Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/93JWbGHXriqMs8bp8oE2sY8ob9f9kBJxTj118mRThKYf/0/3136382e3139352e32342e302f32322d3232203d3e20323635343234.roa
File:                     3136382e3139352e32342e302f32322d3232203d3e20323635343234.roa (raw, json)
Hash identifier:          KCBpuzxIJP1Ns9dMXCYMrMiYj2cndI6CGMMQXtPZ/zw=
Subject key identifier:   38:E8:11:0D:C4:CA:AF:30:88:28:32:57:2E:7C:00:80:13:EF:6A:EE
Certificate issuer:       /CN=5620BBE89DDD132481A293EA8E9BB36E74EBF02E
Certificate serial:       78756CFEEE379E2DD6997EAC429A11517B299080
Authority key identifier: 56:20:BB:E8:9D:DD:13:24:81:A2:93:EA:8E:9B:B3:6E:74:EB:F0:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5620BBE89DDD132481A293EA8E9BB36E74EBF02E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/93JWbGHXriqMs8bp8oE2sY8ob9f9kBJxTj118mRThKYf/0/3136382e3139352e32342e302f32322d3232203d3e20323635343234.roa
Signing time:             Thu 20 Aug 2026 18:14:26 +0000
ROA not before:           Thu 20 Aug 2026 18:09:26 +0000
ROA not after:            Thu 19 Aug 2027 18:14:26 +0000
asID:                     265424
IP address blocks:        168.195.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/93JWbGHXriqMs8bp8oE2sY8ob9f9kBJxTj118mRThKYf/0/5620BBE89DDD132481A293EA8E9BB36E74EBF02E.crl
                          rsync://rpki-repo.registro.br/repo/93JWbGHXriqMs8bp8oE2sY8ob9f9kBJxTj118mRThKYf/0/5620BBE89DDD132481A293EA8E9BB36E74EBF02E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5620BBE89DDD132481A293EA8E9BB36E74EBF02E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 20:54:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:75:6c:fe:ee:37:9e:2d:d6:99:7e:ac:42:9a:11:51:7b:29:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5620BBE89DDD132481A293EA8E9BB36E74EBF02E
        Validity
            Not Before: Aug 20 18:09:26 2026 GMT
            Not After : Aug 19 18:14:26 2027 GMT
        Subject: CN=38E8110DC4CAAF30882832572E7C008013EF6AEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a5:7f:5b:78:a1:b0:b4:53:46:b9:4f:fb:3e:
                    29:49:1f:57:af:05:54:26:90:88:af:a2:aa:5d:7f:
                    e0:b3:f9:15:ca:33:d7:5f:ce:39:74:1d:f2:c6:12:
                    d8:25:df:51:3f:9b:fe:92:5b:6a:6e:48:b8:e3:95:
                    d4:e3:82:f5:db:40:b9:ed:de:e6:25:33:ff:06:6b:
                    2f:26:0d:91:ef:a4:6f:a4:6c:c9:50:97:8d:20:ae:
                    b5:bf:76:49:c5:8b:4d:10:49:10:55:b0:e5:31:76:
                    f1:67:ef:04:1e:53:95:89:33:01:6e:61:c8:67:e6:
                    73:f0:a7:e4:5f:7c:6e:6f:ed:88:bd:fb:bd:3c:42:
                    3a:a1:37:ff:ef:70:de:50:ed:f0:5e:7b:e3:1b:90:
                    ce:5c:37:15:18:4d:d1:b8:04:7e:b6:1b:ef:d3:a4:
                    37:47:db:a9:e1:d5:93:f2:43:2c:95:ce:dc:a5:c6:
                    18:60:e8:08:9f:72:56:e7:8c:19:55:68:61:67:89:
                    3d:bd:09:1c:5b:d4:22:46:60:83:b5:c5:56:37:bd:
                    ac:80:e6:c2:7f:8f:c8:6f:c2:f0:b6:ad:7b:09:f7:
                    88:89:7c:28:9a:26:3d:78:fa:cb:6c:d6:e2:59:d6:
                    8d:c4:a0:d0:e1:0c:d3:a5:f7:ff:e1:a5:91:10:c9:
                    58:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E8:11:0D:C4:CA:AF:30:88:28:32:57:2E:7C:00:80:13:EF:6A:EE
            X509v3 Authority Key Identifier:
                keyid:56:20:BB:E8:9D:DD:13:24:81:A2:93:EA:8E:9B:B3:6E:74:EB:F0:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/93JWbGHXriqMs8bp8oE2sY8ob9f9kBJxTj118mRThKYf/0/5620BBE89DDD132481A293EA8E9BB36E74EBF02E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5620BBE89DDD132481A293EA8E9BB36E74EBF02E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/93JWbGHXriqMs8bp8oE2sY8ob9f9kBJxTj118mRThKYf/0/3136382e3139352e32342e302f32322d3232203d3e20323635343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cb:94:43:d7:bb:52:d8:0d:68:bf:05:db:16:b9:94:45:b6:71:
         6c:12:4c:37:a7:d5:04:57:8d:f2:25:47:d0:7f:59:4e:16:74:
         5e:ff:8f:c8:a2:87:c4:0d:0c:4f:67:40:c3:c4:c8:cd:02:8a:
         4e:15:97:02:aa:b1:59:d9:cc:1e:2f:a0:0d:06:6c:d1:3b:2b:
         08:58:3c:ca:db:7d:fc:84:fd:11:de:61:b3:07:43:74:fc:99:
         42:5c:79:c9:52:e4:78:29:aa:fd:be:46:54:7c:6c:c6:56:17:
         e2:67:12:e7:be:ae:c9:f4:f5:f5:99:52:3b:ed:70:4e:d2:1e:
         15:09:7a:d2:aa:99:ae:36:6f:78:df:12:79:b8:32:9a:8c:64:
         62:65:c7:8d:ec:38:61:32:c8:ae:05:00:2c:fa:53:22:02:63:
         4e:7a:6f:c2:44:95:a9:93:2b:cd:3b:0d:f8:bb:c0:77:8f:ec:
         8b:48:63:4b:22:e7:b1:5c:85:3c:a7:88:3a:ef:14:5d:15:99:
         86:77:1b:de:94:55:b4:cb:34:1c:09:64:12:2f:ca:af:41:68:
         27:97:30:48:7a:73:cb:f4:f6:86:0a:f1:95:15:27:f7:30:c0:
         5b:3b:ec:bd:aa:15:68:44:5e:8c:1a:ba:5e:3f:68:0e:f1:42:
         6e:74:59:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 05:40:49 2026 by rpki-client