Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3133362e302f32322d3232203d3e203532363632.roa
File:                     3138392e3131332e3133362e302f32322d3232203d3e203532363632.roa (raw, json)
Hash identifier:          2RFfXRRRoQq3/6w1yLzL65y0JZRtFeUY10j44RQcR2k=
Subject key identifier:   C8:C9:D8:56:41:E7:75:62:11:A4:AD:23:47:E3:2A:AC:1B:37:DE:BD
Certificate issuer:       /CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
Certificate serial:       1D37527DD67C86B1E92AAE3F568BF037C07D26C2
Authority key identifier: C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3133362e302f32322d3232203d3e203532363632.roa
Signing time:             Thu 30 Jul 2026 17:00:27 +0000
ROA not before:           Thu 30 Jul 2026 16:55:27 +0000
ROA not after:            Thu 29 Jul 2027 17:00:27 +0000
asID:                     52662
IP address blocks:        189.113.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl
                          rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 04:05:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:37:52:7d:d6:7c:86:b1:e9:2a:ae:3f:56:8b:f0:37:c0:7d:26:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
        Validity
            Not Before: Jul 30 16:55:27 2026 GMT
            Not After : Jul 29 17:00:27 2027 GMT
        Subject: CN=C8C9D85641E7756211A4AD2347E32AAC1B37DEBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:23:8b:1d:53:49:39:0b:d0:22:e8:25:c8:cd:
                    06:55:9a:f3:6c:10:51:9b:22:9f:f2:78:3e:40:91:
                    9a:ac:a1:28:2d:e4:60:bf:36:43:36:d1:7d:5d:86:
                    96:34:b7:9d:89:a7:1e:ab:86:ac:c7:0d:85:d2:b4:
                    a3:af:5d:85:47:77:4c:b4:62:85:04:0e:aa:f2:61:
                    57:e0:47:36:09:90:8f:c5:c3:e5:87:5c:b2:84:49:
                    d2:06:fe:6d:2f:22:a6:62:53:40:8e:e6:3a:c9:94:
                    da:39:8f:f6:c7:6b:2f:6c:b0:17:9c:92:ff:a6:6b:
                    0d:20:12:ad:09:35:37:7b:0a:91:bc:16:b1:84:2b:
                    94:a0:0a:5b:79:be:8f:e5:fd:a1:f5:4c:bc:1a:92:
                    32:9f:6b:19:9c:18:ed:99:c3:eb:0f:ad:eb:d8:b2:
                    7d:38:56:f0:29:b4:fc:d2:61:aa:75:45:59:ee:c8:
                    9a:8d:06:62:e8:b6:b4:92:5c:dc:45:08:98:d1:74:
                    65:e2:1a:8b:6b:ef:2d:53:fb:4c:dc:8a:50:06:1d:
                    ba:96:84:cf:71:ba:4c:90:42:ae:b4:79:62:ad:66:
                    d3:44:19:93:86:97:78:82:0a:db:3a:fe:39:02:17:
                    16:51:e6:4e:2a:69:8e:de:b2:92:c7:20:24:c1:6f:
                    2e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C9:D8:56:41:E7:75:62:11:A4:AD:23:47:E3:2A:AC:1B:37:DE:BD
            X509v3 Authority Key Identifier:
                keyid:C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3133362e302f32322d3232203d3e203532363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:4c:7c:20:dd:27:32:3b:13:73:ba:17:79:66:f2:d7:c8:cf:
         e0:50:a3:86:68:45:e0:de:f2:78:58:b7:11:e0:f7:60:a9:57:
         56:a3:9d:9c:c1:dd:34:a7:c3:1d:0f:c8:e6:c8:23:ff:d0:68:
         53:cd:af:25:a7:35:73:fd:64:97:c2:a5:0c:15:4d:ff:93:a8:
         33:11:89:ca:46:ca:37:45:05:59:17:91:a2:a6:a7:1f:c3:53:
         81:e8:91:d5:11:5c:65:d3:50:42:1c:b9:de:8f:3c:32:d5:ab:
         ca:a1:d0:21:78:60:07:ff:21:e8:57:0c:24:8a:5a:01:af:e3:
         a5:09:58:eb:7e:08:fe:f1:ba:3f:db:af:43:3d:ce:04:7f:b6:
         5a:a8:f1:61:2c:d9:5f:4d:de:2b:21:0b:94:bb:c6:e3:9f:4b:
         b1:3d:43:c2:70:38:af:c8:b8:6e:d6:40:cb:cf:de:cf:ee:28:
         b5:7d:ff:28:2f:ba:a2:f7:93:c5:bc:66:70:41:1c:5a:a2:dd:
         15:14:49:97:2d:66:af:39:c3:6b:f4:80:ea:2c:5a:00:5f:b6:
         92:a1:5f:fe:6f:18:05:cc:9a:e5:06:bd:85:dc:76:f5:50:f2:
         a2:0f:9c:65:f8:64:1b:bc:5c:45:f8:eb:84:81:64:e9:d2:ad:
         01:44:2e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 15:54:57 2026 by rpki-client