Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/0/3136382e3232382e37362e302f32322d3233203d3e20323632383431.roa
File:                     3136382e3232382e37362e302f32322d3233203d3e20323632383431.roa (raw, json)
Hash identifier:          jVp1BZNjXfdjpP+W8LMuDkvSng0SsTluGZFTysak+cA=
Subject key identifier:   96:43:DD:EA:3B:10:36:B7:FD:37:75:3B:07:D4:69:5A:5A:05:5F:68
Certificate issuer:       /CN=AFC9C4F9A8697F1208AC7BC2BEDC121D57DCFA97
Certificate serial:       79B648AAAAD5750009D68F299F558AAF403D1705
Authority key identifier: AF:C9:C4:F9:A8:69:7F:12:08:AC:7B:C2:BE:DC:12:1D:57:DC:FA:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC9C4F9A8697F1208AC7BC2BEDC121D57DCFA97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/0/3136382e3232382e37362e302f32322d3233203d3e20323632383431.roa
Signing time:             Thu 29 Oct 2026 17:44:26 +0000
ROA not before:           Thu 29 Oct 2026 17:39:26 +0000
ROA not after:            Thu 28 Oct 2027 17:44:26 +0000
asID:                     262841
IP address blocks:        168.228.76.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/0/AFC9C4F9A8697F1208AC7BC2BEDC121D57DCFA97.crl
                          rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/0/AFC9C4F9A8697F1208AC7BC2BEDC121D57DCFA97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC9C4F9A8697F1208AC7BC2BEDC121D57DCFA97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 03:48:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:b6:48:aa:aa:d5:75:00:09:d6:8f:29:9f:55:8a:af:40:3d:17:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFC9C4F9A8697F1208AC7BC2BEDC121D57DCFA97
        Validity
            Not Before: Oct 29 17:39:26 2026 GMT
            Not After : Oct 28 17:44:26 2027 GMT
        Subject: CN=9643DDEA3B1036B7FD37753B07D4695A5A055F68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fb:74:d5:79:7c:61:48:7b:c7:b4:41:7e:da:
                    09:ad:b3:9e:7b:bc:76:50:41:e9:08:7f:8f:71:c2:
                    cd:f5:e4:0d:81:9a:28:6a:99:be:d3:c8:c7:76:a6:
                    07:9d:31:73:6f:f9:5f:33:86:63:0c:9a:e4:f4:99:
                    ac:68:af:13:da:94:12:2f:aa:08:68:f1:f9:7d:62:
                    22:51:a8:15:87:a7:4b:19:ec:8e:64:0b:7d:42:7a:
                    e0:34:a9:cb:fc:00:5f:15:88:64:9c:68:19:1e:3d:
                    85:cb:c5:5e:5b:08:89:46:15:5e:30:4c:51:3e:db:
                    e8:39:8e:10:40:3b:1a:2b:bf:57:3d:d3:1b:22:a0:
                    2a:57:98:c7:33:ff:fc:0d:1d:b7:81:b8:5a:44:71:
                    a2:19:8c:c4:9c:19:fb:f5:cb:33:f0:4c:59:1f:ae:
                    6e:84:ce:f0:ec:5d:0a:a8:14:5e:1e:e4:23:04:1c:
                    19:31:2a:56:54:a1:75:19:6f:cc:b6:ed:f0:9a:2f:
                    9c:d7:71:50:02:59:6c:14:80:24:06:e0:26:25:83:
                    27:78:17:64:f0:9f:c4:62:0a:e7:a8:f8:2c:36:b1:
                    9b:ba:58:74:09:12:39:6e:18:3b:c7:d4:01:f1:e3:
                    4a:77:36:7e:da:81:98:2c:8b:69:61:b5:28:55:8a:
                    f9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:43:DD:EA:3B:10:36:B7:FD:37:75:3B:07:D4:69:5A:5A:05:5F:68
            X509v3 Authority Key Identifier:
                keyid:AF:C9:C4:F9:A8:69:7F:12:08:AC:7B:C2:BE:DC:12:1D:57:DC:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/0/AFC9C4F9A8697F1208AC7BC2BEDC121D57DCFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC9C4F9A8697F1208AC7BC2BEDC121D57DCFA97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/0/3136382e3232382e37362e302f32322d3233203d3e20323632383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:b9:6a:43:b5:87:92:f2:d3:37:e1:92:9c:1c:7f:55:52:26:
         48:8f:21:5b:29:14:5d:e1:3a:50:6a:a7:6a:95:14:4b:f0:fd:
         d6:9b:7c:1a:08:aa:1c:65:cc:ac:5d:7b:1d:6b:66:1f:d7:23:
         af:2b:16:c7:74:75:c0:0a:e8:3b:4d:7c:b6:d8:f5:22:80:7c:
         92:bb:4d:b2:0a:9e:52:74:14:dc:de:fc:04:cc:58:4e:92:9d:
         44:49:ca:9d:f7:56:c6:25:23:3b:7b:b5:75:b0:71:36:e2:20:
         87:e8:d9:5b:17:32:c1:fc:82:c9:3e:96:ac:cd:2f:09:b9:44:
         39:87:c9:6d:22:42:06:2c:88:40:b4:46:dd:86:92:bb:01:f2:
         9d:a8:55:05:3a:2f:1a:e2:ff:5a:48:91:b3:6b:7b:18:b8:fc:
         18:19:ee:bb:54:c5:c5:ba:14:1d:73:7a:32:57:16:51:8b:1b:
         25:88:31:7a:26:fc:29:9d:0f:7e:50:bd:f4:95:69:68:74:bd:
         e2:de:75:31:43:cc:33:55:18:6a:9a:cf:27:2a:92:39:c0:3e:
         05:39:21:e5:c6:de:06:64:f5:3c:20:af:c1:5e:0e:16:7f:a7:
         e1:6a:ad:6d:1c:67:ea:20:fb:ba:98:ea:26:2f:74:03:de:a7:
         5a:4e:5a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 21:04:44 2026 by rpki-client