Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3230302e3139362e3133362e302f32322d3234203d3e203631373736.roa
File:                     3230302e3139362e3133362e302f32322d3234203d3e203631373736.roa (raw, json)
Hash identifier:          sM8pGXBta2CsfO/cRZ88Mub/NYyqSRk20RgGuwSYVHA=
Subject key identifier:   AC:CD:DB:8E:04:46:12:73:FF:52:E7:CC:B6:6E:8D:AC:74:87:40:E7
Certificate issuer:       /CN=F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF
Certificate serial:       65F1D0C20D5F182E8FC65487325F8F7B944CD031
Authority key identifier: F1:13:E4:BF:5F:24:27:FB:9B:04:FC:6A:FA:D7:3C:3C:C3:CF:99:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3230302e3139362e3133362e302f32322d3234203d3e203631373736.roa
Signing time:             Sat 24 Oct 2026 00:32:16 +0000
ROA not before:           Sat 24 Oct 2026 00:27:16 +0000
ROA not after:            Sat 23 Oct 2027 00:32:16 +0000
asID:                     61776
IP address blocks:        200.196.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF.crl
                          rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 00:34:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:f1:d0:c2:0d:5f:18:2e:8f:c6:54:87:32:5f:8f:7b:94:4c:d0:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF
        Validity
            Not Before: Oct 24 00:27:16 2026 GMT
            Not After : Oct 23 00:32:16 2027 GMT
        Subject: CN=ACCDDB8E04461273FF52E7CCB66E8DAC748740E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:db:16:cd:d0:66:de:d9:94:bc:03:89:74:b8:
                    19:26:87:82:00:75:51:b7:53:0e:4f:85:25:2b:12:
                    28:1a:0f:a3:a7:fa:6b:ab:4b:6e:ff:9b:9b:cf:72:
                    5d:b0:b0:89:f4:ff:9a:8f:59:21:f6:bd:35:b3:20:
                    dd:70:d1:5e:16:ca:54:e1:e0:d5:1a:bf:52:70:cf:
                    58:eb:b6:8c:2c:e0:b7:13:11:a8:d9:b2:3c:7b:20:
                    ca:e0:49:11:0c:a3:7b:6a:0b:07:88:b3:ac:48:e7:
                    a4:f6:07:03:1c:61:e1:0c:1b:fa:d8:22:f6:86:ed:
                    86:14:e7:aa:cb:30:52:ab:76:ee:f7:1d:47:bd:f8:
                    19:25:e7:54:37:b2:ff:63:0b:e9:db:b4:e2:36:b2:
                    e6:6f:9d:7b:f7:72:59:e1:7f:b1:55:dc:cb:c3:6e:
                    5d:36:54:4b:60:6c:96:58:1d:05:3e:73:4f:c3:26:
                    40:d6:46:5e:a0:e9:ea:9b:8b:63:62:08:aa:8e:4e:
                    45:c3:8d:1d:15:21:c0:b5:86:8f:be:b1:b2:ee:87:
                    ce:39:19:fc:87:03:ef:12:17:44:2a:00:b6:05:59:
                    2e:d5:48:98:35:39:b4:3d:d5:26:8b:5e:46:56:d2:
                    48:ac:38:7d:09:19:47:b5:21:13:82:d1:8f:fc:2b:
                    bc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:CD:DB:8E:04:46:12:73:FF:52:E7:CC:B6:6E:8D:AC:74:87:40:E7
            X509v3 Authority Key Identifier:
                keyid:F1:13:E4:BF:5F:24:27:FB:9B:04:FC:6A:FA:D7:3C:3C:C3:CF:99:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3230302e3139362e3133362e302f32322d3234203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:63:35:54:b0:ac:fb:15:b0:a8:48:b7:4e:db:63:0d:51:b9:
         dd:38:b1:32:e6:2e:95:32:99:d5:aa:bc:b9:32:69:0a:8f:ae:
         19:fd:dd:fd:28:cf:fc:11:aa:2e:0f:c4:e3:6b:4a:59:fd:cb:
         f6:f2:bb:70:eb:94:bf:af:69:99:98:72:23:dc:f0:07:76:85:
         d5:bd:4a:b8:40:bb:83:d8:5b:d8:42:7d:91:7d:24:0c:f6:09:
         c8:c5:48:03:ed:58:93:d0:fc:58:81:3a:11:5f:ec:a6:12:3b:
         1a:f4:d9:79:e0:32:d6:75:94:2c:ab:d5:cc:b3:e4:ab:70:31:
         db:f7:ae:b2:d9:3d:f1:61:0b:9c:ca:ca:72:9a:cf:65:a1:c9:
         fa:a7:19:4a:d4:7a:eb:c3:68:65:85:75:2d:70:97:e8:3f:da:
         84:2e:a4:c1:cc:40:7a:f5:34:ac:d5:bf:cf:c4:7a:c5:d1:27:
         76:2b:ac:b0:d5:bd:0e:c3:ba:a0:d9:f3:5d:52:1f:27:3f:ca:
         f2:ff:f1:d4:32:c5:82:e8:58:d2:79:99:02:92:90:a3:fe:64:
         e3:65:6c:4b:da:5e:c9:f5:75:50:f2:7d:db:1a:78:4f:bd:d5:
         11:89:f2:83:dc:71:34:66:82:9f:af:65:4d:7a:4b:4b:47:13:
         7d:11:03:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 18:56:05 2026 by rpki-client