73:
         fc:77:90:b2:00:b3:e0:c6:9f:d6:5a:bd:0b:bc:56:1d:c5:93:
         a5:a2:80:90:73:83:1d:70:fc:b8:9a:54:56:0e:2b:61:16:d4:
         77:d5:fc:b6:9a:ad:52:a0:13:48:04:de:cc:71:e9:d0:05:26:
         10:16:ee:de:5b:03:d4:a4:a9:a8:d2:9d:7e:3d:2d:73:c0:0d:
         1f:d3:5a:97:df:52:40:b5:4a:8c:14:27:d8:70:83:83:4d:71:
         f3:97:6e:a0:63:ce:4f:24:5e:32:07:b5:66:63:bc:b3:0f:e1:
         cb:7f:80:eb:ed:82:32:93:dc:6d:f2:59:5b:01:aa:b4:68:8a:
         da:fb:e7:8b:4e:3f:8b:14:88:bb:3e:50:4d:c2:a7:06:3c:6a:
         04:67:b8:6b:63:51:d2:7b:a7:90:f1:eb:6d:6c:f7:05:55:05:
         96:9b:5f:43:54:3a:d7:a6:65:68:f6:81:42:5e:1b:4c:6a:1e:
         d8:ce:8f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:54:29 2026 by rpki-client