Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/3230302e392e38382e302f32322d3234203d3e203532363839.roa
File:                     3230302e392e38382e302f32322d3234203d3e203532363839.roa (raw, json)
Hash identifier:          3EFXWI8z99LFls8jbSEzmfbmJqCYOLGCDz3xMDvscu8=
Subject key identifier:   02:61:31:19:7A:D5:2B:62:B1:BD:B0:0D:2D:99:DE:32:C5:85:BF:61
Certificate issuer:       /CN=8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE
Certificate serial:       0B7C7018245B7D56D18119F2BFC74E50EBD76EE1
Authority key identifier: 8E:59:6F:31:F6:CF:E5:70:78:B1:30:3E:68:FE:BD:EE:EA:F9:6D:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/3230302e392e38382e302f32322d3234203d3e203532363839.roa
Signing time:             Fri 30 Jan 2026 15:48:11 +0000
ROA not before:           Fri 30 Jan 2026 15:43:11 +0000
ROA not after:            Fri 29 Jan 2027 15:48:11 +0000
asID:                     52689
IP address blocks:        200.9.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.crl
                          rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 20:48:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:7c:70:18:24:5b:7d:56:d1:81:19:f2:bf:c7:4e:50:eb:d7:6e:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE
        Validity
            Not Before: Jan 30 15:43:11 2026 GMT
            Not After : Jan 29 15:48:11 2027 GMT
        Subject: CN=026131197AD52B62B1BDB00D2D99DE32C585BF61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:eb:1f:7e:41:64:72:08:62:17:5a:28:16:dc:
                    9a:c2:39:23:31:0a:37:74:1c:30:4e:43:88:d8:e1:
                    98:07:7a:e9:75:e8:07:4c:95:4d:dc:c2:58:c8:a0:
                    bf:1f:5d:94:ae:38:24:fd:b0:c8:24:01:cd:04:2f:
                    72:26:21:ba:69:e6:7d:ff:0c:1f:75:1d:01:78:ef:
                    e7:9b:ba:45:c3:ba:ff:d4:7a:b3:37:4e:5b:72:0c:
                    fa:33:1e:44:fd:2f:22:20:74:da:84:da:66:56:23:
                    21:a5:8f:fc:3e:28:85:58:3d:37:c9:26:a8:11:69:
                    a5:e4:84:38:c6:40:4f:72:4f:f9:e0:79:90:f0:70:
                    22:ae:f1:6e:01:f9:e6:2c:33:51:32:f5:49:87:4b:
                    af:63:24:5f:a5:19:37:2a:fc:1a:02:3d:61:4b:a3:
                    9c:dc:30:72:bf:ba:ac:06:5e:91:1b:48:3c:d0:7a:
                    e6:1c:4f:fc:18:2a:82:b9:20:bf:c7:e7:de:6f:c3:
                    75:a4:8c:1e:7c:e2:a8:28:f1:6a:9d:c8:63:8f:be:
                    0f:39:3d:ff:7b:42:6c:4d:6b:9e:86:4f:dd:aa:ca:
                    ef:9b:3a:ff:13:f7:9a:ef:35:5f:3a:bd:3b:84:14:
                    39:6c:56:d6:eb:fb:73:92:44:01:b9:1a:c9:1a:19:
                    12:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:61:31:19:7A:D5:2B:62:B1:BD:B0:0D:2D:99:DE:32:C5:85:BF:61
            X509v3 Authority Key Identifier:
                keyid:8E:59:6F:31:F6:CF:E5:70:78:B1:30:3E:68:FE:BD:EE:EA:F9:6D:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/3230302e392e38382e302f32322d3234203d3e203532363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:07:82:26:ab:d0:16:10:49:13:ea:11:c9:9c:85:86:d1:a2:
         4d:5e:b8:8a:07:4e:41:96:e0:59:41:44:2c:57:55:b6:ce:db:
         e0:23:90:69:f4:cf:c4:e5:6d:de:c6:2f:8b:b9:7d:7b:59:66:
         36:98:10:01:76:d4:55:f2:a6:32:ab:22:2f:87:98:9e:94:60:
         9c:4e:cb:77:76:2f:32:ab:d4:ab:27:8f:3a:37:c0:a2:a3:1b:
         60:01:37:09:6d:c4:26:b0:63:b4:ca:d1:de:ce:f4:04:7c:5f:
         85:21:ce:bb:15:a9:b6:63:cd:4d:59:2e:bb:00:51:2c:06:2d:
         d6:08:99:0d:ae:c7:3d:ee:db:21:fa:80:f3:4f:26:89:f7:6c:
         6c:26:8a:6b:f6:5d:67:0c:1e:ba:26:83:55:66:5b:23:87:8a:
         e7:bb:7a:15:2f:fc:77:5c:10:96:52:6d:bb:2d:a0:8a:ac:96:
         f4:9e:62:70:19:88:e9:c3:0e:9b:4c:d3:9c:1b:be:51:6d:18:
         54:23:be:08:80:81:86:a6:55:b9:ee:b8:05:fe:7b:ee:06:bd:
         44:3f:41:f1:02:0e:16:4a:fe:01:9e:fb:44:a5:f9:cf:b6:49:
         8d:41:30:56:69:78:25:33:93:56:4d:9e:e5:90:fb:2b:b0:86:
         f4:02:5f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:59:03 2026 by rpki-client